Function at 0x427e00
Capabilities:
Access peb ldr_data
Check for peb ntglobalflag flag
Get ntdll base address
Get number of processors
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffdc
push ebx
push esi
push edi
mov ebx, 0x5327a4
lea esi, [ebp - 0x24]
mov edi, 0x52f104
mov eax, 0x532788
call fcn.0049b3b8
mov word [esi + 0x10], 8
lea edx, [ebx + 0xcc]
mov eax, edi
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0xd5]
lea eax, [edi + 4]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0xdf]
lea eax, [edi + 8]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0xe8]
lea eax, [edi + 0xc]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0xf1]
lea eax, [edi + 0x10]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0xfa]
lea eax, [edi + 0x14]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x104]
lea eax, [edi + 0x18]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x10d]
lea eax, [edi + 0x1c]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x116]
lea eax, [edi + 0x20]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x11f]
lea eax, [edi + 0x24]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x128]
lea eax, [edi + 0x28]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x131]
lea eax, [edi + 0x2c]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x13b]
lea eax, [edi + 0x30]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x145]
lea eax, [edi + 0x34]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x14e]
lea eax, [edi + 0x38]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x157]
lea eax, [edi + 0x3c]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x160]
lea eax, [edi + 0x40]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x169]
lea eax, [edi + 0x44]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x172]
lea eax, [edi + 0x48]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x17b]
lea eax, [edi + 0x4c]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x184]
lea eax, [edi + 0x50]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x18d]
lea eax, [edi + 0x54]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x196]
lea eax, [edi + 0x58]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x19f]
lea eax, [edi + 0x5c]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x1a8]
lea eax, [edi + 0x60]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x1b1]
lea eax, [edi + 0x64]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x1bc]
lea eax, [edi + 0x68]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x1c5]
lea eax, [edi + 0x6c]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x1ce]
lea eax, [edi + 0x70]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x1d7]
lea eax, [edi + 0x74]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x1e0]
lea eax, [edi + 0x78]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x1e9]
lea eax, [edi + 0x7c]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x1f2]
lea eax, [edi + 0x80]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x1fb]
lea eax, [edi + 0x84]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x205]
lea eax, [edi + 0x88]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x20f]
lea eax, [edi + 0x8c]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x219]
lea eax, [edi + 0x90]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x223]
lea eax, [edi + 0x94]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x22d]
lea eax, [edi + 0x98]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x237]
lea eax, [edi + 0x9c]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x240]
lea eax, [edi + 0xa0]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x249]
lea eax, [edi + 0xa4]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x252]
lea eax, [edi + 0xa8]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x25c]
lea eax, [edi + 0xac]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x266]
lea eax, [edi + 0xb0]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x270]
lea eax, [edi + 0xb4]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x27a]
lea eax, [edi + 0xb8]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x285]
lea eax, [edi + 0xbc]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x28e]
lea eax, [edi + 0xc0]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x297]
lea eax, [edi + 0xc4]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x2a0]
lea eax, [edi + 0xc8]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x2a9]
lea eax, [edi + 0xcc]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x2b3]
lea eax, [edi + 0xd0]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x2bc]
lea eax, [edi + 0xd4]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x2c5]
lea eax, [edi + 0xd8]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x2ce]
lea eax, [edi + 0xdc]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x2d8]
lea eax, [edi + 0xe0]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x2e1]
lea eax, [edi + 0xe4]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x2eb]
lea eax, [edi + 0xe8]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x2f5]
lea eax, [edi + 0xec]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x2fe]
lea eax, [edi + 0xf0]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x308]
lea eax, [edi + 0xf4]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x312]
lea eax, [edi + 0xf8]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x31c]
lea eax, [edi + 0xfc]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x326]
lea eax, [edi + 0x100]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x330]
lea eax, [edi + 0x104]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x33a]
lea eax, [edi + 0x108]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x343]
lea eax, [edi + 0x10c]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x34d]
lea eax, [edi + 0x110]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x357]
lea eax, [edi + 0x114]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x361]
lea eax, [edi + 0x118]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x36a]
lea eax, [edi + 0x11c]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x373]
lea eax, [edi + 0x120]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x37d]
