rendered paste body00404990 $ 8B10 MOV EDX,DWORD PTR DS:[EAX]
00404992 . 85D2 TEST EDX,EDX ; ntdll.KiFastSystemCallRet
00404994 . 74 1C JE SHORT eXeScope.004049B2
00404996 . C700 00000000 MOV DWORD PTR DS:[EAX],0
0040499C . 8B4A F8 MOV ECX,DWORD PTR DS:[EDX-8]
0040499F . 49 DEC ECX
004049A0 . 7C 10 JL SHORT eXeScope.004049B2
004049A2 . F0:FF4A F8 LOCK DEC DWORD PTR DS:[EDX-8] ; LOCK prefix
004049A6 . 75 0A JNZ SHORT eXeScope.004049B2
004049A8 . 50 PUSH EAX
004049A9 . 8D42 F8 LEA EAX,DWORD PTR DS:[EDX-8]
004049AC . E8 0BDEFFFF CALL eXeScope.004027BC
004049B1 . 58 POP EAX ; kernel32.7C816FD7
004049B2 > C3 RETN
004049B3 90 NOP
004049B4 $ 53 PUSH EBX
004049B5 . 56 PUSH ESI
004049B6 . 89C3 MOV EBX,EAX
004049B8 . 89D6 MOV ESI,EDX ; ntdll.KiFastSystemCallRet
004049BA > 8B13 MOV EDX,DWORD PTR DS:[EBX]
004049BC . 85D2 TEST EDX,EDX ; ntdll.KiFastSystemCallRet
004049BE . 74 1A JE SHORT eXeScope.004049DA
004049C0 . C703 00000000 MOV DWORD PTR DS:[EBX],0
004049C6 . 8B4A F8 MOV ECX,DWORD PTR DS:[EDX-8]
004049C9 . 49 DEC ECX
004049CA . 7C 0E JL SHORT eXeScope.004049DA
004049CC . F0:FF4A F8 LOCK DEC DWORD PTR DS:[EDX-8] ; LOCK prefix
004049D0 . 75 08 JNZ SHORT eXeScope.004049DA
004049D2 . 8D42 F8 LEA EAX,DWORD PTR DS:[EDX-8]
004049D5 . E8 E2DDFFFF CALL eXeScope.004027BC
004049DA > 83C3 04 ADD EBX,4
004049DD . 4E DEC ESI
004049DE .^ 75 DA JNZ SHORT eXeScope.004049BA
004049E0 . 5E POP ESI ; kernel32.7C816FD7
004049E1 . 5B POP EBX ; kernel32.7C816FD7
004049E2 . C3 RETN
004049E3 90 NOP
004049E4 $ 85D2 TEST EDX,EDX ; ntdll.KiFastSystemCallRet
004049E6 . 74 24 JE SHORT eXeScope.00404A0C
004049E8 . 8B4A F8 MOV ECX,DWORD PTR DS:[EDX-8]
004049EB . 41 INC ECX
004049EC . 7F 1A JG SHORT eXeScope.00404A08
004049EE . 50 PUSH EAX
004049EF . 52 PUSH EDX ; ntdll.KiFastSystemCallRet
004049F0 . 8B42 FC MOV EAX,DWORD PTR DS:[EDX-4]
004049F3 . E8 5C000000 CALL eXeScope.00404A54
004049F8 . 89C2 MOV EDX,EAX
004049FA . 58 POP EAX ; kernel32.7C816FD7
004049FB . 52 PUSH EDX ; ntdll.KiFastSystemCallRet
004049FC . 8B48 FC MOV ECX,DWORD PTR DS:[EAX-4]
004049FF . E8 A0DFFFFF CALL eXeScope.004029A4
00404A04 . 5A POP EDX ; kernel32.7C816FD7
00404A05 . 58 POP EAX ; kernel32.7C816FD7
00404A06 . EB 04 JMP SHORT eXeScope.00404A0C
00404A08 > F0:FF42 F8 LOCK INC DWORD PTR DS:[EDX-8] ; LOCK prefix
00404A0C > 8710 XCHG DWORD PTR DS:[EAX],EDX ; ntdll.KiFastSystemCallRet
00404A0E . 85D2 TEST EDX,EDX ; ntdll.KiFastSystemCallRet
00404A10 . 74 14 JE SHORT eXeScope.00404A26
00404A12 . 8B4A F8 MOV ECX,DWORD PTR DS:[EDX-8]
00404A15 . 49 DEC ECX
00404A16 . 7C 0E JL SHORT eXeScope.00404A26
00404A18 . F0:FF4A F8 LOCK DEC DWORD PTR DS:[EDX-8] ; LOCK prefix
00404A1C . 75 08 JNZ SHORT eXeScope.00404A26
00404A1E . 8D42 F8 LEA EAX,DWORD PTR DS:[EDX-8]
00404A21 . E8 96DDFFFF CALL eXeScope.004027BC
00404A26 > C3 RETN