Function at 0x5906a330
Capabilities:
Check for time delay via queryperformancecounter

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x591444d0
push eax
mov dword fs:[0], esp
sub esp, 0x30
push ebx
mov ebx, dword [esp + 0x44]
push ebp
push esi
test ebx, ebx
push edi
je 0x5906a61c
mov ebp, dword [esp + 0x54]
test ebp, ebp
je 0x5906a61c
mov eax, dword [esp + 0x5c]
test eax, eax
je 0x5906a61c
mov eax, dword [esp + 0x60]
test eax, eax
je 0x5906a61c
mov eax, dword [0x59194a20]
test eax, eax
je 0x5906a39e
push str.IsEMailHtml_______
push str.Winncap
push 0xffffffffffffffff
push 0x591949b4
call fcn.59078030
add esp, 0x10
mov esi, dword [esp + 0x58]
test esi, esi
jle 0x5906af67
push 5
push 0x59176004
push ebp
call fcn.59089490
add esp, 0xc
test eax, eax
je 0x5906a410
mov eax, dword [ebx + 0x1c]
test eax, eax
je 0x5906a3d9
push 5
push 0x59176004
push eax
call fcn.59089490
add esp, 0xc
test eax, eax
je 0x5906a410
push 4
push str.PUT
push ebp
call fcn.59089490
add esp, 0xc
test eax, eax
je 0x5906a410
mov eax, dword [ebx + 0x1c]
test eax, eax
je 0x5906a61c
push 4
push str.PUT
push eax
call fcn.59089490
add esp, 0xc
test eax, eax
jne 0x5906a61c
mov edi, 0x59173d00
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x59173d00
push esi
push ebp
call fcn.590660d0
add esp, 0x10
cmp eax, 0xffffffff
jne 0x5906a51c
push esi
lea eax, [ebx + 0x14]
push ebp
push eax
call fcn.59066b30
add esp, 0xc
cmp eax, 1
mov dword [esp + 0x58], eax
jne 0x5906a61e
push eax
push 0x59195930
lea ecx, [esp + 0x1c]
call fcn.590a72b0
mov ebp, dword [0x59195954]
xor edx, edx
or edi, 0xffffffff
cmp ebp, edx
mov dword [esp + 0x48], edx
jle 0x5906a4a8
mov ecx, dword [0x59195950]
mov eax, dword [ebx + 0x24]
mov esi, dword [ecx]
cmp esi, eax
jne 0x5906a49c
mov eax, dword [esp + 0x60]
mov esi, dword [ecx + 8]
mov eax, dword [eax]
add eax, 0x10
cmp esi, dword [eax]
jne 0x5906a49c
mov esi, dword [ecx + 0xc]
cmp esi, dword [eax + 4]
je 0x5906a4a6
inc edx
add ecx, 0x20
cmp edx, ebp
jl 0x5906a47b
jmp 0x5906a4a8
mov edi, edx
mov esi, dword [esp + 0x60]
mov ecx, dword [esi]
add ecx, 0x10
push ecx
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
cmp edi, 0xffffffff
je 0x5906a4eb
mov edx, dword [esi]
mov esi, dword [0x59195950]
shl edi, 5
mov ecx, dword [edx + 0x10]
mov eax, edi
mov dword [eax + esi + 8], ecx
mov ecx, dword [0x59195950]
mov edx, dword [edx + 0x14]
mov dword [eax + ecx + 0xc], edx
mov ecx, dword [0x59195950]
mov edx, dword [ebx + 0x1c]
mov dword [eax + ecx + 0x18], edx
lea ecx, [esp + 0x14]
call fcn.590a7360
lea ecx, [esp + 0x14]
mov dword [esp + 0x48], 0xffffffff
call fcn.590a7310
mov eax, dword [esp + 0x58]
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
add esp, 0x3c
ret
mov eax, dword [ebx + 0x1c]
mov edi, dword [esp + 0x54]
mov ebp, dword [esp + 0x58]
xor esi, esi
test eax, eax
mov dword [esp + 0x50], edi
je 0x5906a64a
mov edx, ebp
mov ecx, edi
lea eax, [ebx + 0x14]
push edx
push ecx
push eax
call fcn.59066b30
add esp, 0xc
test eax, eax
je 0x5906a61c
push 1
push 0x59195930
lea ecx, [esp + 0x1c]
call fcn.590a72b0
mov ebp, dword [0x59195954]
or edi, 0xffffffff
xor edx, edx
mov dword [esp + 0x48], 1
test ebp, ebp
jle 0x5906a5a9
mov ecx, dword [0x59195950]
mov eax, dword [ebx + 0x24]
mov esi, dword [ecx]
cmp esi, eax
jne 0x5906a59d
mov eax, dword [esp + 0x60]
mov esi, dword [ecx + 8]
mov eax, dword [eax]
add eax, 0x10
cmp esi, dword [eax]
jne 0x5906a59d
mov esi, dword [ecx + 0xc]
cmp esi, dword [eax + 4]
je 0x5906a5a7
inc edx
add ecx, 0x20
cmp edx, ebp
jl 0x5906a57c
jmp 0x5906a5a9
mov edi, edx
mov esi, dword [esp + 0x60]
mov ecx, dword [esi]
add ecx, 0x10
push ecx
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
cmp edi, 0xffffffff
je 0x5906a5ec
mov edx, dword [esi]
mov esi, dword [0x59195950]
shl edi, 5
mov ecx, dword [edx + 0x10]
mov eax, edi
mov dword [eax + esi + 8], ecx
mov ecx, dword [0x59195950]
mov edx, dword [edx + 0x14]
mov dword [eax + ecx + 0xc], edx
mov ecx, dword [0x59195950]
mov edx, dword [ebx + 0x1c]
mov dword [eax + ecx + 0x18], edx
lea ecx, [esp + 0x14]
call fcn.590a7360
lea ebp, [ebx + 0x14]
push ebp
call fcn.59066e20
mov edi, eax
add esp, 4
test edi, edi
mov dword [esp + 0x50], edi
jne 0x5906a631
lea ecx, [esp + 0x14]
mov dword [esp + 0x48], 0xffffffff
call fcn.590a7310
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
add esp, 0x3c
ret
mov ebp, dword [ebp]
lea ecx, [esp + 0x14]
mov esi, 1
mov dword [esp + 0x48], 0xffffffff
call fcn.590a7310
push ebp
push edi
call fcn.59066fa0
add esp, 8
test eax, eax
jne 0x5906a61c
push ebp
push edi
push ebx
call fcn.59069810
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.590697a0
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.5906a290
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.59067810
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.59067880
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.590678f0
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.59067950
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.590690f0
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.59069130
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.59069190
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.59067a40
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.59067bb0
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.59067d20
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.59067d80
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.59067e00
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.59067e60
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.59068710
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.59068af0
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.590691d0
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.59069230
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.59068bc0
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.59068d20
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.59068e90
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.590684a0
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.59068580
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.590685f0
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.59068b60
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.590686a0
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.59067ec0
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.59067fa0
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.59068000
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.59068060
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.59068510
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.59069270
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.590692b0
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.59069440
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.59068440
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.59069580
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.590695c0
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.59069630
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.590696a0
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.59069730
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.590680c0
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.59068130
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.590688d0
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.590683d0
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.59069b60
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.59069bf0
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.590679b0
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.59069ca0
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.59069d50
add esp, 0xc
test eax, eax
jne 0x5906aa14
push ebp
push edi
push ebx
call fcn.59069880
add esp, 0xc
test eax, eax
je 0x5906a61c
test esi, esi
jne 0x5906ace1
mov edx, dword [esp + 0x58]
mov ecx, dword [esp + 0x54]
lea eax, [ebx + 0x14]
push edx
push ecx
push eax
call fcn.59066b30
add esp, 0xc
cmp eax, 1
mov dword [esp + 0x54], eax
jne 0x5906acca
mov esi, dword [esp + 0x60]
mov edx, dword [esi]
add edx, 0x10
push edx
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov eax, dword [esi]
mov esi, dword [ebx + 0x1c]
mov ecx, dword [ebx + 0x24]
mov dword [esp + 0x38], esi
mov edx, dword [eax + 0x10]
mov edi, dword [eax + 0x14]
mov ebp, dword [eax + 8]
mov eax, dword [eax + 0xc]
xor esi, esi
mov dword [esp + 0x20], ecx
cmp dword [0x59194a20], esi
mov dword [esp + 0x28], edx
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], ebp
mov dword [esp + 0x34], eax
je 0x5906aaa3
push eax
push ebp
push edi
push edx
push ecx
push str.IsEMailHtml_g_arrTypeAndTime.Add__Type:_04x__Time:_I64u__TimeBegin:_I64u_
push str.winncap
push 0xffffffffffffffff
push 0x591949b4
call fcn.59078030
add esp, 0x24
push 1
push 0x59195930
lea ecx, [esp + 0x1c]
call fcn.590a72b0
mov eax, dword [0x59195954]
mov dword [esp + 0x48], 2
mov ebp, eax
cmp ebp, eax
mov dword [esp + 0x10], ebp
jl 0x5906ac2f
inc ebp
cmp ebp, esi
jne 0x5906aafc
mov eax, dword [0x59195950]
cmp eax, esi
je 0x5906aaeb
push eax
call fcn.5912c529
add esp, 4
mov dword [0x59195950], esi
mov dword [0x59195958], esi
mov dword [0x59195954], esi
jmp 0x5906ac2f
mov edx, dword [0x59195950]
cmp edx, esi
jne 0x5906ab3f
mov esi, ebp
shl esi, 5
push esi
call fcn.5912c500
mov ecx, esi
mov edi, eax
mov edx, ecx
xor eax, eax
shr ecx, 2
mov dword [0x59195950], edi
add esp, 4
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov dword [0x59195958], ebp
mov dword [0x59195954], ebp
jmp 0x5906ac2f
mov esi, dword [0x59195958]
cmp ebp, esi
jg 0x5906ab76
cmp ebp, eax
jle 0x5906ab6b
mov ecx, ebp
sub ecx, eax
shl eax, 5
shl ecx, 5
add eax, edx
mov edx, ecx
mov edi, eax
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov dword [0x59195954], ebp
jmp 0x5906ac2f
mov ecx, dword [0x5919595c]
test ecx, ecx
jne 0x5906aba4
cdq
and edx, 7
add eax, edx
mov ecx, eax
sar ecx, 3
cmp ecx, 4
jge 0x5906ab97
mov ecx, 4
jmp 0x5906aba4
cmp ecx, 0x400
jle 0x5906aba4
mov ecx, 0x400
lea eax, [ecx + esi]
cmp ebp, eax
mov dword [esp + 0x58], eax
jl 0x5906abb3
mov dword [esp + 0x58], ebp
mov eax, dword [esp + 0x58]
shl eax, 5
push eax
call fcn.5912c500
mov ecx, dword [0x59195954]
mov esi, dword [0x59195950]
shl ecx, 5
mov edx, ecx
mov edi, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov dword [esp + 0x54], eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edx, dword [0x59195954]
mov ecx, ebp
sub ecx, edx
shl edx, 5
add edx, eax
xor eax, eax
shl ecx, 5
mov edi, edx
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov eax, dword [0x59195950]
push eax
call fcn.5912c529
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x60]
add esp, 8
mov dword [0x59195950], ecx
mov dword [0x59195954], ebp
mov dword [0x59195958], edx
mov edi, dword [esp + 0x10]
mov esi, dword [0x59195950]
shl edi, 5
add edi, esi
mov ecx, 8
lea esi, [esp + 0x20]
rep movsd dword es:[edi], dword [esi]
lea ecx, [esp + 0x14]
mov dword [esp + 0x48], 0xffffffff
call fcn.590a7310
lea edi, [ebx + 0x14]
push edi
call fcn.59066e20
mov esi, eax
add esp, 4
test esi, esi
je 0x5906a61c
mov edi, dword [edi]
push edi
push esi
mov dword [esp + 0x60], edi
call fcn.590665a0
add esp, 8
test eax, eax
je 0x5906acca
mov eax, dword [ebx + 0x24]
mov edi, dword [esp + 0x60]
mov ebp, dword [esp + 0x5c]
push 1
push eax
push 3
push edi
push ebp
call fcn.5906b610
add esp, 0x14
mov dword [esp + 0x54], eax
test eax, eax
jne 0x5906acc3
mov ecx, dword [ebx + 0x24]
mov edx, dword [esp + 0x58]
push edi
push 1
push eax
push ecx
push 3
push edx
push esi
push ebp
call fcn.59066610
add esp, 0x20
mov dword [esp + 0x54], eax
mov dword [ebx + 0x28], 1
mov eax, dword [esp + 0x54]
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
add esp, 0x3c
ret
mov eax, dword [esp + 0x60]
mov ecx, dword [ebx + 0x24]
mov dword [esp + 0x20], ecx
mov eax, dword [eax]
mov edx, dword [eax + 0x10]
mov edi, dword [eax + 0x14]
mov esi, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x34], eax
mov eax, dword [ebx + 0x1c]
mov dword [esp + 0x38], eax
mov eax, dword [0x59194a20]
test eax, eax
mov dword [esp + 0x28], edx
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], esi
je 0x5906ad3c
mov eax, dword [esp + 0x34]
push eax
push esi
push edi
push edx
push ecx
push str.IsEMailHtml_g_arrTypeAndTime.Add_222__Type:_04x__Time:_I64u__TimeBegin:_lu_
push str.winncap
push 0xffffffffffffffff
push 0x591949b4
call fcn.59078030
add esp, 0x24
push 1
push 0x59195930
lea ecx, [esp + 0x1c]
call fcn.590a72b0
mov edx, dword [0x59195954]
mov dword [esp + 0x48], 3
cmp edx, edx
mov dword [esp + 0x54], edx
jl 0x5906aecb
mov eax, dword [0x59195950]
lea esi, [edx + 1]
xor edi, edi
cmp esi, edi
jne 0x5906ad98
cmp eax, edi
je 0x5906ad87
push eax
call fcn.5912c529
add esp, 4
mov dword [0x59195950], edi
mov dword [0x59195958], edi
mov dword [0x59195954], edi
jmp 0x5906aecb
cmp eax, edi
jne 0x5906add7
mov edi, esi
shl edi, 5
push edi
call fcn.5912c500
mov edx, eax
mov ecx, edi
mov dword [0x59195950], edx
mov edi, edx
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
add esp, 4
and ecx, 3
rep stosb byte es:[edi], al
mov dword [0x59195958], esi
mov dword [0x59195954], esi
jmp 0x5906aecb
mov ecx, dword [0x59195958]
cmp esi, ecx
jg 0x5906ae0e
cmp esi, edx
jle 0x5906ae03
mov ecx, esi
sub ecx, edx
shl edx, 5
add edx, eax
xor eax, eax
shl ecx, 5
mov edi, edx
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov dword [0x59195954], esi
jmp 0x5906aecb
mov eax, dword [0x5919595c]
cmp eax, edi
jne 0x5906ae3a
mov eax, edx
cdq
and edx, 7
add eax, edx
sar eax, 3
cmp eax, 4
jge 0x5906ae2e
mov eax, 4
jmp 0x5906ae3a
cmp eax, 0x400
jle 0x5906ae3a
mov eax, 0x400
add eax, ecx
cmp esi, eax
mov dword [esp + 0x58], eax
jl 0x5906ae48
mov dword [esp + 0x58], esi
mov eax, dword [esp + 0x58]
shl eax, 5
push eax
call fcn.5912c500
mov ecx, dword [0x59195954]
mov esi, dword [0x59195950]
shl ecx, 5
mov edx, ecx
mov edi, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov dword [esp + 0x14], eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x58]
mov edx, dword [0x59195954]
lea esi, [ecx + 1]
mov ecx, esi
sub ecx, edx
shl edx, 5
add edx, eax
xor eax, eax
shl ecx, 5
mov edi, edx
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov eax, dword [0x59195950]
push eax
call fcn.5912c529
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x60]
add esp, 8
mov dword [0x59195950], ecx
mov dword [0x59195954], esi
mov dword [0x59195958], edx
mov edi, dword [esp + 0x54]
mov ecx, dword [0x59195950]
mov eax, dword [esp + 0x50]
lea esi, [esp + 0x20]
shl edi, 5
add edi, ecx
mov ecx, 8
rep movsd dword es:[edi], dword [esi]
push ebp
push eax
mov esi, 1
call fcn.590665a0
add esp, 8
test eax, eax
je 0x5906af41
mov ecx, dword [ebx + 0x24]
mov edi, dword [esp + 0x60]
mov edx, dword [esp + 0x5c]
push esi
push ecx
push 3
push edi
push edx
call fcn.5906b610
mov esi, eax
add esp, 0x14
test esi, esi
jne 0x5906af3a
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x5c]
push edi
push 1
push eax
mov eax, dword [ebx + 0x24]
push eax
push 3
push ebp
push ecx
push edx
call fcn.59066610
add esp, 0x20
mov esi, eax
mov dword [ebx + 0x28], 1
lea ecx, [esp + 0x14]
mov dword [esp + 0x48], 0xffffffff
call fcn.590a7310
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
add esp, 0x3c
ret
mov ecx, dword [esp + 0x40]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
mov dword fs:[0], ecx
add esp, 0x3c
ret