lea eax, [edi + 0x124]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x386]
lea eax, [edi + 0x128]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x390]
lea eax, [edi + 0x12c]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x39a]
lea eax, [edi + 0x130]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x3a3]
lea eax, [edi + 0x134]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x3ad]
lea eax, [edi + 0x138]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x3b7]
lea eax, [edi + 0x13c]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x3c0]
lea eax, [edi + 0x140]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x3ca]
lea eax, [edi + 0x144]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x3d4]
lea eax, [edi + 0x148]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x3de]
lea eax, [edi + 0x14c]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x3e7]
lea eax, [edi + 0x150]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x3f0]
lea eax, [edi + 0x154]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x3f9]
lea eax, [edi + 0x158]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x403]
lea eax, [edi + 0x15c]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x40f]
lea eax, [edi + 0x160]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x417]
lea eax, [edi + 0x164]
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x421]
mov eax, 0x52f26c
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x42a]
mov eax, 0x52f270
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x434]
mov eax, 0x52f274
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x43d]
mov eax, 0x52f278
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x446]
mov eax, 0x52f27c
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x44f]
mov eax, 0x52f280
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x458]
mov eax, 0x52f284
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x461]
mov eax, 0x52f288
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x46a]
mov eax, 0x52f28c
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x473]
mov eax, 0x52f290
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x47c]
mov eax, 0x52f294
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x485]
mov eax, 0x52f298
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x48e]
mov eax, 0x52f29c
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x497]
mov eax, 0x52f2a0
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x4a0]
mov eax, 0x52f2a4
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x4aa]
mov eax, 0x52f2a8
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x4b3]
mov eax, 0x52f2ac
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x4bc]
mov eax, 0x52f2b0
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x4c5]
mov eax, 0x52f2b4
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x4cf]
mov eax, 0x52f2b8
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x4d8]
mov eax, 0x52f2bc
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x4e2]
mov eax, 0x52f2c0
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x4ec]
mov eax, 0x52f2c4
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x4f6]
mov eax, 0x52f2c8
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x4ff]
mov eax, 0x52f2cc
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x509]
mov eax, 0x52f2d0
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x513]
mov eax, 0x52f2d4
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x51c]
mov eax, 0x52f2d8
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x525]
mov eax, 0x52f2dc
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x52e]
mov eax, 0x52f2e0
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x537]
mov eax, 0x52f2e4
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x540]
mov eax, 0x52f2e8
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x549]
mov eax, 0x52f2ec
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x552]
mov eax, 0x52f2f0
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x55b]
mov eax, 0x52f2f4
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x564]
mov eax, 0x52f2f8
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x56e]
mov eax, 0x52f2fc
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x577]
mov eax, 0x52f300
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x580]
mov eax, 0x52f304
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x589]
mov eax, 0x52f308
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x592]
mov eax, 0x52f30c
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x59b]
mov eax, 0x52f310
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x5a4]
mov eax, 0x52f314
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x5ad]
mov eax, 0x52f318
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x5b7]
mov eax, 0x52f31c
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x5c0]
mov eax, 0x52f320
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x5c9]
mov eax, 0x52f324
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x5d3]
mov eax, 0x52f328
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x5dd]
mov eax, 0x52f32c
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x5e7]
mov eax, 0x52f330
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x5f0]
mov eax, 0x52f334
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x5fa]
mov eax, 0x52f338
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x604]
mov eax, 0x52f33c
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x60d]
mov eax, 0x52f340
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x617]
mov eax, 0x52f344
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x622]
mov eax, 0x52f348
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x62b]
mov eax, 0x52f34c
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x634]
mov eax, 0x52f350
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x63e]
mov eax, 0x52f354
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x647]
mov eax, 0x52f358
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x651]
mov eax, 0x52f35c
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x65b]
mov eax, 0x52f360
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x664]
mov eax, 0x52f364
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x66d]
mov eax, 0x52f368
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x676]
mov eax, 0x52f36c
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x692]
mov eax, 0x52f370
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x6a6]
mov eax, 0x52f374
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x6af]
mov eax, 0x52f378
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x6b8]
mov eax, 0x52f37c
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x6c1]
mov eax, 0x52f380
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x6cb]
mov eax, 0x52f384
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x6d5]
mov eax, 0x52f388
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x6de]
mov eax, 0x52f38c
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x6e8]
mov eax, 0x52f390
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x6f1]
mov eax, 0x52f394
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x6fb]
mov eax, 0x52f398
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x705]
mov eax, 0x52f39c
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x70f]
mov eax, 0x52f3a0
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x719]
mov eax, 0x52f3a4
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x723]
mov eax, 0x52f3a8
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x72c]
mov eax, 0x52f3ac
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x735]
mov eax, 0x52f3b0
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x73e]
mov eax, 0x52f3b4
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x747]
mov eax, 0x52f3b8
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x750]
mov eax, 0x52f3bc
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x759]
mov eax, 0x52f3c0
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x762]
mov eax, 0x52f3c4
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x76b]
mov eax, 0x52f3c8
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x774]
mov eax, 0x52f3cc
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x77e]
mov eax, 0x52f3d0
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x787]
mov eax, 0x52f3d4
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x790]
mov eax, 0x52f3d8
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x79a]
mov eax, 0x52f3dc
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x7a4]
mov eax, 0x52f3e0
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x7ad]
mov eax, 0x52f3e4
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x7b7]
mov eax, 0x52f3e8
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x7c1]
mov eax, 0x52f3ec
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x7ca]
mov eax, 0x52f3f0
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x7d3]
mov eax, 0x52f3f4
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x7dd]
mov eax, 0x52f3f8
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x7e7]
mov eax, 0x52f3fc
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x7f0]
mov eax, 0x52f400
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x7fa]
mov eax, 0x52f404
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x803]
mov eax, 0x52f408
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x80c]
mov eax, 0x52f40c
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x816]
mov eax, 0x52f410
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x81c]
mov eax, 0x52f414
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x825]
mov eax, 0x52f418
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x82e]
mov eax, 0x52f41c
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x837]
mov eax, 0x52f420
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x841]
mov eax, 0x52f424
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x84b]
mov eax, 0x52f428
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x855]
mov eax, 0x52f42c
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x85e]
mov eax, 0x52f430
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x868]
mov eax, 0x52f434
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x872]
mov eax, 0x52f438
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x87b]
mov eax, 0x52f43c
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x884]
mov eax, 0x52f440
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x88e]
mov eax, 0x52f444
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x898]
mov eax, 0x52f448
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x8a2]
mov eax, 0x52f44c
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x8ac]
mov eax, 0x52f450
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x8b6]
mov eax, 0x52f454
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x8c0]
mov eax, 0x52f458
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x8c9]
mov eax, 0x52f45c
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x8d3]
mov eax, 0x52f460
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x8dc]
mov eax, 0x52f464
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x8e6]
mov eax, 0x52f468
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x8f0]
mov eax, 0x52f46c
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x8fa]
mov eax, 0x52f470
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x904]
mov eax, 0x52f474
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x90d]
mov eax, 0x52f478
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x916]
mov eax, 0x52f47c
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x91f]
mov eax, 0x52f480
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x928]
mov eax, 0x52f484
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x931]
mov eax, 0x52f488
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x93b]
mov eax, 0x52f48c
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x945]
mov eax, 0x52f490
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x94f]
mov eax, 0x52f494
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x958]
mov eax, 0x52f498
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x961]
mov eax, 0x52f49c
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x969]
mov eax, 0x52f4a0
call fcn.004a6cf4
inc dword [esi + 0x1c]
lea edx, [ebx + 0x971]
mov eax, 0x52f4a4
call fcn.004a6cf4
inc dword [esi + 0x1c]
mov edx, dword [esi]
mov dword fs:[0], edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret