Function at 0x10023120
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100342df
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x118
push ebx
push esi
push edi
mov eax, dword [0x10048024]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0xc4]
cmp dword [eax + 0x14c], 0xffffffff
jne 0x1002324c
mov ecx, dword [ebp - 0xc4]
add ecx, 0x120
call dword [sym.imp.MSVCP80.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
mov dword [ebp - 0xc8], eax
push 0
push 0
mov ecx, dword [ebp - 0xc4]
mov dl, byte [ecx + 0x13e]
push edx
mov eax, dword [ebp - 0xc4]
mov ecx, dword [eax + 0x1a8]
push ecx
mov edx, dword [ebp - 0xc4]
mov ax, word [edx + 0x13c]
push eax
mov ecx, dword [ebp - 0xc8]
push ecx
mov ecx, dword [ebp - 0xc4]
call fcn.10020d00
mov byte [ebp - 0xc9], al
movzx edx, byte [ebp - 0xc9]
test edx, edx
jne 0x1002324c
call sym.Comn.dll_GetObjectLog
mov dword [ebp - 0xd0], eax
push 0x209
push 0x1003b6f8
call fcn.1001fc90
add esp, 8
push eax
push str._s:_ConnectRemoteServer_failed.
mov eax, dword [ebp - 0xd0]
push eax
mov ecx, dword [ebp - 0xd0]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
call eax
add esp, 0xc
push 0x6a
lea ecx, [ebp - 0x44]
call fcn.10009f00
mov ecx, dword [eax]
mov dword [ebp - 0x40], ecx
push 0x10042bf4
lea edx, [ebp - 0x40]
push edx
call sub.MSVCR80.dll__CxxThrowException
mov ecx, dword [ebp - 0xc4]
add ecx, 0x20
call dword [sym.imp.MSVCP80.dll_public:_unsigned_int___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::size_void_const]
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0
jne 0x1002328a
push 0xc9
lea ecx, [ebp - 0x4c]
call fcn.10009f00
mov eax, dword [eax]
mov dword [ebp - 0x48], eax
push 0x10042bf4
lea ecx, [ebp - 0x48]
push ecx
call sub.MSVCR80.dll__CxxThrowException
push 9
call fcn.1001e2e0
add esp, 4
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0xc4]
add ecx, 0x20
call dword [sym.imp.MSVCP80.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
mov dword [ebp - 0xd8], eax
mov edx, dword [ebp - 0xd8]
push edx
push str.MAIL_FROM:__s__r_n
mov eax, dword [ebp - 0xc4]
mov ecx, dword [eax + 0x144]
push ecx
call dword [sym.imp.ntdll.dll_sprintf]
add esp, 0xc
mov edx, dword [ebp - 0x3c]
push edx
mov ecx, dword [ebp - 0xc4]
call fcn.100204c0
mov eax, dword [ebp - 0x3c]
push eax
mov ecx, dword [ebp - 0xc4]
call fcn.100201f0
mov ecx, dword [ebp - 0xc4]
add ecx, 0x154
call fcn.100079b0
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x10023326
push 0xcb
lea ecx, [ebp - 0x54]
call fcn.10009f00
mov ecx, dword [eax]
mov dword [ebp - 0x50], ecx
push 0x10042bf4
lea edx, [ebp - 0x50]
push edx
call sub.MSVCR80.dll__CxxThrowException
push 0xa
call fcn.1001e2e0
add esp, 4
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x1c], 0
jmp 0x10023345
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0xc4]
add ecx, 0x154
call fcn.100079b0
cmp dword [ebp - 0x1c], eax
jae 0x100233d0
mov ecx, dword [ebp - 0x1c]
push ecx
mov ecx, dword [ebp - 0xc4]
add ecx, 0x154
call fcn.100079f0
mov dword [ebp - 0xdc], eax
mov ecx, dword [ebp - 0xdc]
add ecx, 0x1c
call dword [sym.imp.MSVCP80.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
mov dword [ebp - 0xe0], eax
mov edx, dword [ebp - 0xe0]
push edx
push 0x1003b74c
mov eax, dword [ebp - 0xc4]
mov ecx, dword [eax + 0x144]
push ecx
call dword [sym.imp.ntdll.dll_sprintf]
add esp, 0xc
mov edx, dword [ebp - 0x3c]
push edx
mov ecx, dword [ebp - 0xc4]
call fcn.100204c0
mov eax, dword [ebp - 0x3c]
push eax
mov ecx, dword [ebp - 0xc4]
call fcn.100201f0
jmp 0x1002333c
mov dword [ebp - 0x1c], 0
jmp 0x100233e2
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0xc4]
add ecx, 0x164
call fcn.100079b0
cmp dword [ebp - 0x1c], eax
jae 0x1002346d
mov edx, dword [ebp - 0x1c]
push edx
mov ecx, dword [ebp - 0xc4]
add ecx, 0x164
call fcn.100079f0
mov dword [ebp - 0xe4], eax
