00404990    $  8B10              MOV EDX,DWORD PTR DS:[EAX]
00404992    .  85D2              TEST EDX,EDX                               ;  ntdll.KiFastSystemCallRet
00404994    .  74 1C             JE SHORT eXeScope.004049B2
00404996    .  C700 00000000     MOV DWORD PTR DS:[EAX],0
0040499C    .  8B4A F8           MOV ECX,DWORD PTR DS:[EDX-8]
0040499F    .  49                DEC ECX
004049A0    .  7C 10             JL SHORT eXeScope.004049B2
004049A2    .  F0:FF4A F8        LOCK DEC DWORD PTR DS:[EDX-8]              ;  LOCK prefix
004049A6    .  75 0A             JNZ SHORT eXeScope.004049B2
004049A8    .  50                PUSH EAX
004049A9    .  8D42 F8           LEA EAX,DWORD PTR DS:[EDX-8]
004049AC    .  E8 0BDEFFFF       CALL eXeScope.004027BC
004049B1    .  58                POP EAX                                    ;  kernel32.7C816FD7
004049B2    >  C3                RETN
004049B3       90                NOP
004049B4    $  53                PUSH EBX
004049B5    .  56                PUSH ESI
004049B6    .  89C3              MOV EBX,EAX
004049B8    .  89D6              MOV ESI,EDX                                ;  ntdll.KiFastSystemCallRet
004049BA    >  8B13              MOV EDX,DWORD PTR DS:[EBX]
004049BC    .  85D2              TEST EDX,EDX                               ;  ntdll.KiFastSystemCallRet
004049BE    .  74 1A             JE SHORT eXeScope.004049DA
004049C0    .  C703 00000000     MOV DWORD PTR DS:[EBX],0
004049C6    .  8B4A F8           MOV ECX,DWORD PTR DS:[EDX-8]
004049C9    .  49                DEC ECX
004049CA    .  7C 0E             JL SHORT eXeScope.004049DA
004049CC    .  F0:FF4A F8        LOCK DEC DWORD PTR DS:[EDX-8]              ;  LOCK prefix
004049D0    .  75 08             JNZ SHORT eXeScope.004049DA
004049D2    .  8D42 F8           LEA EAX,DWORD PTR DS:[EDX-8]
004049D5    .  E8 E2DDFFFF       CALL eXeScope.004027BC
004049DA    >  83C3 04           ADD EBX,4
004049DD    .  4E                DEC ESI
004049DE    .^ 75 DA             JNZ SHORT eXeScope.004049BA
004049E0    .  5E                POP ESI                                    ;  kernel32.7C816FD7
004049E1    .  5B                POP EBX                                    ;  kernel32.7C816FD7
004049E2    .  C3                RETN
004049E3       90                NOP
004049E4    $  85D2              TEST EDX,EDX                               ;  ntdll.KiFastSystemCallRet
004049E6    .  74 24             JE SHORT eXeScope.00404A0C
004049E8    .  8B4A F8           MOV ECX,DWORD PTR DS:[EDX-8]
004049EB    .  41                INC ECX
004049EC    .  7F 1A             JG SHORT eXeScope.00404A08
004049EE    .  50                PUSH EAX
004049EF    .  52                PUSH EDX                                   ;  ntdll.KiFastSystemCallRet
004049F0    .  8B42 FC           MOV EAX,DWORD PTR DS:[EDX-4]
004049F3    .  E8 5C000000       CALL eXeScope.00404A54
004049F8    .  89C2              MOV EDX,EAX
004049FA    .  58                POP EAX                                    ;  kernel32.7C816FD7
004049FB    .  52                PUSH EDX                                   ;  ntdll.KiFastSystemCallRet
004049FC    .  8B48 FC           MOV ECX,DWORD PTR DS:[EAX-4]
004049FF    .  E8 A0DFFFFF       CALL eXeScope.004029A4
00404A04    .  5A                POP EDX                                    ;  kernel32.7C816FD7
00404A05    .  58                POP EAX                                    ;  kernel32.7C816FD7
00404A06    .  EB 04             JMP SHORT eXeScope.00404A0C
00404A08    >  F0:FF42 F8        LOCK INC DWORD PTR DS:[EDX-8]              ;  LOCK prefix
00404A0C    >  8710              XCHG DWORD PTR DS:[EAX],EDX                ;  ntdll.KiFastSystemCallRet
00404A0E    .  85D2              TEST EDX,EDX                               ;  ntdll.KiFastSystemCallRet
00404A10    .  74 14             JE SHORT eXeScope.00404A26
00404A12    .  8B4A F8           MOV ECX,DWORD PTR DS:[EDX-8]
00404A15    .  49                DEC ECX
00404A16    .  7C 0E             JL SHORT eXeScope.00404A26
00404A18    .  F0:FF4A F8        LOCK DEC DWORD PTR DS:[EDX-8]              ;  LOCK prefix
00404A1C    .  75 08             JNZ SHORT eXeScope.00404A26
00404A1E    .  8D42 F8           LEA EAX,DWORD PTR DS:[EDX-8]
00404A21    .  E8 96DDFFFF       CALL eXeScope.004027BC
00404A26    >  C3                RETN