Function at 0x20059e50
Capabilities:
Check for time delay via gettickcount
Contain obfuscated stackstrings
Create directory
Parse pe header
Read .ini file

Disassembly:
mov eax, 0x200a10a9
call fcn.2007d394
sub esp, 0x7c0
mov eax, dword [0x200cc84c]
xor eax, ebp
push ebx
mov ebx, ecx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 8]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push edi
mov dword [ebp - 0x79c], eax
mov dword [ebx + 4], 0x200a9120
lea eax, [ebx + 0x238]
mov dword [ebx], fcn.2003ae71
mov dword [ebx + 4], 0x200a9fa4
xor edi, edi
push eax
mov dword [ebp - 0x7b0], ebx
mov dword [eax + 0x18], edi
call esi
mov dword [ebp - 4], edi
lea ecx, [ebx + 0x268]
call fcn.20002957
mov byte [ebp - 4], 1
lea eax, [ebx + 0x284]
push eax
mov dword [eax + 0x18], edi
call esi
mov byte [ebp - 4], 2
lea eax, [ebx + 0x2c8]
push eax
mov dword [eax + 0x18], edi
call esi
mov byte [ebp - 4], 3
lea ecx, [ebx + 0x2e4]
call fcn.20002957
mov byte [ebp - 4], 4
lea ecx, [ebx + 0x300]
call fcn.200013ff
lea ecx, [ebx + 0x308]
call fcn.20002957
mov byte [ebp - 4], 5
lea ecx, [ebx + 0x324]
call fcn.20002957
mov byte [ebp - 4], 6
lea ecx, [ebx + 0x340]
call fcn.2000fa51
mov byte [ebp - 4], 7
lea ecx, [ebx + 0x688]
call fcn.200553c2
mov byte [ebp - 4], 8
lea ecx, [ebx + 0x877c]
call fcn.200553c2
mov byte [ebp - 4], 9
lea ecx, [ebx + 0x10874]
call fcn.20002957
mov byte [ebp - 4], 0xa
lea eax, [ebx + 0x108f8]
push eax
mov dword [eax + 0x18], edi
call esi
mov byte [ebp - 4], 0xb
lea eax, [ebx + 0x10938]
push eax
mov dword [eax + 0x18], edi
call esi
mov byte [ebp - 4], 0xc
lea ecx, [ebx + 0x10954]
call fcn.2004de14
mov byte [ebp - 4], 0xd
lea ecx, [ebx + 0x10960]
call fcn.2004de14
mov byte [ebp - 4], 0xe
lea ecx, [ebx + 0x1096c]
call fcn.2004de14
mov byte [ebp - 4], 0xf
lea ecx, [ebx + 0x10978]
call fcn.2004de14
mov byte [ebp - 4], 0x10
lea ecx, [ebx + 0x10984]
call fcn.2004de14
mov byte [ebp - 4], 0x11
lea ecx, [ebx + 0x10990]
call fcn.2004de14
mov byte [ebp - 4], 0x12
lea ecx, [ebx + 0x1099c]
call fcn.2004de14
mov byte [ebp - 4], 0x13
lea ecx, [ebx + 0x109a8]
call fcn.2004de14
mov byte [ebp - 4], 0x14
lea ecx, [ebx + 0x109b4]
call fcn.2004de14
mov byte [ebp - 4], 0x15
lea ecx, [ebx + 0x109c0]
call fcn.2004de14
mov byte [ebp - 4], 0x16
lea ecx, [ebx + 0x109cc]
call fcn.2004de14
mov byte [ebp - 4], 0x17
lea ecx, [ebx + 0x109d8]
call fcn.2004de14
mov byte [ebp - 4], 0x18
lea ecx, [ebx + 0x109e4]
call fcn.2004de14
mov byte [ebp - 4], 0x19
lea ecx, [ebx + 0x109f0]
call fcn.2004de14
mov byte [ebp - 4], 0x1a
lea ecx, [ebx + 0x109fc]
call fcn.2004de14
mov byte [ebp - 4], 0x1b
lea ecx, [ebx + 0x10a08]
call fcn.2004de14
mov byte [ebp - 4], 0x1c
lea ecx, [ebx + 0x10a14]
call fcn.2004de14
mov byte [ebp - 4], 0x1d
lea ecx, [ebx + 0x10a20]
call fcn.2004de14
mov byte [ebp - 4], 0x1e
lea ecx, [ebx + 0x10a2c]
call fcn.2004de14
mov byte [ebp - 4], 0x1f
lea eax, [ebx + 0x10a38]
push eax
mov dword [eax + 0x18], edi
call esi
mov byte [ebp - 4], 0x20
lea ecx, [ebx + 0x10a54]
call fcn.20020d0c
mov byte [ebp - 4], 0x21
lea ecx, [ebx + 0x10a5c]
call fcn.20002957
mov byte [ebp - 4], 0x22
lea ecx, [ebx + 0x10a78]
call fcn.20002957
mov byte [ebp - 4], 0x23
lea ecx, [ebx + 0x10a94]
call fcn.20002957
mov byte [ebp - 4], 0x24
lea ecx, [ebx + 0x10ab0]
call fcn.20002957
mov byte [ebp - 4], 0x25
lea ecx, [ebx + 0x10acc]
call fcn.20002957
mov byte [ebp - 4], 0x26
lea ecx, [ebx + 0x10ae8]
call fcn.20002957
mov byte [ebp - 4], 0x27
lea ecx, [ebx + 0x10b18]
call fcn.200352d0
mov byte [ebp - 4], 0x28
lea ecx, [ebx + 0x10b24]
call fcn.20013786
mov byte [ebp - 4], 0x29
lea ecx, [ebx + 0x10b30]
push ebx
call fcn.20012286
mov byte [ebp - 4], 0x2a
lea ecx, [ebx + 0x10b5c]
call fcn.20013a69
mov byte [ebp - 4], 0x2b
lea ecx, [ebx + 0x10c00]
call fcn.200013ff
lea ecx, [ebx + 0x10c06]
call fcn.200013ff
lea ecx, [ebx + 0x10c0c]
call fcn.200013ff
lea ecx, [ebx + 0x10c12]
call fcn.200013ff
lea eax, [ebx + 0x10c18]
push eax
mov dword [eax + 0x18], edi
call esi
mov byte [ebp - 4], 0x2c
lea eax, [ebx + 0x10c34]
push eax
mov dword [eax + 0x18], edi
call esi
mov byte [ebp - 4], 0x2d
lea ecx, [ebx + 0x10c50]
call fcn.2004de3a
mov byte [ebp - 4], 0x2e
lea ecx, [ebx + 0x10c74]
call fcn.20002957
mov byte [ebp - 4], 0x2f
lea ecx, [ebx + 0x10c90]
call fcn.20002957
mov byte [ebp - 4], 0x30
lea ecx, [ebx + 0x10cb4]
call fcn.20002957
mov byte [ebp - 4], 0x31
lea ecx, [ebx + 0x10cd0]
call fcn.20002957
mov byte [ebp - 4], 0x32
lea ecx, [ebx + 0x10cf0]
call fcn.20002957
mov byte [ebp - 4], 0x33
lea ecx, [ebx + 0x10d0c]
call fcn.20002957
mov byte [ebp - 4], 0x34
lea ecx, [ebx + 0x10d2c]
call fcn.20002957
mov byte [ebp - 4], 0x35
lea eax, [ebx + 0x10d48]
push eax
mov dword [eax + 0x18], edi
call esi
mov byte [ebp - 4], 0x36
lea ecx, [ebx + 0x10d64]
call fcn.20050891
mov byte [ebp - 4], 0x37
lea ecx, [ebx + 0x10d70]
call fcn.20007311
mov byte [ebp - 4], 0x38
lea ecx, [ebx + 0x10d88]
call fcn.2004fea2
mov byte [ebp - 4], 0x39
lea ecx, [ebx + 0x10d98]
call fcn.2006311c
mov byte [ebp - 4], 0x3a
lea eax, [ebx + 0x10e10]
push eax
mov dword [eax + 0x18], edi
call esi
mov byte [ebp - 4], 0x3b
lea ecx, [ebx + 0x10e34]
call fcn.20025d70
mov byte [ebp - 4], 0x3c
lea ecx, [ebx + 0x10e40]
call fcn.20025d70
mov byte [ebp - 4], 0x3d
lea ecx, [ebx + 0x10e4c]
call fcn.2004de8b
mov byte [ebp - 4], 0x3e
lea ecx, [ebx + 0x10e90]
call fcn.20072e79
mov byte [ebp - 4], 0x3f
lea ecx, [ebx + 0x10fa8]
call fcn.20042b1d
mov byte [ebp - 4], 0x40
lea ecx, [ebx + 0x19000]
call fcn.20059e2a
mov byte [ebp - 4], 0x41
lea ecx, [ebx + 0x19028]
call fcn.20013786
mov byte [ebp - 4], 0x42
lea ecx, [ebx + 0x19034]
call fcn.20013786
mov byte [ebp - 4], 0x43
lea ecx, [ebx + 0x19040]
call fcn.2004deb1
mov byte [ebp - 4], 0x44
push ebx
lea ecx, [ebx + 0x19050]
call fcn.2000755b
mov byte [ebp - 4], 0x45
lea ecx, [ebx + 0x191c4]
call fcn.2004deb1
mov byte [ebp - 4], 0x46
lea ecx, [ebx + 0x191d0]
call fcn.20013786
mov byte [ebp - 4], 0x47
lea ecx, [ebx + 0x191dc]
call fcn.200013ff
lea ecx, [ebx + 0x191e2]
call fcn.200013ff
lea ecx, [ebx + 0x191e8]
call fcn.20025d70
mov byte [ebp - 4], 0x48
lea ecx, [ebx + 0x19200]
call fcn.20002957
mov byte [ebp - 4], 0x49
lea ecx, [ebx + 0x1924c]
call fcn.20002957
mov byte [ebp - 4], 0x4a
lea ecx, [ebx + 0x19268]
call fcn.20002957
mov byte [ebp - 4], 0x4b
lea ecx, [ebx + 0x19284]
call fcn.20002957
mov byte [ebp - 4], 0x4c
lea ecx, [ebx + 0x192a0]
call fcn.20002957
mov byte [ebp - 4], 0x4d
lea ecx, [ebx + 0x192c8]
call fcn.2001e98e
mov byte [ebp - 4], 0x4e
lea ecx, [ebx + 0x192fc]
call fcn.200716b2
mov byte [ebp - 4], 0x4f
lea ecx, [ebx + 0x193c8]
call fcn.20073e63
mov byte [ebp - 4], 0x50
lea ecx, [ebx + 0x19430]
call fcn.20073e63
mov byte [ebp - 4], 0x51
lea ecx, [ebx + 0x194b4]
call fcn.20002957
mov byte [ebp - 4], 0x52
lea ecx, [ebx + 0x194d4]
call fcn.20002957
mov byte [ebp - 4], 0x53
lea ecx, [ebx + 0x194f0]
call fcn.200765d5
mov byte [ebp - 4], 0x54
lea ecx, [ebx + 0x19504]
call fcn.20002957
mov byte [ebp - 4], 0x55
lea eax, [ebx + 0x19528]
push eax
mov dword [eax + 0x18], edi
call esi
mov byte [ebp - 4], 0x56
lea ecx, [ebx + 0x19544]
call fcn.20002e4a
mov byte [ebp - 4], 0x57
lea ecx, [ebx + 0x19558]
call fcn.20002957
mov byte [ebp - 4], 0x58
lea ecx, [ebx + 0x19574]
call fcn.20002957
mov byte [ebp - 4], 0x59
lea ecx, [ebx + 0x19590]
call fcn.20002957
mov byte [ebp - 4], 0x5a
lea ecx, [ebx + 0x195ac]
call fcn.20002957
mov byte [ebp - 4], 0x5b
lea ecx, [ebx + 0x195c8]
call fcn.20002957
mov byte [ebp - 4], 0x5c
lea ecx, [ebx + 0x195e4]
call fcn.20002957
mov byte [ebp - 4], 0x5d
lea ecx, [ebx + 0x19600]
call fcn.20002957
mov byte [ebp - 4], 0x5e
lea ecx, [ebx + 0x1961c]
call fcn.20002957
mov byte [ebp - 4], 0x5f
lea ecx, [ebx + 0x19638]
call fcn.20002957
mov byte [ebp - 4], 0x60
lea ecx, [ebx + 0x19654]
call fcn.20002957
mov byte [ebp - 4], 0x61
lea ecx, [ebx + 0x19670]
call fcn.2003ee2a
mov byte [ebp - 4], 0x62
lea ecx, [ebx + 0x19754]
call fcn.20027454
mov byte [ebp - 4], 0x63
lea ecx, [ebx + 0x19824]
call fcn.20007311
mov byte [ebp - 4], 0x64
lea ecx, [ebx + 0x19830]
call fcn.200647fd
mov byte [ebp - 4], 0x65
push 0x54
call fcn.2008f9ce
pop ecx
mov dword [ebp - 0x7a4], eax
mov byte [ebp - 4], 0x66
cmp eax, edi
je 0x2005a50c
mov ecx, eax
call fcn.2002c732
jmp 0x2005a50e
xor eax, eax
mov byte [ebp - 4], 0x65
push eax
lea ecx, [ebx + 0x19938]
call fcn.2003e170
mov byte [ebp - 4], 0x67
lea eax, [ebx + 0x194d4]
push eax
push ebx
call fcn.2004f313
lea eax, [ebp - 0x7a4]
push eax
mov dword [ebx + 0x192c4], edi
call fcn.200340e0
mov esi, eax
lea edi, [ebx + 0x19234]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov edi, 0x104
push edi
xor esi, esi
lea eax, [ebp - 0x13c]
push esi
push eax
call fcn.2007e690
mov eax, dword [ebp - 0x79c]
add esp, 0x18
cmp eax, esi
je 0x2005a5b2
add eax, 0x134
cmp dword [eax + 0x18], 0x10
jb 0x2005a57e
mov eax, dword [eax + 4]
jmp 0x2005a581
add eax, 4
mov dword [ebp - 0x7a4], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push esi
call fcn.2007e6f0
pop ecx
push eax
push dword [ebp - 0x7a4]
lea eax, [ebp - 0x654]
push str._s_d_d
push eax
call fcn.2007d900
add esp, 0x14
jmp 0x2005a5d5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push esi
call fcn.2007e6f0
pop ecx
push eax
lea eax, [ebp - 0x654]
push str._d_d
push eax
call fcn.2007d900
add esp, 0x10
push 0x28
lea eax, [ebp - 0x38]
push esi
push eax
call fcn.2007e690
push edi
lea eax, [ebp - 0x13c]
push esi
push eax
call fcn.2007e690
add esp, 0x18
lea ecx, [ebp - 0x798]
call fcn.2001723b
mov byte [ebp - 4], 0x68
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x654]
push eax
lea ecx, [ebp - 0x798]
call fcn.200174a9
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x38]
push 0x14
push eax
call fcn.2001729d
add esp, 0xc
lea eax, [ebp - 0x13c]
push eax
lea ecx, [ebx + 0x268]
call fcn.20003a20
push edi
lea eax, [ebp - 0x244]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x244]
push eax
lea ecx, [ebp - 0x68c]
mov byte [ebp - 0x140], 0
call fcn.20003c27
mov byte [ebp - 4], 0x69
push 1
push 0xffffffffffffffff
lea eax, [ebp - 0x7a8]
push eax
lea ecx, [ebp - 0x68c]
mov byte [ebp - 0x7a8], 0x5c
call fcn.20016160
push esi
push eax
lea ecx, [ebp - 0x68c]
call fcn.20016247
push str._setting.ini
lea eax, [ebp - 0x68c]
push eax
lea eax, [ebp - 0x7cc]
push eax
call fcn.20014e68
add esp, 0xc
mov byte [ebp - 4], 0x6a
push 0xffffffffffffffff
push esi
push eax
lea ecx, [ebx + 0x10d0c]
call fcn.20002fc3
mov byte [ebp - 4], 0x69
push esi
push 1
lea ecx, [ebp - 0x7cc]
call fcn.2000275e
push 0x200a6b94
lea ecx, [ebx + 0x10d0c]
call fcn.20003a20
call fcn.2005ed9d
push eax
lea ecx, [ebx + 0x10cd0]
call fcn.20003a20
push str.preview
lea ecx, [ebx + 0x10cd0]
call fcn.20008f58
call fcn.2005ed9d
push eax
lea ecx, [ebx + 0x10cf0]
call fcn.20003a20
push str.cache
lea ecx, [ebx + 0x10cf0]
call fcn.20008f58
lea eax, [ebx + 0x10cf0]
cmp dword [eax + 0x18], 0x10
jb 0x2005a737
mov eax, dword [eax + 4]
jmp 0x2005a73a
add eax, 4
push esi
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea eax, [ebx + 0x10cd0]
cmp dword [eax + 0x18], 0x10
jb 0x2005a753
mov eax, dword [eax + 4]
jmp 0x2005a756
add eax, 4
push esi
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
call fcn.2005ed9d
push eax
lea ecx, [ebp - 0x670]
call fcn.20003c27
mov byte [ebp - 4], 0x6b
push str.log
lea ecx, [ebp - 0x670]
call fcn.20008f58
cmp dword [ebp - 0x658], 0x10
mov eax, dword [ebp - 0x66c]
jae 0x2005a798
lea eax, [ebp - 0x66c]
push esi
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push str.powerstream.log
lea ecx, [ebp - 0x670]
call fcn.20008f58
cmp dword [ebp - 0x658], 0x10
mov eax, dword [ebp - 0x66c]
jae 0x2005a7c5
lea eax, [ebp - 0x66c]
push eax
call fcn.2005ea20
mov ecx, eax
call fcn.2005e7d0
push 0xa
call fcn.2005ea20
mov ecx, eax
call fcn.2005ea60
xor eax, eax
inc eax
lea ecx, [ebx + 0x10a54]
mov word [ebx + 0x10b04], 0x100
mov dword [ebx + 0x2a0], esi
mov dword [ebx + 0x2a4], eax
mov dword [ebx + 0x2a8], eax
mov dword [ebx + 0x2ac], esi
mov dword [ebx + 0x2b0], esi
mov dword [ebx + 0x2b4], esi
mov dword [ebx + 0x2b8], esi
mov dword [ebx + 0x2bc], esi
mov dword [ebx + 0x2c0], esi
call fcn.2003d39c
mov ecx, ebx
mov dword [ebx + 0x108f0], esi
mov dword [ebx + 0x108f4], esi
mov dword [ebx + 0x10c5c], esi
mov dword [ebx + 0x19224], esi
mov dword [ebx + 0x19228], esi
call fcn.2004e5c6
mov eax, dword [ebp - 0x79c]
mov dword [ebx + 0x108a0], esi
mov dword [ebx + 0x108a4], esi
mov dword [ebx + 0x108a8], esi
mov dword [ebx + 0x108ac], esi
mov dword [ebx + 0x108b0], esi
mov dword [ebx + 0x108b4], esi
mov dword [ebx + 0x108b8], esi
mov dword [ebx + 0x108bc], esi
mov dword [ebx + 0x108c8], esi
mov dword [ebx + 0x108cc], esi
mov dword [ebx + 0x108d0], esi
mov dword [ebx + 0x108d4], esi
mov dword [ebx + 0x108d8], esi
mov dword [ebx + 0x108dc], esi
mov dword [ebx + 0x2c4], eax
mov dword [ebx + 0x108e8], esi
mov dword [ebx + 0x19834], eax
mov dword [ebx + 0x108ec], esi
lea eax, [ebx + 0x10b30]
mov dword [ebx + 0x108e0], esi
push str.127.0.0.1
lea ecx, [ebx + 0x10a5c]
mov dword [ebx + 0x258], esi
mov word [ebx + 0x254], 0x64
mov dword [ebx + 0x108e4], esi
mov dword [ebx + 0x10b0c], esi
mov dword [ebx + 0x19838], ebx
mov dword [ebx + 0x68c], 0x800000
mov dword [ebx + 0x8780], 0x600000
mov dword [ebx + 0x10bf8], eax
call fcn.20003a20
or dword [ebx + 0x192e8], 0xffffffff
push edi
lea eax, [ebp - 0x44c]
push eax
push esi
mov dword [ebx + 0x192e4], esi
mov dword [ebx + 0x193c4], esi
mov dword [ebx + 0x19524], esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x44c]
push eax
lea ecx, [ebp - 0x7ac]
call fcn.20004f37
mov byte [ebp - 4], 0x6c
mov eax, dword [ebp - 0x7ac]
mov eax, dword [eax - 0xc]
mov dword [ebp - 0x79c], eax
push 0x5c
lea ecx, [ebp - 0x7ac]
call fcn.2002e9fc
cmp eax, 0xffffffff
je 0x2005a9ba
mov ecx, dword [ebp - 0x79c]
cmp ecx, eax
jle 0x2005a9ba
sub ecx, eax
dec ecx
push ecx
lea eax, [ebp - 0x79c]
push eax
lea ecx, [ebp - 0x7ac]
call fcn.2003e5e5
mov byte [ebp - 4], 0x6d
push dword [eax]
lea ecx, [ebx + 0x19558]
call fcn.20003a20
mov byte [ebp - 4], 0x6c
lea ecx, [ebp - 0x79c]
call fcn.200026ee
push edi
lea eax, [ebp - 0x348]
push eax
push dword [0x200cdc18]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov byte [ebp + eax - 0x348], 0
lea eax, [ebp - 0x348]
push eax
lea ecx, [ebp - 0x7a4]
call fcn.20004f37
mov byte [ebp - 4], 0x6e
push 0x5c
lea ecx, [ebp - 0x7a4]
call fcn.2002e9fc
push eax
lea eax, [ebp - 0x79c]
push eax
lea ecx, [ebp - 0x7a4]
call fcn.2002ea3a
mov byte [ebp - 4], 0x6f
push eax
lea ecx, [ebp - 0x7a4]
call fcn.20015e97
mov byte [ebp - 4], 0x6e
lea ecx, [ebp - 0x79c]
call fcn.200026ee
push str.psnetwork.ini
lea ecx, [ebp - 0x7a4]
call fcn.200037d8
push dword [ebp - 0x7a4]
lea edi, [ebx + 0x19750]
push 2
push 0x200aa038
push 0x200a7b84
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [edi], eax
mov byte [ebp - 4], 0x6c
lea ecx, [ebp - 0x7a4]
call fcn.200026ee
mov edi, dword [edi]
cmp edi, 2
je 0x2005aaa1
cmp edi, 3
jne 0x2005aaa1
lea ecx, [ebp - 0x79c]
call fcn.200026bf
mov byte [ebp - 4], 0x70
lea eax, [ebp - 0x79c]
push eax
call fcn.20019dec
pop ecx
mov byte [ebp - 4], 0x6c
lea ecx, [ebp - 0x79c]
call fcn.200026ee
push 0x14
lea eax, [ebx + 8]
push esi
push eax
mov dword [ebx + 0x19820], esi
call fcn.2007e690
push 0x100
lea eax, [ebx + 0x20]
push esi
push eax
mov dword [ebx + 0x1c], esi
call fcn.2007e690
add esp, 0x18
mov byte [ebx + 0x19934], 1
mov byte [ebp - 4], 0x6b
lea ecx, [ebp - 0x7ac]
call fcn.200026ee
mov byte [ebp - 4], 0x69
push esi
push 1
lea ecx, [ebp - 0x670]
call fcn.2000275e
mov byte [ebp - 4], 0x68
push esi
push 1
lea ecx, [ebp - 0x68c]
call fcn.2000275e
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0x798]
call fcn.2001727c
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop esi
mov eax, ebx
xor ecx, ebp
pop ebx
call fcn.2007c9ae
leave
ret 4