mov ecx, dword [ebp - 0xe4]
add ecx, 0x1c
call dword [sym.imp.MSVCP80.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0xe8]
push eax
push 0x1003b75c
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ecx + 0x144]
push edx
call dword [sym.imp.ntdll.dll_sprintf]
add esp, 0xc
mov eax, dword [ebp - 0x3c]
push eax
mov ecx, dword [ebp - 0xc4]
call fcn.100204c0
mov ecx, dword [ebp - 0x3c]
push ecx
mov ecx, dword [ebp - 0xc4]
call fcn.100201f0
jmp 0x100233d9
mov dword [ebp - 0x1c], 0
jmp 0x1002347f
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
mov ecx, dword [ebp - 0xc4]
add ecx, 0x174
call fcn.100079b0
cmp dword [ebp - 0x1c], eax
jae 0x1002350a
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0xc4]
add ecx, 0x174
call fcn.100079f0
mov dword [ebp - 0xec], eax
mov ecx, dword [ebp - 0xec]
add ecx, 0x1c
call dword [sym.imp.MSVCP80.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
mov dword [ebp - 0xf0], eax
mov ecx, dword [ebp - 0xf0]
push ecx
push str.RCPT_TO:__s__r_n
mov edx, dword [ebp - 0xc4]
mov eax, dword [edx + 0x144]
push eax
call dword [sym.imp.ntdll.dll_sprintf]
add esp, 0xc
mov ecx, dword [ebp - 0x3c]
push ecx
mov ecx, dword [ebp - 0xc4]
call fcn.100204c0
mov edx, dword [ebp - 0x3c]
push edx
mov ecx, dword [ebp - 0xc4]
call fcn.100201f0
jmp 0x10023476
push 0xb
call fcn.1001e2e0
add esp, 4
mov dword [ebp - 0x3c], eax
push str.DATA_r_n
mov eax, dword [ebp - 0xc4]
mov ecx, dword [eax + 0x144]
push ecx
call sub.ntdll.dll_strcpy
add esp, 8
mov edx, dword [ebp - 0x3c]
push edx
mov ecx, dword [ebp - 0xc4]
call fcn.100204c0
mov eax, dword [ebp - 0x3c]
push eax
mov ecx, dword [ebp - 0xc4]
call fcn.100201f0
push 0xc
call fcn.1001e2e0
add esp, 4
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ecx + 0x144]
push edx
mov ecx, dword [ebp - 0xc4]
call fcn.1001f2c0
mov eax, dword [ebp - 0x3c]
push eax
mov ecx, dword [ebp - 0xc4]
call fcn.100204c0
mov ecx, dword [ebp - 0xc4]
call fcn.1001ed00
test eax, eax
je 0x100235fe
mov dword [ebp - 0x1c], 0
jmp 0x100235a4
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0xc4]
call fcn.1001ed00
cmp dword [ebp - 0x1c], eax
jae 0x100235fc
mov edx, dword [ebp - 0x1c]
push edx
mov ecx, dword [ebp - 0xc4]
call fcn.10020460
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0xf4]
push eax
push 0x1003b784
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ecx + 0x144]
push edx
call dword [sym.imp.ntdll.dll_sprintf]
add esp, 0xc
mov eax, dword [ebp - 0x3c]
push eax
mov ecx, dword [ebp - 0xc4]
call fcn.100204c0
jmp 0x1002359b
jmp 0x1002362d
push 0x1003b78c
push 0x1003b790
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ecx + 0x144]
push edx
call dword [sym.imp.ntdll.dll_sprintf]
add esp, 0xc
mov eax, dword [ebp - 0x3c]
push eax
mov ecx, dword [ebp - 0xc4]
call fcn.100204c0
push 0x37
call fcn.1000f66d
add esp, 4
mov dword [ebp - 0xf8], eax
mov ecx, dword [ebp - 0xf8]
mov dword [ebp - 0x58], ecx
mov edx, dword [ebp - 0x58]
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x30], 0
jne 0x10023672
push 0x198
lea ecx, [ebp - 0x60]
call fcn.10009f00
mov eax, dword [eax]
mov dword [ebp - 0x5c], eax
push 0x10042bf4
lea ecx, [ebp - 0x5c]
push ecx
call sub.MSVCR80.dll__CxxThrowException
push 0xff
call fcn.1000f66d
add esp, 4
mov dword [ebp - 0xfc], eax
mov edx, dword [ebp - 0xfc]
mov dword [ebp - 0x64], edx
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jne 0x100236ba
push 0x198
lea ecx, [ebp - 0x6c]
call fcn.10009f00
mov ecx, dword [eax]
mov dword [ebp - 0x68], ecx
push 0x10042bf4
lea edx, [ebp - 0x68]
push edx
call sub.MSVCR80.dll__CxxThrowException
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0
jmp 0x100236d3
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0xc4]
add ecx, 0x184
call fcn.10002d40
cmp dword [ebp - 0x34], eax
jae 0x10023b42
mov ecx, dword [ebp - 0x34]
