Function at 0x10044272
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x1007dca5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x128
push ebx
push esi
push edi
mov edi, ecx
mov dword [esp + 0x48], edx
xor ecx, ecx
mov dword [esp + 0x34], edi
cmp dword [edi + 0x10], ecx
jne 0x100442ae
xor al, al
jmp 0x10044e2c
mov dword [esp + 0x14], 0x2e8
mov dword [esp + 0x10], ecx
jmp 0x100442cc
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x3c], 0x99841b3c
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 2
jl 0x100442bc
push 1
mov dword [esp + 0x40], 8
pop ebx
jmp 0x10044351
mov dword [esp + 0x28], 0x7d1649bc
mov dword [esp + 0x10], ecx
jmp 0x100442fe
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x60], 0xd0657689
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 2
jl 0x100442ee
mov edx, dword [esp + 0x60]
xor ecx, ecx
mov eax, dword [esp + 0x60]
sub edx, eax
mov eax, dword [esp + 0x3c]
cmp edx, eax
push 5
setge cl
pop eax
sub eax, ecx
jne 0x10044325
mov eax, dword [esp + 0x64]
mov eax, dword [esp + 0x60]
xor ecx, ecx
mov eax, dword [esp + 0x3c]
mov eax, dword [esp + 0x3c]
mov eax, dword [esp + 0x40]
mov eax, dword [esp + 0x40]
cmp dword [esp + 0x14], ecx
jge 0x10044343
jne 0x10044347
mov eax, ecx
je 0x10044349
mov eax, ebx
mov dword [esp + 0x28], eax
dec dword [esp + 0x3c]
cmp dword [esp + 0x3c], 0xffffffe5
jg 0x100442e0
push 3
mov dword [esp + 0x18], ecx
pop esi
jmp 0x1004446f
mov dword [esp + 0x18], 0xad901516
mov dword [esp + 0x18], ebx
cmp dword [esp + 0x18], ecx
jl 0x1004446b
push ebx
lea ecx, [esp + 0xd0]
call fcn.1000a8a0
xor edx, edx
mov dword [esp + 0x10], edx
jmp 0x100443a1
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xcc]
mov dword [eax + ecx*4], edx
inc dword [esp + 0x10]
cmp dword [esp + 0x10], ebx
jl 0x1004438f
mov eax, dword [esp + 0xcc]
mov dword [eax], edx
mov dword [esp + 0x10], edx
jmp 0x100443c9
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x84], 2
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 4
jl 0x100443b6
mov dword [esp + 0x84], edx
jmp 0x100443e4
mov dword [esp + eax*4 + 0x3c], ebx
inc dword [esp + 0x84]
cmp dword [esp + 0x84], 2
mov eax, dword [esp + 0x84]
jl 0x100443d9
mov eax, dword [esp + 0x18]
mov ecx, 0xee00b46f
mov edx, dword [esp + 0x8c]
cmp ecx, eax
push 0
sbb eax, eax
neg eax
sub edx, eax
mov eax, dword [esp + 0x1c]
neg edx
sbb edx, edx
xor ecx, ecx
mov eax, dword [esp + eax*4 + 0x40]
inc edx
cmp eax, 0x16c28cbd
mov eax, dword [esp + 0x1c]
setne cl
sub edx, eax
add edx, esi
imul ecx, edx
pop edx
cmp ecx, 7
sbb eax, eax
neg eax
add eax, 0x65cab430
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0xcc]
inc dword [eax]
cmp dword [eax], ebx
jle 0x100443b0
lea ecx, [esp + 0xcc]
call fcn.1000a989
dec dword [esp + 0x18]
jns 0x1004437a
xor ecx, ecx
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 0x1b
jg 0x10044364
push 5
pop eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x18], ecx
mov dword [esp + 0x10], ecx
jmp 0x100444aa
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x120], 0x67120dd9
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 4
jl 0x10044497
mov dword [esp + 0x18], ecx
jmp 0x100445ea
mov dword [esp + 0x10], ecx
jmp 0x100444d0
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x2c], 0x8c66f5a9
inc dword [esp + 0x10]
cmp dword [esp + 0x10], ebx
jl 0x100444c0
mov dword [esp + 0x2c], esi
cmp dword [esp + 0x2c], ecx
jl 0x100445e2
mov dword [esp + 0x14], 0xfffffffd
mov dword [esp + 0x28], ecx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x14], ecx
jmp 0x100445ce
mov dword [esp + 0x10], 0x7b844a75
mov dword [esp + 0x10], ecx
cmp dword [esp + 0x10], esi
jg 0x100445b2
mov dword [esp + 0x28], ebx
xor ebx, ebx
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x128]
add ecx, 0x9ac5b813
cmp ecx, eax
mov eax, dword [esp + 0x14]
setg bl
xor edx, edx
mov ecx, dword [esp + eax*4 + 0x50]
mov eax, dword [esp + 0x14]
mov eax, dword [esp + eax*4 + 0x50]
cmp ecx, eax
mov eax, dword [esp + 0x14]
setle dl
xor ecx, ecx
mov eax, dword [esp + eax*4 + 0x50]
cmp ebx, eax
setle cl
xor eax, eax
cmp edx, ecx
setge al
add eax, 0x193f
mov dword [esp + 0x28], eax
cmp dword [esp + 0x10], 0
je 0x1004457e
mov eax, dword [esp + 0x14]
cmp dword [esp + eax*4 + 0x50], 0
je 0x1004457e
xor ebx, ebx
inc ebx
mov esi, ebx
jmp 0x10044583
xor ebx, ebx
xor esi, esi
inc ebx
mov ecx, dword [esp + 0x2c]
xor edx, edx
mov eax, dword [esp + 0x54]
cmp ecx, eax
push 3
setg dl
xor eax, eax
cmp edx, esi
pop esi
setge al
neg eax
mov dword [esp + 0x28], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], esi
jle 0x10044513
xor ecx, ecx
mov eax, dword [esp + 0x54]
mov eax, dword [esp + 0x54]
mov eax, dword [esp + 0x2c]
mov eax, dword [esp + 0x2c]
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x28], eax
inc dword [esp + 0x14]
cmp dword [esp + 0x14], esi
jle 0x100444fd
dec dword [esp + 0x2c]
jns 0x100444e4
mov eax, dword [esp + 0x2c]
inc dword [esp + 0x18]
cmp dword [esp + 0x18], esi
jle 0x100444ba
mov dword [esp + 0x18], 0xffffffe5
jmp 0x10044633
mov dword [esp + 0x10], 0xf0790389
mov dword [esp + 0x10], ecx
jmp 0x10044629
mov eax, dword [esp + 0x10]
cmp dword [esp + eax*4 + 0x50], ecx
jne 0x1004462f
mov edx, 0x495f
xor cl, cl
call fcn.100438e7
inc dword [esp + 0x10]
push 0
pop ecx
cmp dword [esp + 0x10], esi
jle 0x1004460c
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 0xb
je 0x100445fe
push ebx
lea ecx, [esp + 0x6c]
call fcn.1000a8a0
xor edx, edx
mov dword [esp + 0x13c], edx
mov dword [esp + 0x14], 0x18885c6f
mov dword [esp + 0x28], ebx
mov dword [esp + 0x1c], 0x5718a84d
mov dword [esp + 0x24], 0xb62e56c
mov dword [esp + 0xb8], 0xefb40acb
mov dword [esp + 0x10], edx
jmp 0x10044689
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x68]
mov dword [eax + ecx*4], ebx
inc dword [esp + 0x10]
cmp dword [esp + 0x10], ebx
jl 0x1004467a
mov dword [esp + 0x14], edx
cmp dword [esp + 0x14], edx
jl 0x100448a4
push 5
pop eax
mov dword [esp + 0x18], eax
lea ecx, [esp + 0xd8]
mov dword [esp + 0xa8], eax
push ebx
call fcn.1000a8a0
xor edx, edx
mov byte [esp + 0x13c], bl
mov dword [esp + 0x18], edx
jmp 0x100446d9
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0xd8]
mov dword [eax + ecx*4], edx
inc dword [esp + 0x18]
cmp dword [esp + 0x18], ebx
jl 0x100446c7
push 2
mov dword [esp + 0x1c], edx
pop ecx
jmp 0x100446f7
mov eax, dword [esp + 0x18]
mov dword [esp + eax*4 + 0x10c], ecx
inc dword [esp + 0x18]
cmp dword [esp + 0x18], ecx
jl 0x100446e8
mov dword [esp + 0x18], edx
cmp dword [esp + 0x18], edx
jl 0x10044883
push esi
lea ecx, [esp + 0xf4]
call fcn.1000a8a0
mov dword [esp + 0x4c], 6
mov dword [esp + 0x1c], 0
mov dword [esp + 0xbc], 0xecd44262
mov dword [esp + 0x10], 0
jmp 0x10044753
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xf0]
mov dword [eax + ecx*4], 0x23d1bca9
inc dword [esp + 0x10]
cmp dword [esp + 0x10], esi
jl 0x1004473d
mov edi, dword [esp + 0xf0]
and dword [edi + 4], 0
mov ecx, dword [edi + 4]
mov eax, dword [esp + 0x68]
mov dword [esp + 0x10], 0xebf085f
mov dword [esp + 0x1c], 0
cmp dword [eax + ecx*4], 0
je 0x100447f0
mov dword [esp + 0x1c], ebx
mov eax, dword [esp + 0x1c]
mov edx, dword [edi + 4]
xor eax, eax
cmp dword [edi + 4], ebx
setl al
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x1c]
imul ecx, dword [eax + edx*4]
cmp ecx, dword [esp + 0x14]
je 0x100447b5
cmp dword [esp + 0x18], 0
jne 0x100447b5
xor eax, eax
jmp 0x100447b7
mov eax, ebx
mov esi, dword [edi + 4]
xor ecx, ecx
cmp eax, ebx
mov eax, dword [esp + 0x68]
setle cl
xor edx, edx
cmp ecx, dword [eax + esi*4]
mov eax, dword [esp + 0x14]
setl dl
xor ebx, ebx
cmp edx, 0x8679
setle bl
xor ecx, ecx
cmp eax, ebx
setl cl
xor ebx, ebx
inc ebx
sub ecx, dword [esp + 0x14]
je 0x100447f0
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x24], 0xe0c2df10
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x1c]
mov eax, dword [esp + 0xb8]
mov eax, dword [esp + 0x24]
mov eax, dword [esp + 0x28]
mov eax, dword [esp + 0xbc]
mov eax, dword [esp + 0xa8]
mov eax, dword [esp + 0x4c]
push 5
pop ecx
sub ecx, eax
je 0x10044841
mov ecx, dword [edi + 4]
mov eax, dword [esp + 0x68]
cmp dword [eax + ecx*4], 0
je 0x10044841
mov ecx, ebx
jmp 0x10044843
xor ecx, ecx
mov eax, dword [esp + 0xd8]
mov dword [eax], ecx
mov eax, dword [esp + 0x28]
mov eax, dword [esp + 0x110]
add eax, dword [esp + 0x1c]
dec dword [edi + 4]
mov dword [esp + 0x10], eax
jns 0x10044764
lea ecx, [esp + 0xf0]
call fcn.1000a989
dec dword [esp + 0x18]
push 3
pop esi
jns 0x1004470b
xor edx, edx
lea ecx, [esp + 0xd8]
mov byte [esp + 0x13c], dl
call fcn.1000a989
dec dword [esp + 0x14]
jns 0x1004469d
mov edi, dword [esp + 0x34]
or dword [esp + 0x13c], 0xffffffff
lea ecx, [esp + 0x68]
call fcn.1000a989
lea edx, [esp + 0x48]
mov cl, bl
call fcn.100438e7
mov dword [esp + 0x14], 7
mov dword [esp + 0x1c], 0xffffffff
mov dword [esp + 0x1c], 0xdae5a60d
mov dword [esp + 0x28], 0x2949f4ff
mov dword [esp + 0x24], 0xfb26c4f3
mov eax, dword [esp + 0x14]
mov dword [esp + 0x1c], eax
cmp dword [esp + 0x1c], 0
jne 0x10044902
cmp dword [esp + 0x14], 0
jne 0x10044902
xor ecx, ecx
jmp 0x10044904
mov ecx, ebx
mov eax, dword [esp + 0x14]
xor edx, edx
imul eax, ecx
mov dword [esp + 0x1c], eax
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x14]
cmp ecx, eax
mov eax, dword [esp + 0x14]
setne dl
inc edx
neg edx
sbb edx, edx
add edx, 0xa
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setle cl
add ecx, dword [esp + 0x1c]
mov dword [esp + 0x28], ecx
je 0x100449c4
xor ecx, ecx
mov dword [esp + 0x34], 0xb8fa48a2
mov dword [esp + 0x18], ecx
jmp 0x10044967
mov eax, dword [esp + 0x18]
mov dword [esp + eax*4 + 0xa4], 0x329e
inc dword [esp + 0x18]
cmp dword [esp + 0x18], ebx
jl 0x10044954
mov dword [esp + 0x18], ecx
jmp 0x10044982
mov eax, dword [esp + 0x18]
mov dword [esp + eax*4 + 0xb4], ecx
inc dword [esp + 0x18]
cmp dword [esp + 0x18], ebx
jl 0x10044973
mov eax, dword [esp + 0x28]
mov eax, dword [esp + 0x1c]
mov eax, dword [esp + 0x34]
mov eax, dword [esp + 0x14]
mov dword [esp + 0x1c], ebx
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x14]
mov dword [esp + 0xa4], eax
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x24], ecx
jmp 0x100449d4
mov dword [esp + 0x34], 0xffffffff
mov eax, dword [esp + 0x24]
mov dword [esp + 0x34], eax
cmp dword [edi + 0x14], 0x10
jb 0x100449de
mov ecx, dword [edi]
jmp 0x100449e0
mov ecx, edi
cmp dword [edi + 0x14], 0x10
mov dword [esp + 0x44], ecx
jb 0x100449ee
mov edx, dword [edi]
jmp 0x100449f0
mov edx, edi
mov eax, dword [edi + 0x10]
add eax, edx
cmp ecx, eax
je 0x10044d18
mov dword [esp + 0xac], 0x3629aa8
mov dword [esp + 0xa0], 0x8900fdb6
mov dword [esp + 0xb0], 0x33563700
mov dword [esp + 0x94], 0x5ee56e31
mov byte [esp + 0x23], 0
cmp byte [esp + 0x23], 0
je 0x10044a3d
push 0
call fcn.1004638a
pop ecx
lea eax, [esp + 0x94]
push eax
push 0
lea eax, [esp + 0xa8]
push eax
lea eax, [esp + 0xb8]
push eax
lea eax, [esp + 0xc0]
push eax
call fcn.10045f1a
mov eax, dword [esp + 0x58]
add esp, 0x14
mov al, byte [eax]
cmp al, 0x30
jl 0x10044a98
cmp al, 0x39
jg 0x10044a98
lea eax, [esp + 0x48]
push eax
lea eax, [esp + 0x48]
push eax
push 0
push 0x2c96
call fcn.10046d3e
mov ecx, dword [esp + 0x54]
add esp, 0x10
inc ecx
jmp 0x100449e0
mov dword [esp + 0x18], 0x5683c8fc
xor edx, edx
mov dword [esp + 0x10], 0x4ee7d21
push 0xfffffffffffffffc
pop edi
mov dword [esp + 0x14], edi
mov dword [esp + 0x1c], 0xfffd
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x18]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x18]
sub eax, 0x68e79848
cmp eax, ebx
setge dl
xor ecx, ecx
add edx, dword [esp + 0x18]
mov eax, dword [esp + 0x10]
cmp eax, 0xfffffff6
setne cl
cmp ecx, edx
jle 0x10044bf3
push esi
lea ecx, [esp + 0x100]
call fcn.1000a8a0
mov dword [esp + 0x13c], 2
mov dword [esp + 0x24], 0xd86bdae8
mov dword [esp + 0x38], 0
jmp 0x10044b29
mov eax, dword [esp + 0x38]
mov dword [esp + eax*4 + 0x74], 0xc8b166c1
inc dword [esp + 0x38]
cmp dword [esp + 0x38], 4
jl 0x10044b19
lea eax, [esp + 0x38]
xor cl, cl
push eax
lea edx, [esp + 0x100]
call fcn.10043dd9
xor edx, edx
pop ecx
cmp dword [esp + 0x14], edx
jne 0x10044b6a
mov dword [esp + 0x10], 0xffffffff
mov eax, dword [esp + 0x80]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x80]
mov eax, dword [esp + 0x80]
mov ecx, ebx
sub ecx, eax
add dword [esp + 0x78], ecx
mov eax, dword [esp + 0x78]
mov dword [esp + 0x24], eax
cmp dword [esp + 0x14], edx
je 0x10044bcb
mov eax, dword [esp + 0x10]
mov ecx, 0xfad54077
mov eax, dword [esp + 0x1c]
cmp ecx, eax
mov eax, dword [esp + 0x7c]
sbb ecx, ecx
inc ecx
neg ecx
neg ecx
sbb ecx, ecx
inc ecx
add eax, ecx
mov ecx, dword [esp + 0x24]
imul ecx, eax
cmp ecx, dword [esp + 0x10]
je 0x10044bbb
mov ecx, edx
cmp dword [esp + 0x1c], edx
je 0x10044bbd
mov ecx, ebx
mov eax, dword [esp + 0x24]
sub ecx, eax
je 0x10044bcd
mov eax, dword [esp + 0x7c]
jmp 0x10044bcd
mov ebx, edx
mov eax, dword [esp + 0x24]
xor ecx, ecx
sub eax, ebx
cmp eax, 0x1fc5
setl cl
sub ecx, 0xac01
mov dword [esp + 0x24], ecx
lea ecx, [esp + 0xfc]
jmp 0x10044d07
push ebx
lea ecx, [esp + 0xc4]
call fcn.1000a8a0
push 0x1434
lea eax, [esp + 0xc4]
mov dword [esp + 0x140], esi
push eax
push 0x30d2
push 0
lea eax, [esp + 0x118]
push eax
push 0x50fc
call fcn.10046c70
add esp, 0x18
mov dword [esp + 0x14], 0
jmp 0x10044cd8
mov dword [esp + 0x10], 7
mov dword [esp + 0x34], 9
mov dword [esp + 0x24], 0
jmp 0x10044c6a
mov eax, dword [esp + 0x24]
mov dword [esp + eax*4 + 0x114], 0x1f6e690d
inc dword [esp + 0x24]
cmp dword [esp + 0x24], esi
jl 0x10044c57
cmp dword [esp + 0x10], 0
jne 0x10044caf
cmp dword [esp + 0x1c], 0
jne 0x10044c82
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x1c]
xor edx, edx
mov eax, dword [esp + 0xc0]
mov eax, dword [eax]
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0x11c]
mov eax, dword [esp + 0x1c]
cmp eax, ecx
setle dl
cmp dword [esp + 0x10], edx
jg 0x10044caf
xor edx, edx
jmp 0x10044cb1
mov edx, ebx
mov eax, dword [esp + 0x10]
xor ecx, ecx
cmp edx, eax
mov eax, 0x9700a5ff
setne cl
imul ecx, dword [esp + 0x10]
cmp eax, ecx
mov eax, dword [esp + 0xc0]
sbb ecx, ecx
inc ecx
mov dword [eax], ecx
dec dword [esp + 0x14]
cmp dword [esp + 0x14], edi
jle 0x10044c3d
mov byte [esp + 0x23], 0
cmp byte [esp + 0x23], 0
je 0x10044d00
push 0x20fd
mov edx, 0x6b03
mov cl, bl
call fcn.10043dd9
pop ecx
lea ecx, [esp + 0xc0]
call fcn.1000a989
mov eax, dword [esp + 0x48]
and dword [eax], 0
jmp 0x100442a7
push 4
pop edi
push edi
lea ecx, [esp + 0xe8]
call fcn.1000a8a0
mov dword [esp + 0x13c], edi
mov dword [esp + 0x14], ebx
mov dword [esp + 0x1c], 0
jmp 0x10044d53
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0xe4]
mov dword [eax + ecx*4], 7
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], edi
jl 0x10044d3d
mov dword [esp + 0x14], esi
cmp dword [esp + 0x14], 0
jl 0x10044e1e
mov dword [esp + 0x1c], 0
jmp 0x10044d85
mov eax, dword [esp + 0x1c]
mov dword [esp + eax*4 + 0x98], 0x7928fbc7
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], 2
jl 0x10044d72
mov eax, dword [esp + 0x9c]
xor edx, edx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x9c]
mov eax, dword [esp + 0x14]
cmp eax, ecx
mov eax, dword [esp + 0xe4]
setne dl
xor ecx, ecx
cmp edx, dword [eax]
mov edx, 0xffff9e41
mov eax, dword [esp + 0x14]
setge cl
xor ebx, ebx
sub edx, ecx
cmp edx, eax
mov eax, dword [esp + 0x9c]
setne bl
xor ecx, ecx
cmp eax, 0x6efba1a4
setle cl
cmp ecx, ebx
jne 0x10044df3
lea eax, [esp + 0x33]
mov byte [esp + 0x33], 0
push eax
push 0
call fcn.100466eb
pop ecx
pop ecx
jmp 0x10044e11
mov byte [esp + 0x23], 0
cmp byte [esp + 0x23], 0
je 0x10044e0d
push 0x6b7a
push 0
call fcn.10044e7f
pop ecx
pop ecx
mov eax, dword [esp + 0x14]
dec dword [esp + 0x14]
jns 0x10044d68
xor ebx, ebx
inc ebx
lea ecx, [esp + 0xe4]
call fcn.1000a989
mov al, bl
mov ecx, dword [esp + 0x134]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret