Function at 0x1004fa50
Capabilities:
Enumerate process modules

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005f975
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0xcf8
mov eax, dword [0x1007a058]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebx + 8]
mov ecx, esi
mov edi, dword [ebx + 0x10]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1004faa0
sub ecx, edx
mov dword [ebp - 0xce8], ecx
test cl, 1
jne 0x100507a1
cmp ecx, 2
jb 0x100507a1
mov eax, dword [ebx + 0xc]
mov edx, ecx
shr edx, 1
mov dword [ebp - 0xcfc], edx
mov byte [ebp - 0xce1], 1
mov byte [ebp - 0xce2], 0
lea ecx, [edx + eax]
mov dword [ebp - 0xcec], ecx
mov ecx, 0x2323
cmp word [esi], cx
mov ecx, dword [ebp - 0xce8]
jne 0x1004fb0b
add esi, 2
mov byte [ebp - 0xce1], 0
sub ecx, 2
mov dword [ebp - 0xcec], eax
dec edx
jmp 0x1004fb3c
mov eax, 0x4040
cmp word [esi], ax
jne 0x1004fb1e
mov byte [ebp - 0xce1], 0
jmp 0x1004fb2f
mov eax, 0x2121
cmp word [esi], ax
jne 0x1004fb48
mov byte [ebp - 0xce2], 1
add esi, 2
sub ecx, 2
dec edx
dec dword [ebp - 0xcec]
mov dword [ebp - 0xce8], ecx
mov dword [ebp - 0xcfc], edx
push 0x400
lea eax, [ebp - 0x978]
push 0
push eax
call fcn.10021b90
add esp, 0xc
lea eax, [ebp - 0x98]
push 0x80
push 0
push eax
call fcn.10021b90
add esp, 0xc
lea eax, [ebp - 0x578]
push 0x4e0
push 0
push eax
call fcn.10021b90
add esp, 0xc
lea eax, [ebp - 0x978]
push esi
push 0x400
push eax
call fcn.1002c8f6
add esp, 0xc
lea eax, [ebp - 0x98]
push edi
push 0x80
push eax
call fcn.1002c8f6
add esp, 0xc
lea eax, [ebp - 0x978]
push eax
call fcn.1002b834
add esp, 4
lea eax, [ebp - 0x98]
push eax
call fcn.1002b834
add esp, 4
lea eax, [ebp - 0x978]
push eax
lea eax, [ebp - 0x98]
push eax
push str._s:_s
lea eax, [ebp - 0x578]
push 0x4e0
push eax
call fcn.10012e50
mov eax, dword fs:[0x2c]
add esp, 0x14
mov ecx, dword [0x1007de28]
mov esi, dword [eax + ecx*4]
mov eax, dword [0x1007e71c]
cmp eax, dword [esi + 4]
jg 0x100507c3
mov eax, dword [0x1007e728]
cmp eax, dword [esi + 4]
jg 0x10050820
mov dword [ebp - 0xa40], 0
lea ecx, [ebp - 0x578]
mov dword [ebp - 0xa30], 0
mov dword [ebp - 0xa2c], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0xa40], 0
mov dword [ebp - 4], 0xffffffff
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1004fc60
sub ecx, edx
lea eax, [ebp - 0x578]
push ecx
push eax
lea ecx, [ebp - 0xa40]
call fcn.10002f50
lea eax, [ebp - 0xa40]
mov dword [ebp - 4], 3
push eax
call fcn.10017430
mov esi, dword [eax]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xa2c]
cmp ecx, 0x10
jb 0x1004fcd2
mov edx, dword [ebp - 0xa40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004fcc8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1005087d
push ecx
push edx
call fcn.1001fb0c
add esp, 8
mov dword [ebp - 0xa30], 0
mov dword [ebp - 0xa2c], 0xf
mov byte [ebp - 0xa40], 0
test esi, esi
je 0x1004fda2
mov dword [ebp - 0xa28], 0
lea ecx, [ebp - 0x578]
mov dword [ebp - 0xa18], 0
mov dword [ebp - 0xa14], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0xa28], 0
mov dword [ebp - 4], 0xffffffff
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1004fd30
sub ecx, edx
lea eax, [ebp - 0x578]
push ecx
push eax
lea ecx, [ebp - 0xa28]
call fcn.10002f50
lea eax, [ebp - 0xa28]
mov dword [ebp - 4], 5
push eax
call fcn.10017430
mov ecx, dword [ebp - 0xa14]
mov esi, dword [eax]
cmp ecx, 0x10
jb 0x1004fd9b
mov edx, dword [ebp - 0xa28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004fd91
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10050882
push ecx
push edx
call fcn.1001fb0c
add esp, 8
mov eax, esi
jmp 0x100507a3
mov esi, dword [ebp - 0xcfc]
push esi
call fcn.10020175
add esp, 4
mov dword [ebp - 0xcf0], eax
mov edx, esi
mov ecx, eax
test esi, esi
je 0x1004fdcb
nop
mov byte [ecx], 0
lea ecx, [ecx + 1]
sub edx, 1
jne 0x1004fdc0
lea eax, [ebp - 0x9f8]
mov ecx, 0x20
xor edx, edx
lea eax, [eax + 4]
mov dword [eax - 4], edx
sub ecx, 1
jne 0x1004fdd6
mov esi, dword [ebp - 0xce8]
xor edi, edi
shr esi, 1
mov dword [ebp - 0xcf4], edx
mov dword [ebp - 0xd00], edx
mov dword [ebp - 0xce8], esi
je 0x1004ff45
nop word [eax + eax]
mov ah, byte [ebp + edx*2 - 0x978]
mov ch, byte [ebp + edx*2 - 0x977]
cmp ah, 0x30
jb 0x1004fe28
cmp ah, 0x39
jbe 0x1004fe44
cmp ah, 0x46
ja 0x1004fe32
cmp ah, 0x41
jae 0x1004fe44
cmp ch, 0x30
jb 0x1004fe3c
cmp ch, 0x39
jbe 0x1004fe44
mov al, ch
sub al, 0x41
cmp al, 5
ja 0x1004fe88
mov esi, dword [ebp - 0xcf0]
inc edi
mov cl, byte [esi + edx]
cmp ah, 0x39
ja 0x1004fe58
sub cl, 0x30
jmp 0x1004fe5b
sub cl, 0x37
mov esi, dword [ebp - 0xce8]
add cl, ah
mov al, 0x39
cmp al, ch
sbb al, al
shl cl, 4
and al, 7
add al, 0x30
sub cl, al
mov eax, dword [ebp - 0xcf0]
add cl, ch
mov byte [eax + edx], cl
mov eax, dword [ebp - 0xd00]
jmp 0x1004ff0d
cmp ah, 0x58
jne 0x1004febf
cmp ch, ah
jne 0x1004febf
mov eax, esi
sub eax, edx
cmp eax, 3
jbe 0x1004febf
mov eax, dword [ebx + 0xc]
add eax, edx
mov dword [ebp - 0xcec], eax
mov eax, dword [ebp - 0xcf0]
mov word [edx + eax], 0x5858
mov byte [edx + eax + 2], 0x58
add edx, 3
mov byte [edx + eax], 0x58
jmp 0x1004fec9
mov eax, dword [ebp - 0xcf0]
mov byte [edx + eax], 0x3f
test di, di
jle 0x1004feff
mov eax, dword [ebp - 0xd00]
mov word [ebp - 0xcf6], di
mov edi, dword [ebp - 0xcf4]
movsx ecx, di
inc edi
mov word [ebp - 0xcf8], ax
mov eax, dword [ebp - 0xcf8]
mov dword [ebp - 0xcf4], edi
mov dword [ebp + ecx*4 - 0x9f8], eax
lea eax, [edx + 1]
xor edi, edi
movzx eax, ax
mov dword [ebp - 0xd00], eax
inc edx
cmp edx, esi
jb 0x1004fe10
test di, di
jle 0x1004ff45
mov word [ebp - 0xcf8], ax
mov eax, dword [ebp - 0xcf4]
inc dword [ebp - 0xcf4]
movsx ecx, ax
mov word [ebp - 0xcf6], di
mov eax, dword [ebp - 0xcf8]
mov dword [ebp + ecx*4 - 0x9f8], eax
mov dword [ebp - 0xa58], 0
lea ecx, [ebp - 0x98]
mov dword [ebp - 0xa48], 0
mov dword [ebp - 0xa44], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0xa58], 0
mov dword [ebp - 4], 0xffffffff
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1004ff80
sub ecx, edx
lea eax, [ebp - 0x98]
push ecx
push eax
lea ecx, [ebp - 0xa58]
call fcn.10002f50
lea eax, [ebp - 0xa58]
mov dword [ebp - 4], 7
push eax
call fcn.1004d5a0
mov al, byte [eax]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xa44]
mov byte [ebp - 0xce3], al
cmp ecx, 0x10
jb 0x1004fffe
mov edx, dword [ebp - 0xa58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004ffee
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10050887
push ecx
push edx
call fcn.1001fb0c
mov al, byte [ebp - 0xce3]
add esp, 8
mov dword [ebp - 0xa48], 0
mov dword [ebp - 0xa44], 0xf
mov byte [ebp - 0xa58], 0
test al, al
jne 0x10050246
mov ecx, 0x224
lea eax, [ebp - 0xce0]
nop dword [eax]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x10050030
mov dword [ebp - 0xce0], 0x224
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x18
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov esi, eax
lea eax, [ebp - 0xce0]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_Module32First]
test eax, eax
je 0x10050184
mov edi, dword [sym.imp.KERNEL32.dll_Module32Next]
nop dword [eax]
nop word [eax + eax]
lea eax, [ebp - 0x98]
mov dword [ebp - 0xce0], 0x224
push eax
lea eax, [ebp - 0xcc0]
push eax
call fcn.10032252
add esp, 8
test eax, eax
je 0x100500b7
lea eax, [ebp - 0xce0]
push eax
push esi
call edi
test eax, eax
jne 0x10050080
jmp 0x10050184
mov eax, dword [ebp - 0xccc]
mov edi, dword [ebp - 0xcc8]
mov byte [ebp - 0xa34], 1
mov dword [ebp - 0xa30], eax
mov dword [ebp - 0xa70], 0
lea ecx, [ebp - 0x98]
mov dword [ebp - 0xa60], 0
mov dword [ebp - 0xa5c], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0xa70], 0
mov dword [ebp - 4], 0xffffffff
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10050105
sub ecx, edx
lea eax, [ebp - 0x98]
push ecx
push eax
lea ecx, [ebp - 0xa70]
call fcn.10002f50
lea eax, [ebp - 0xa70]
mov dword [ebp - 4], 9
push eax
call fcn.1004d5a0
movq xmm0, qword [ebp - 0xa34]
mov dword [ebp - 4], 0xffffffff
movq qword [eax], xmm0
mov dword [eax + 8], edi
mov ecx, dword [ebp - 0xa5c]
cmp ecx, 0x10
jb 0x10050184
mov edx, dword [ebp - 0xa70]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1005017a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1005088c
push ecx
push edx
call fcn.1001fb0c
add esp, 8
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xa88], 0
lea ecx, [ebp - 0x98]
mov dword [ebp - 0xa78], 0
mov dword [ebp - 0xa74], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0xa88], 0
mov dword [ebp - 4], 0xffffffff
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100501c0
sub ecx, edx
lea eax, [ebp - 0x98]
push ecx
push eax
lea ecx, [ebp - 0xa88]
call fcn.10002f50
lea eax, [ebp - 0xa88]
mov dword [ebp - 4], 0xb
push eax
call fcn.1004d5a0
mov al, byte [eax]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xa74]
mov byte [ebp - 0xce3], al
cmp ecx, 0x10
jb 0x1005023e
mov edx, dword [ebp - 0xa88]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1005022e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10050891
push ecx
push edx
call fcn.1001fb0c
mov al, byte [ebp - 0xce3]
add esp, 8
test al, al
je 0x10050793
mov dword [ebp - 0xa28], 0
lea ecx, [ebp - 0x98]
mov dword [ebp - 0xa18], 0
mov dword [ebp - 0xa14], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0xa28], 0
mov dword [ebp - 4], 0xffffffff
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10050280
sub ecx, edx
lea eax, [ebp - 0x98]
push ecx
push eax
lea ecx, [ebp - 0xa28]
call fcn.10002f50
lea eax, [ebp - 0xa28]
mov dword [ebp - 4], 0xd
push eax
call fcn.1004d5a0
mov edi, dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xa14]
mov dword [ebp - 0xd00], edi
cmp ecx, 0x10
jb 0x100502f9
mov edx, dword [ebp - 0xa28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100502ef
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10050896
push ecx
push edx
call fcn.1001fb0c
add esp, 8
mov dword [ebp - 0xa18], 0
mov dword [ebp - 0xa14], 0xf
mov byte [ebp - 0xa28], 0
mov dword [ebp - 0xaa0], 0
lea ecx, [ebp - 0x98]
mov dword [ebp - 0xa90], 0
mov dword [ebp - 0xa8c], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0xaa0], 0
mov dword [ebp - 4], 0xffffffff
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10050350
sub ecx, edx
lea eax, [ebp - 0x98]
push ecx
push eax
lea ecx, [ebp - 0xaa0]
call fcn.10002f50
lea eax, [ebp - 0xaa0]
mov dword [ebp - 4], 0xf
push eax
call fcn.1004d5a0
mov esi, dword [eax + 8]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xa8c]
mov dword [ebp - 0xcf8], esi
cmp ecx, 0x10
jb 0x100503c9
mov edx, dword [ebp - 0xaa0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100503bf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1005089b
push ecx
push edx
call fcn.1001fb0c
add esp, 8
mov eax, dword [ebp - 0xcf0]
sub esi, dword [ebp - 0xcfc]
push esi
movzx eax, byte [eax]
push eax
push edi
mov dword [ebp - 0xd04], eax
call fcn.10021cf0
mov edx, eax
add esp, 0xc
mov dword [ebp - 0xce8], edx
test edx, edx
je 0x10050793
lea eax, [edi + esi]
mov dword [ebp - 0xd08], eax
cmp edx, eax
jae 0x10050793
mov eax, dword [ebp - 0xcf4]
xor ecx, ecx
xor edi, edi
cmp cx, ax
jge 0x100504de
movsx eax, di
movsx ecx, word [ebp + eax*4 - 0x9f8]
movsx esi, word [ebp + eax*4 - 0x9f6]
lea eax, [ecx + edx]
mov edx, dword [ebp - 0xcf0]
add edx, ecx
sub esi, 4
jb 0x10050451
mov ecx, dword [edx]
cmp ecx, dword [eax]
jne 0x10050456
add edx, 4
add eax, 4
sub esi, 4
jae 0x10050440
cmp esi, 0xfffffffc
je 0x10050483
mov cl, byte [edx]
cmp cl, byte [eax]
jne 0x10050493
cmp esi, 0xfffffffd
je 0x10050483
mov cl, byte [edx + 1]
cmp cl, byte [eax + 1]
jne 0x10050493
cmp esi, 0xfffffffe
je 0x10050483
mov cl, byte [edx + 2]
cmp cl, byte [eax + 2]
jne 0x10050493
cmp esi, 0xffffffff
je 0x10050483
mov cl, byte [edx + 3]
cmp cl, byte [eax + 3]
jne 0x10050493
mov edx, dword [ebp - 0xce8]
inc edi
cmp di, word [ebp - 0xcf4]
jmp 0x10050417
mov ecx, dword [ebp - 0xce8]
mov eax, dword [ebp - 0xcf8]
mov edi, dword [ebp - 0xd00]
sub eax, ecx
sub eax, dword [ebp - 0xcfc]
dec edi
add eax, edi
push eax
push dword [ebp - 0xd04]
lea eax, [ecx + 1]
push eax
call fcn.10021cf0
mov edx, eax
mov dword [ebp - 0xce8], eax
add esp, 0xc
test edx, edx
je 0x10050793
mov eax, dword [ebp - 0xd08]
jmp 0x10050402
cmp byte [ebp - 0xce1], 0
jne 0x100505b1
cmp byte [ebp - 0xce2], 0
jne 0x100505be
mov dword [ebp - 0xa10], 0
lea ecx, [ebp - 0x578]
mov dword [ebp - 0xa00], 0
mov dword [ebp - 0x9fc], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0xa10], 0
mov dword [ebp - 4], 0xffffffff
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10050530
sub ecx, edx
lea eax, [ebp - 0x578]
push ecx
push eax
lea ecx, [ebp - 0xa10]
call fcn.10002f50
lea eax, [ebp - 0xa10]
mov dword [ebp - 4], 0x15
push eax
call fcn.10017430
mov ecx, dword [ebp - 0xce8]
add ecx, dword [ebp - 0xcec]
mov dword [ebp - 4], 0xffffffff
mov dword [eax], ecx
mov ecx, dword [ebp - 0x9fc]
cmp ecx, 0x10
jb 0x100506e2
mov edx, dword [ebp - 0xa10]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100506d8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100508a0
jmp 0x100506d8
cmp byte [ebp - 0xce2], 0
je 0x10050672
mov eax, dword [ebp - 0xcec]
mov eax, dword [edx + eax]
mov esi, dword [eax]
mov dword [ebp - 0xa10], 0
lea ecx, [ebp - 0x578]
mov dword [ebp - 0xa00], 0
mov dword [ebp - 0x9fc], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0xa10], 0
mov dword [ebp - 4], 0xffffffff
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10050600
sub ecx, edx
lea eax, [ebp - 0x578]
push ecx
push eax
lea ecx, [ebp - 0xa10]
call fcn.10002f50
mov dword [ebp - 4], 0x11
lea eax, [ebp - 0xa10]
push eax
call fcn.10017430
mov dword [ebp - 4], 0xffffffff
mov dword [eax], esi
mov ecx, dword [ebp - 0x9fc]
cmp ecx, 0x10
jb 0x100506e2
mov edx, dword [ebp - 0xa10]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100506d8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100508a5
jmp 0x100506d8
mov eax, dword [ebp - 0xcec]
mov dword [ebp - 0xa10], 0
mov esi, dword [edx + eax]
lea ecx, [ebp - 0x578]
mov dword [ebp - 0xa00], 0
mov dword [ebp - 0x9fc], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0xa10], 0
mov dword [ebp - 4], 0xffffffff
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100506b0
sub ecx, edx
lea eax, [ebp - 0x578]
push ecx
push eax
lea ecx, [ebp - 0xa10]
call fcn.10002f50
mov dword [ebp - 4], 0x13
jmp 0x10050623
push ecx
push edx
call fcn.1001fb0c
add esp, 8
push dword [ebp - 0xcf0]
call fcn.1001fad2
add esp, 4
mov dword [ebp - 0xab8], 0
lea ecx, [ebp - 0x578]
mov dword [ebp - 0xaa8], 0
mov dword [ebp - 0xaa4], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0xab8], 0
mov dword [ebp - 4], 0xffffffff
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10050725
sub ecx, edx
lea eax, [ebp - 0x578]
push ecx
push eax
lea ecx, [ebp - 0xab8]
call fcn.10002f50
lea eax, [ebp - 0xab8]
mov dword [ebp - 4], 0x17
push eax
call fcn.10017430
mov ecx, dword [ebp - 0xaa4]
mov esi, dword [eax]
cmp ecx, 0x10
jb 0x1004fd9b
mov edx, dword [ebp - 0xab8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004fd91
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1004fd91
jmp 0x100508a5
push dword [ebp - 0xcf0]
call fcn.1001fad2
add esp, 4
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1001fac4
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0xc
push 0x1007e71c
call fcn.1001fc70
add esp, 4
cmp dword [0x1007e71c], 0xffffffff
jne 0x1004fc19
push 0x34
mov dword [ebp - 4], 0
call fcn.1001fad7
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
push 0x10060500
mov dword [0x1007e72c], eax
call fcn.10020160
add esp, 4
push 0x1007e71c
call fcn.1001fc26
add esp, 4
jmp 0x1004fc19
push 0x1007e728
call fcn.1001fc70
add esp, 4
cmp dword [0x1007e728], 0xffffffff
jne 0x1004fc2a
push 0x2c
mov dword [ebp - 4], 1
call fcn.1001fad7
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
push 0x100604d0
mov dword [0x1007e714], eax
call fcn.10020160
add esp, 4
push 0x1007e728
call fcn.1001fc26
add esp, 4
jmp 0x1004fc2a
call fcn.10024cca
call fcn.10024cca
call fcn.10024cca
call fcn.10024cca
call fcn.10024cca
call fcn.10024cca
call fcn.10024cca
call fcn.10024cca
call fcn.10024cca
int3