push ecx
mov ecx, dword [ebp - 0xc4]
add ecx, 0x184
call fcn.10007b40
mov ecx, eax
call dword [sym.imp.MSVCP80.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
mov dword [ebp - 0x100], eax
mov edx, dword [ebp - 0x100]
push edx
mov eax, dword [ebp - 0x28]
push eax
call sub.ntdll.dll_strcpy
add esp, 8
push str.__MESSAGE__ID__54yg6f6h6y456345
push str.___s_r_n
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ecx + 0x144]
push edx
call dword [sym.imp.ntdll.dll_sprintf]
add esp, 0xc
push str.Content_Type:_application_x_msdownload__name_
mov eax, dword [ebp - 0xc4]
mov ecx, dword [eax + 0x144]
push ecx
call sub.ntdll.dll_strcat
add esp, 8
mov edx, dword [sym.imp.MSVCP80.dll_unsigned_int_const_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::npos]
mov eax, dword [edx]
push eax
push 0x1003b7d0
mov ecx, dword [ebp - 0x34]
push ecx
mov ecx, dword [ebp - 0xc4]
add ecx, 0x184
call fcn.10007b40
mov ecx, eax
call dword [sym.imp.MSVCP80.dll_public:_unsigned_int___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::find_last_of_char_const___unsigned_int_const]
mov dword [ebp - 0x104], eax
mov edx, dword [ebp - 0x104]
mov eax, dword [ebp - 0x28]
lea ecx, [eax + edx + 1]
push ecx
mov edx, dword [ebp - 0xc4]
mov eax, dword [edx + 0x144]
push eax
call sub.ntdll.dll_strcat
add esp, 8
push 0x1003b7d4
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ecx + 0x144]
push edx
call sub.ntdll.dll_strcat
add esp, 8
push str.Content_Transfer_Encoding:_base64_r_n
mov eax, dword [ebp - 0xc4]
mov ecx, dword [eax + 0x144]
push ecx
call sub.ntdll.dll_strcat
add esp, 8
push str.Content_Disposition:_attachment__filename_
mov edx, dword [ebp - 0xc4]
mov eax, dword [edx + 0x144]
push eax
call sub.ntdll.dll_strcat
add esp, 8
mov ecx, dword [sym.imp.MSVCP80.dll_unsigned_int_const_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::npos]
mov edx, dword [ecx]
push edx
push 0x1003b828
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [ebp - 0xc4]
add ecx, 0x184
call fcn.10007b40
mov ecx, eax
call dword [sym.imp.MSVCP80.dll_public:_unsigned_int___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::find_last_of_char_const___unsigned_int_const]
mov dword [ebp - 0x108], eax
mov ecx, dword [ebp - 0x108]
mov edx, dword [ebp - 0x28]
lea eax, [edx + ecx + 1]
push eax
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ecx + 0x144]
push edx
call sub.ntdll.dll_strcat
add esp, 8
push 0x1003b82c
mov eax, dword [ebp - 0xc4]
mov ecx, dword [eax + 0x144]
push ecx
call sub.ntdll.dll_strcat
add esp, 8
push 0x1003b830
mov edx, dword [ebp - 0xc4]
mov eax, dword [edx + 0x144]
push eax
call sub.ntdll.dll_strcat
add esp, 8
mov ecx, dword [ebp - 0x3c]
push ecx
mov ecx, dword [ebp - 0xc4]
call fcn.100204c0
push 0x1003b834
mov edx, dword [ebp - 0x28]
push edx
call dword [sym.imp.MSVCR80.dll_fopen]
add esp, 8
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jne 0x100238d1
push 0x194
lea ecx, [ebp - 0x74]
call fcn.10009f00
mov eax, dword [eax]
mov dword [ebp - 0x70], eax
push 0x10042bf4
lea ecx, [ebp - 0x70]
push ecx
call sub.MSVCR80.dll__CxxThrowException
mov dword [ebp - 0x2c], 0
mov edx, dword [ebp - 0x24]
push edx
call dword [sym.imp.MSVCR80.dll_feof]
add esp, 4
test eax, eax
jne 0x10023906
mov eax, dword [ebp - 0x24]
push eax
push 0x36
push 1
mov ecx, dword [ebp - 0x30]
push ecx
call dword [sym.imp.MSVCR80.dll_fread]
add esp, 0x10
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
jmp 0x100238d8
mov edx, dword [ebp - 0x38]
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x38]
shr eax, 0xa
cmp eax, 0x1400
jbe 0x10023941
push 0x195
lea ecx, [ebp - 0x7c]
call fcn.10009f00
mov ecx, dword [eax]
mov dword [ebp - 0x78], ecx
push 0x10042bf4
lea edx, [ebp - 0x78]
push edx
call sub.MSVCR80.dll__CxxThrowException
jmp 0x10023b30
push 0
push 0
mov eax, dword [ebp - 0x24]
push eax
call dword [sym.imp.MSVCR80.dll_fseek]
add esp, 0xc
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
jmp 0x1002396b
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x2c]
xor edx, edx
mov ecx, 0x36
div ecx
add eax, 1
cmp dword [ebp - 0x1c], eax
jae 0x10023b1b
mov edx, dword [ebp - 0x24]
push edx
push 0x36
push 1
mov eax, dword [ebp - 0x30]
push eax
call dword [sym.imp.MSVCR80.dll_fread]
add esp, 0x10
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x20], 0
je 0x10023a13
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 0x30]
push edx
lea eax, [ebp - 0x98]
push eax
call fcn.100326f0
add esp, 0xc
mov dword [ebp - 0x10c], eax
mov ecx, dword [ebp - 0x10c]
mov dword [ebp - 0x110], ecx
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0xc0]
or edx, 1
mov dword [ebp - 0xc0], edx
mov ecx, dword [ebp - 0x110]
call dword [sym.imp.MSVCP80.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
push eax
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ecx + 0x144]
push edx
call sub.ntdll.dll_strcat
add esp, 8
mov dword [ebp - 0x118], eax
jmp 0x10023a86
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x30]
push ecx
lea edx, [ebp - 0xb4]
push edx
call fcn.100326f0
add esp, 0xc
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x120], eax
mov dword [ebp - 4], 2
mov ecx, dword [ebp - 0xc0]
or ecx, 2
mov dword [ebp - 0xc0], ecx
mov ecx, dword [ebp - 0x120]
call dword [sym.imp.MSVCP80.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
mov dword [ebp - 0x124], eax
mov edx, dword [ebp - 0x124]
push edx
mov eax, dword [ebp - 0xc4]
mov ecx, dword [eax + 0x144]
push ecx
call sub.ntdll.dll_strcpy
add esp, 8
mov dword [ebp - 0x118], eax
mov dword [ebp - 4], 1
mov edx, dword [ebp - 0xc0]
and edx, 2
je 0x10023aab
and dword [ebp - 0xc0], 0xfffffffd
lea ecx, [ebp - 0xb4]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0xc0]
and eax, 1
je 0x10023ad0
and dword [ebp - 0xc0], 0xfffffffe
lea ecx, [ebp - 0x98]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
push 0x1003b838
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ecx + 0x144]
push edx
call sub.ntdll.dll_strcat
add esp, 8
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x20]
lea edx, [ecx + eax + 2]
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x20], 0xe00
jb 0x10023b16
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x3c]
push eax
mov ecx, dword [ebp - 0xc4]
call fcn.100204c0
jmp 0x10023962
cmp dword [ebp - 0x20], 0
je 0x10023b30
mov ecx, dword [ebp - 0x3c]
push ecx
mov ecx, dword [ebp - 0xc4]
call fcn.100204c0
mov edx, dword [ebp - 0x24]
push edx
call dword [sym.imp.MSVCR80.dll_fclose]
add esp, 4
jmp 0x100236ca
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xb8], eax
mov ecx, dword [ebp - 0xb8]
push ecx
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
add esp, 4
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0xbc], edx
mov eax, dword [ebp - 0xbc]
push eax
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
add esp, 4
mov ecx, dword [ebp - 0xc4]
add ecx, 0x184
call fcn.10002d40
test eax, eax
je 0x10023bb6
push str.__MESSAGE__ID__54yg6f6h6y456345
push str._r_n___s___r_n
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ecx + 0x144]
push edx
call dword [sym.imp.ntdll.dll_sprintf]
add esp, 0xc
mov eax, dword [ebp - 0x3c]
push eax
mov ecx, dword [ebp - 0xc4]
call fcn.100204c0
push 0xd
call fcn.1001e2e0
add esp, 4
mov dword [ebp - 0x3c], eax
push str._r_n._r_n
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ecx + 0x144]
push edx
call sub.ntdll.dll_strcpy
add esp, 8
mov eax, dword [ebp - 0x3c]
push eax
mov ecx, dword [ebp - 0xc4]
call fcn.100204c0
mov ecx, dword [ebp - 0x3c]
push ecx
mov ecx, dword [ebp - 0xc4]
call fcn.100201f0
jmp 0x10023c65
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret