Function at 0x1cb2d60
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x1d6b437
mov eax, dword fs:[0]
push eax
sub esp, 0x840
mov eax, dword [0x1dbb89c]
xor eax, esp
mov dword [esp + 0x838], eax
push ebx
push esi
push edi
mov eax, dword [0x1dbb89c]
xor eax, esp
push eax
lea eax, [esp + 0x850]
mov dword fs:[0], eax
mov ecx, dword [ebp + 0x18]
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp + 0x20]
mov ebx, dword [ebp + 0x28]
mov esi, dword [ebp + 8]
mov dword [esp + 0x38], ecx
lea ecx, [esp + 0x3fc]
mov dword [esp + 0x40], eax
mov dword [esp + 0x30], edx
mov dword [esp + 0x18], ebx
call fcn.01d26ef0
xor edi, edi
mov dword [esp + 0x858], edi
lea eax, [esp + 0x3fc]
push eax
push esi
call fcn.01d12b20
add esp, 8
push eax
lea ecx, [esp + 0x2b0]
call fcn.01d27240
mov byte [esp + 0x858], 1
mov ecx, dword [esp + 0x2ac]
push ecx
call fcn.01d2d090
mov esi, dword [esp + 0x2b0]
add esp, 4
lea ecx, [esp + 0x354]
call fcn.01d26ef0
mov byte [esp + 0x858], 2
lea ecx, [esp + 0x204]
call fcn.01d26ef0
mov byte [esp + 0x858], 3
lea ecx, [esp + 0xb4]
call fcn.01d26ef0
mov byte [esp + 0x858], 4
call dword [0x1da3abc]
push edi
lea edx, [esp + 0x358]
push edx
push esi
mov dword [esp + 0x70], eax
call fcn.01cafb90
mov eax, dword [esp + 0x360]
lea ecx, [esp + 0x54]
push ecx
lea edx, [esp + 0xc4]
push edx
push esi
mov dword [esp + 0x84], eax
call fcn.01cafb90
add esp, 0x18
test al, al
jne 0x1cb2ea5
push 3
call dword [0x1da3b34]
mov eax, dword [esp + 0x30]
mov dword [eax], 0xffffffff
jmp 0x1cb39c9
mov ecx, dword [esp + 0xb4]
push ecx
call fcn.01cad880
add esp, 4
test al, al
jne 0x1cb2f27
mov byte [esp + 0x858], 3
lea ecx, [esp + 0xb4]
call fcn.01d26680
mov byte [esp + 0x858], 2
lea ecx, [esp + 0x204]
call fcn.01d26680
mov byte [esp + 0x858], 1
lea ecx, [esp + 0x354]
call fcn.01d26680
mov byte [esp + 0x858], 0
lea ecx, [esp + 0x2ac]
call fcn.01d26680
mov dword [esp + 0x858], 0xffffffff
lea ecx, [esp + 0x3fc]
call fcn.01d26680
xor al, al
jmp 0x1cb3a32
mov esi, dword [esp + 0x48]
cmp esi, edi
je 0x1cb2fca
cmp esi, dword [esp + 0xb4]
jbe 0x1cb2fca
movzx ebx, word [esi - 2]
xor edx, edx
mov word [esi - 2], dx
mov eax, dword [esp + 0xb4]
push eax
call fcn.01cae8c0
cmp eax, 0xffffffff
jne 0x1cb2f73
push 3
call dword [0x1da3b34]
mov ecx, dword [esp + 0x30]
mov dword [ecx], 0xffffffff
jmp 0x1cb39c9
test al, 0x10
jne 0x1cb2fc2
mov edx, dword [esp + 0xb4]
push edx
call fcn.01d2f050
push eax
call fcn.01c7d220
add esp, 4
test al, al
je 0x1cb2fa8
push 3
call dword [0x1da3b34]
mov eax, dword [esp + 0x30]
mov dword [eax], 0xffffffff
jmp 0x1cb39c9
push 0x10b
call dword [0x1da3b34]
mov eax, dword [esp + 0x30]
mov dword [eax], 0xffffffff
jmp 0x1cb39c9
mov word [esi - 2], bx
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0xb4]
lea ecx, [esp + 0x34]
push ecx
lea edx, [esp + 0x208]
push edx
push eax
mov dword [esp + 0x40], edi
call fcn.01cadfb0
add esp, 0xc
test al, al
jne 0x1cb3028
mov ecx, dword [0x1dba168]
mov edx, dword [ecx]
shr edx, 0x17
test dl, 1
je 0x1cb3011
cmp ebx, edi
je 0x1cb3011
push 0xffffffffffffffff
push str.__No_Parent_
mov ecx, ebx
call fcn.01d26f00
push 0x7b
call dword [0x1da3b34]
mov eax, dword [esp + 0x30]
mov dword [eax], 0xffffffff
jmp 0x1cb39c9
lea ecx, [esp + 0x54c]
call fcn.01d26ef0
mov byte [esp + 0x858], 5
mov edx, dword [esp + 0x204]
push 1
lea ecx, [esp + 0x550]
push ecx
push edx
call fcn.01c78480
push 0x64
mov byte [esp + 0x27], 1
mov dword [esp + 0x60], edi
mov dword [esp + 0x64], edi
mov dword [esp + 0x54], edi
mov byte [esp + 0x2f], 1
call fcn.01c60170
add esp, 0x10
mov dword [esp + 0x4c], eax
mov byte [esp + 0x858], 6
cmp eax, edi
je 0x1cb3090
mov ecx, eax
call fcn.01cb2bc0
mov dword [esp + 0x20], eax
jmp 0x1cb3094
mov dword [esp + 0x20], edi
mov byte [esp + 0x858], 5
lea ecx, [esp + 0x94]
call fcn.01c718e0
mov byte [esp + 0x858], 7
lea ecx, [esp + 0x94]
call fcn.01c76e70
mov dword [esp + 0x3c], edi
cmp byte [esp + 0x1f], 0
je 0x1cb341c
mov eax, dword [esp + 0x3c]
test eax, eax
jne 0x1cb30d9
test byte [ebp + 0x24], 1
jmp 0x1cb30e2
cmp eax, 1
jne 0x1cb30e8
test byte [ebp + 0x24], 2
je 0x1cb3406
lea eax, [esp + 0x27]
push eax
mov eax, dword [esp + 0x24]
lea ecx, [esp + 0x48]
push ecx
mov ecx, dword [esp + 0x3c]
lea edx, [esp + 0x5c]
push edx
mov edx, dword [esp + 0x558]
push eax
mov eax, dword [esp + 0x4c]
push ecx
push edx
push eax
lea ecx, [esp + 0xb0]
push ecx
mov byte [esp + 0x47], 0
call fcn.01c96ed0
add esp, 0x20
cmp byte [esp + 0x27], 0
mov dword [esp + 0x4c], eax
je 0x1cb330d
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 0x3c]
mov esi, dword [ecx]
mov edi, dword [eax + 0x24]
add eax, 0x24
mov dword [esp + 0x2c], esi
mov dword [esp + 0x28], edi
lea esp, [esp]
mov eax, dword [esp + 0x20]
mov ebx, dword [eax + 0x3c]
add eax, 0x24
mov eax, dword [eax]
test edi, edi
je 0x1cb3164
cmp edi, eax
je 0x1cb3169
call fcn.01d38f43
cmp esi, ebx
je 0x1cb330d
test edi, edi
jne 0x1cb319f
call fcn.01d38f43
xor eax, eax
cmp esi, dword [eax + 0x18]
jne 0x1cb3186
call fcn.01d38f43
cmp dword [esi + 0xc], 0xffffffff
je 0x1cb31a3
lea ecx, [esp + 0x28]
call fcn.01c72cd0
mov esi, dword [esp + 0x2c]
mov edi, dword [esp + 0x28]
jmp 0x1cb3150
mov eax, dword [edi]
jmp 0x1cb317c
cmp dword [esp + 0x3c], 0
jne 0x1cb3150
lea ecx, [esp + 0x15c]
call fcn.01d26ef0
mov byte [esp + 0x858], 8
mov edx, dword [esp + 0x54c]
push edx
lea eax, [esp + 0x160]
push eax
call fcn.01c720f0
add esp, 8
push 0x5c
push 1
lea ecx, [esp + 0x164]
call fcn.01d261c0
push 0xffffffffffffffff
lea ecx, [esi + 0x38]
push ecx
lea ecx, [esp + 0x164]
call fcn.01d26f00
mov eax, dword [esp + 0x15c]
lea edx, [esp + 0x70]
push edx
xor ebx, ebx
push ebx
push eax
call dword [0x1da3ec4]
test eax, eax
je 0x1cb32c2
mov ecx, dword [0x1dba168]
mov edx, dword [ecx]
shr edx, 0x17
test dl, 1
je 0x1cb3244
mov eax, dword [esp + 0x18]
cmp eax, ebx
je 0x1cb3244
mov ecx, dword [esp + 0x15c]
push ecx
push str._attributes_from__ls_
push eax
call fcn.01d27940
add esp, 0xc
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x74]
mov eax, dword [esp + 0x78]
mov dword [esi + 0x18], ecx
mov ecx, dword [esp + 0x88]
mov dword [esi + 0x10], edx
mov edx, dword [esp + 0x80]
mov dword [esi + 0x14], eax
mov eax, dword [esp + 0x84]
mov dword [esi + 0x24], ecx
mov ecx, dword [esp + 0x70]
mov dword [esi + 0x1c], edx
mov edx, dword [esp + 0x8c]
mov dword [esi + 0x20], eax
mov eax, dword [esp + 0x90]
mov dword [esi + 0xc], ecx
lea ecx, [esp + 0x28]
mov dword [esi + 0x30], ebx
mov dword [esi + 0x34], ebx
mov dword [esi + 0x28], edx
mov dword [esi + 0x2c], eax
call fcn.01c72cd0
mov byte [esp + 0x858], 7
lea ecx, [esp + 0x15c]
call fcn.01d26680
mov esi, dword [esp + 0x2c]
mov edi, dword [esp + 0x28]
jmp 0x1cb3150
mov edx, dword [0x1dba168]
mov eax, dword [edx]
shr eax, 0x17
test al, 1
je 0x1cb32ef
mov eax, dword [esp + 0x18]
cmp eax, ebx
je 0x1cb32ef
mov ecx, dword [esp + 0x15c]
push ecx
push str.__attributes_missing___ls_
push eax
call fcn.01d27940
add esp, 0xc
lea ecx, [esp + 0x28]
call fcn.01c72cd0
mov ecx, dword [esp + 0x20]
push esi
push edi
lea edx, [esp + 0x60]
push edx
add ecx, 0x24
call fcn.01c742e0
jmp 0x1cb32a1
mov eax, dword [esp + 0x4c]
cmp eax, 1
jne 0x1cb335d
mov eax, dword [0x1dba168]
mov ecx, dword [eax]
shr ecx, 0x17
mov byte [esp + 0x1f], 0
mov byte [esp + 0x17], 0
test cl, 1
je 0x1cb3406
cmp dword [esp + 0x18], 0
je 0x1cb3406
mov edx, dword [esp + 0x54c]
mov eax, dword [esp + 0x18]
push edx
push str.___ls_is_in_deleted_state_
push eax
call fcn.01d27940
add esp, 0xc
jmp 0x1cb3406
cmp eax, 3
je 0x1cb3406
mov edi, dword [esp + 0x3c]
mov ecx, dword [esp + 0x54]
push edi
push ecx
lea ecx, [esp + 0x9c]
call fcn.01c71a20
mov esi, dword [eax]
and esi, 7
cmp esi, 3
je 0x1cb33c9
cmp esi, 4
je 0x1cb33c9
cmp byte [esp + 0x17], 0
jne 0x1cb33fc
mov edx, dword [esp + 0x50]
cmp edx, dword [esp + 0x44]
jge 0x1cb33fc
mov eax, dword [0x1dba168]
mov ecx, dword [eax]
shr ecx, 0x17
test cl, 1
je 0x1cb33c2
mov eax, dword [esp + 0x18]
test eax, eax
je 0x1cb33c2
push edi
push str._view__d_deeper_and_not_isolated_
push eax
call fcn.01d27940
add esp, 0xc
mov byte [esp + 0x17], 1
jmp 0x1cb33fc
mov edx, dword [0x1dba168]
mov eax, dword [edx]
shr eax, 0x17
test al, 1
je 0x1cb33ef
mov eax, dword [esp + 0x18]
test eax, eax
je 0x1cb33ef
push edi
push str._view__d_isolated_
push eax
call fcn.01d27940
add esp, 0xc
mov ecx, dword [esp + 0x44]
mov byte [esp + 0x17], 0
mov dword [esp + 0x50], ecx
cmp esi, 4
jne 0x1cb3406
mov byte [esp + 0x1f], 0
mov eax, dword [esp + 0x3c]
mov esi, dword [esp + 0x48]
inc eax
cmp eax, 1
mov dword [esp + 0x3c], eax
jle 0x1cb30c0
cmp byte [esp + 0x17], 0
jne 0x1cb344a
mov edx, dword [0x1dba168]
mov eax, dword [edx]
shr eax, 0x17
test al, 1
je 0x1cb344a
mov edi, dword [esp + 0x18]
test edi, edi
je 0x1cb344e
push 0xffffffffffffffff
push str._skipping_system_probe_
mov ecx, edi
call fcn.01d26f00
jmp 0x1cb344e
mov edi, dword [esp + 0x18]
cmp byte [esp + 0x17], 0
mov ebx, dword [esp + 0x30]
mov dword [ebx], 0xffffffff
je 0x1cb36d0
test byte [ebp + 0x24], 4
je 0x1cb36d0
lea ecx, [esp + 0x15c]
call fcn.01d26ef0
mov byte [esp + 0x858], 9
mov eax, dword [esp + 0xb4]
test esi, esi
je 0x1cb34e9
cmp esi, eax
jbe 0x1cb34e9
movzx edi, word [esi]
xor ecx, ecx
push ecx
push ecx
push ecx
lea edx, [esp + 0x168]
mov word [esi], cx
mov eax, dword [esp + 0xc0]
push edx
push eax
call fcn.01cb12a0
add esp, 0x14
mov word [esi], di
test al, al
je 0x1cb34cf
push 0xffffffffffffffff
push esi
lea ecx, [esp + 0x164]
call fcn.01d26f00
mov edi, dword [esp + 0x18]
jmp 0x1cb3518
lea ecx, [esp + 0xb4]
push ecx
lea ecx, [esp + 0x160]
call fcn.01c56a70
mov edi, dword [esp + 0x18]
jmp 0x1cb3518
push 0
push 0
push 0
lea edx, [esp + 0x168]
push edx
push eax
call fcn.01cb12a0
add esp, 0x14
test al, al
jne 0x1cb3518
lea eax, [esp + 0xb4]
push eax
lea ecx, [esp + 0x160]
call fcn.01c56a70
lea ecx, [esp + 0x4a4]
call fcn.01d26ef0
mov byte [esp + 0x858], 0xa
mov edx, dword [esp + 0x15c]
lea ecx, [esp + 0x4a4]
push ecx
push edx
call fcn.01d316e0
mov eax, dword [ebp + 0x1c]
mov ecx, dword [esp + 0x40]
mov edx, dword [ebp + 0x14]
add esp, 8
push eax
mov eax, dword [esp + 0x44]
push ecx
mov ecx, dword [ebp + 0xc]
push edx
mov edx, dword [esp + 0x4b0]
push eax
push ecx
push edx
call dword [0x1da3ef4]
mov dword [ebx], eax
mov ecx, dword [0x1dba168]
mov edx, dword [ecx]
shr edx, 0x17
test dl, 1
je 0x1cb3595
test edi, edi
je 0x1cb3595
push eax
mov eax, dword [esp + 0x4a8]
push eax
push str._system_probe__ls_____xh_
push edi
call fcn.01d27940
add esp, 0x10
mov byte [esp + 0x858], 9
lea ecx, [esp + 0x4a4]
call fcn.01d26680
mov byte [esp + 0x858], 7
lea ecx, [esp + 0x15c]
call fcn.01d26680
cmp dword [ebx], 0xffffffff
je 0x1cb36d0
mov esi, dword [esp + 0x20]
mov ecx, dword [esi + 0x5c]
mov ebx, dword [esp + 0x40]
mov edx, dword [esi + 0x44]
add esi, 0x44
mov dword [esp + 0x2c], ecx
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x5c]
push ecx
add ebx, 0x2c
mov ecx, esi
mov dword [esp + 0x40], ebx
mov dword [esp + 0x30], edx
call fcn.01c94970
mov edi, eax
mov eax, dword [edi]
test eax, eax
je 0x1cb3605
cmp eax, dword [esp + 0x28]
je 0x1cb360a
call fcn.01d38f43
mov edx, dword [esp + 0x2c]
cmp dword [edi + 4], edx
je 0x1cb37f4
mov eax, dword [0x1dba168]
mov ecx, dword [eax]
mov edi, dword [esp + 0x18]
shr ecx, 0x17
test cl, 1
je 0x1cb363d
test edi, edi
je 0x1cb363d
push ebx
push str._system_entry__ls_deleted__removing_from_set_
push edi
call fcn.01d27940
add esp, 0xc
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x30]
mov ecx, dword [eax]
push edx
push ecx
call dword [0x1da3aac]
test eax, eax
je 0x1cb3696
mov edx, dword [esi + 0x18]
mov eax, dword [esi]
lea ecx, [esp + 0x38]
mov dword [esp + 0x2c], edx
push ecx
lea edx, [esp + 0x5c]
push edx
mov ecx, esi
mov dword [esp + 0x40], ebx
mov dword [esp + 0x30], eax
call fcn.01c94970
mov edi, eax
mov eax, dword [edi]
test eax, eax
je 0x1cb3683
cmp eax, dword [esp + 0x28]
je 0x1cb3688
call fcn.01d38f43
mov eax, dword [esp + 0x2c]
cmp dword [edi + 4], eax
jne 0x1cb3617
jmp 0x1cb37f4
mov ecx, dword [0x1dba168]
mov edx, dword [ecx]
shr edx, 0x17
test dl, 1
je 0x1cb36b8
test edi, edi
je 0x1cb36b8
push 0xffffffffffffffff
push str._all_system_entries_deleted_
mov ecx, edi
call fcn.01d26f00
mov esi, dword [esp + 0x30]
mov eax, dword [esi]
push eax
call dword [0x1da3aa8]
mov dword [esi], 0xffffffff
jmp 0x1cb37f4
lea ecx, [esp + 0x4a4]
call fcn.01d26ef0
mov byte [esp + 0x858], 0xb
mov eax, dword [esp + 0x204]
lea ecx, [esp + 0x38]
push ecx
lea edx, [esp + 0x4a8]
push edx
push eax
call fcn.01cadfb0
mov esi, dword [esp + 0x40]
push esi
push 0x1d7805c
call fcn.01d32ab0
add esp, 0x14
test al, al
je 0x1cb3771
mov eax, dword [esp + 0x204]
push edi
lea ecx, [esp + 0x38]
push ecx
lea edx, [esp + 0x78]
push edx
push 0
push eax
call fcn.01cae0c0
test al, al
je 0x1cb3771
cmp dword [esp + 0x34], 0
je 0x1cb3771
push 0x1d77e08
push 0x1d7805c
lea ecx, [esp + 0x5fc]
push ecx
lea edx, [esp + 0x7c]
push edx
call fcn.01cafa40
add esp, 0x10
lea eax, [esp + 0x5f4]
push eax
lea ecx, [esp + 0x5c]
push ecx
mov ecx, dword [esp + 0x28]
add ecx, 0x24
call fcn.01c96760
push esi
push 0x1d78054
call fcn.01d32ab0
add esp, 8
test al, al
je 0x1cb37e0
mov ecx, dword [esp + 0x204]
push edi
lea edx, [esp + 0x38]
push edx
lea eax, [esp + 0x78]
push eax
push 0
push ecx
call fcn.01cae0c0
test al, al
je 0x1cb37e0
cmp dword [esp + 0x34], 0
je 0x1cb37e0
push 0x1d77e08
push 0x1d78054
lea edx, [esp + 0x5fc]
push edx
lea eax, [esp + 0x7c]
push eax
call fcn.01cafa40
add esp, 0x10
lea ecx, [esp + 0x5f4]
push ecx
mov ecx, dword [esp + 0x24]
lea edx, [esp + 0x5c]
push edx
add ecx, 0x24
call fcn.01c96760
mov byte [esp + 0x858], 7
lea ecx, [esp + 0x4a4]
call fcn.01d26680
mov ebx, dword [esp + 0x20]
cmp dword [ebx + 0x40], 0
je 0x1cb38ae
mov esi, dword [esp + 0x30]
cmp dword [esi], 0xffffffff
jne 0x1cb38ff
lea eax, [esp + 0x5f4]
push eax
call fcn.01c54870
push eax
call dword [0x1da3ac4]
mov dword [esi], eax
mov ecx, dword [0x1dba168]
mov edx, dword [ecx]
shr edx, 0x17
test dl, 1
je 0x1cb384c
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x1cb384c
push eax
push str._created_virtual_handle__xh_
push ecx
call fcn.01d27940
add esp, 0xc
mov ebx, dword [esp + 0x20]
mov eax, dword [ebx + 0x3c]
mov esi, dword [eax]
mov eax, dword [ebx + 0x24]
add ebx, 0x24
test eax, eax
jne 0x1cb38f8
call fcn.01d38f43
xor eax, eax
cmp esi, dword [eax + 0x18]
jne 0x1cb3874
call fcn.01d38f43
mov edi, dword [esp + 0x40]
add esi, 0xc
mov ecx, 0x94
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebx + 0x18]
mov eax, dword [eax]
mov ecx, dword [ebx]
push eax
push ecx
lea eax, [esp + 0x60]
push eax
mov ecx, ebx
call fcn.01c742e0
mov edx, dword [esp + 0x64]
mov ecx, dword [esp + 0x20]
push edx
mov byte [ecx + 4], 1
call dword [0x1da3b34]
mov ebx, dword [esp + 0x20]
mov eax, dword [esp + 0x30]
cmp dword [eax], 0xffffffff
jne 0x1cb38ff
mov ecx, dword [0x1dba168]
mov edx, dword [ecx]
shr edx, 0x17
test dl, 1
je 0x1cb38db
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x1cb38db
push 0xffffffffffffffff
push str._no_virtual_or_system_matches_
call fcn.01d26f00
mov ecx, ebx
call fcn.01c75520
push ebx
call fcn.01c60200
add esp, 4
push 2
call dword [0x1da3b34]
jmp 0x1cb39a1
mov eax, dword [eax]
jmp 0x1cb386a
mov eax, dword [esp + 0x40]
push eax
lea ecx, [esp + 0x2c]
lea esi, [ebx + 0x24]
push ecx
mov ecx, esi
call fcn.01c948f0
mov edi, dword [esp + 0x28]
mov edx, dword [esi + 0x18]
mov eax, dword [esi]
mov dword [esp + 0x68], edx
test edi, edi
je 0x1cb3928
cmp edi, eax
je 0x1cb392d
call fcn.01d38f43
mov eax, dword [esp + 0x2c]
cmp eax, dword [esp + 0x68]
je 0x1cb3945
push eax
push edi
lea eax, [esp + 0x60]
push eax
mov ecx, esi
call fcn.01c742e0
mov esi, dword [esp + 0x6c]
mov eax, esi
lea edx, [eax + 2]
mov edi, edi
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1cb3950
sub eax, edx
sar eax, 1
push eax
push esi
lea ecx, [ebx + 8]
call fcn.01cb24d0
push 0x1dbe03c
call dword [0x1da3c98]
mov ecx, dword [esp + 0x30]
mov edx, dword [ecx]
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x5c]
push ecx
mov ecx, 0x1dbe0f8
mov dword [esp + 0x30], edx
mov dword [esp + 0x34], ebx
call fcn.01c696a0
push 0x1dbe03c
call dword [0x1da3c94]
mov byte [esp + 0x858], 5
lea ecx, [esp + 0x94]
call fcn.01c72970
mov byte [esp + 0x858], 4
lea ecx, [esp + 0x54c]
call fcn.01d26680
mov byte [esp + 0x858], 3
lea ecx, [esp + 0xb4]
call fcn.01d26680
mov byte [esp + 0x858], 2
lea ecx, [esp + 0x204]
call fcn.01d26680
mov byte [esp + 0x858], 1
lea ecx, [esp + 0x354]
call fcn.01d26680
mov byte [esp + 0x858], 0
lea ecx, [esp + 0x2ac]
call fcn.01d26680
mov dword [esp + 0x858], 0xffffffff
lea ecx, [esp + 0x3fc]
call fcn.01d26680
mov al, 1
mov ecx, dword [esp + 0x850]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x838]
xor ecx, esp
call fcn.01d389aa
mov esp, ebp
pop ebp
ret