Function at 0x5e3a68
Capabilities:
Access peb ldr_data
Check for peb ntglobalflag flag
Get ntdll base address
Get number of processors
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff8
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 8], ebx
test dl, dl
je 0x5e3a82
add esp, 0xfffffff0
call fcn.0040430c
mov byte [ebp - 1], dl
mov esi, eax
xor eax, eax
push ebp
push 0x5e483d
push dword fs:[eax]
mov dword fs:[eax], esp
xor edx, edx
mov eax, esi
call fcn.00429c34
lea eax, [esi + 0x60]
mov edx, 0x5e486c
call fcn.00404f10
test byte [esi + 0x1c], 0x10
je 0x5e3aea
xor ecx, ecx
mov dl, 1
mov eax, dword [0x44bb9c]
call fcn.0044c5d4
mov ebx, eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x5e4880
mov edx, 0x5e4894
mov eax, ebx
call fcn.0044c668
mov edx, dword [ebp - 8]
lea eax, [esi + 0x68]
call fcn.00404f10
mov eax, ebx
call fcn.00403fa8
mov byte [esi + 0x6c], 1
mov byte [esi + 0x6f], 1
mov dword [esi + 0x70], 0x79e
mov dword [esi + 0x74], 0x10000
mov dl, 1
mov eax, dword [0x5e0200]
call fcn.00403f78
mov ebx, eax
mov dword [esi + 0x58], ebx
lea eax, [ebx + 4]
mov edx, 0x5e48bc
call fcn.00404f10
lea eax, [ebx + 8]
mov edx, 0x5e48d4
call fcn.00404f10
lea eax, [ebx + 0x10]
mov edx, 0x5e4904
call fcn.00404f10
lea eax, [ebx + 0x14]
mov edx, 0x5e4918
call fcn.00404f10
lea eax, [ebx + 0x18]
mov edx, 0x5e4934
call fcn.00404f10
lea eax, [ebx + 0x1c]
mov edx, 0x5e4948
call fcn.00404f10
lea eax, [ebx + 0x20]
mov edx, 0x5e4994
call fcn.00404f10
lea eax, [ebx + 0x24]
mov edx, 0x5e49a8
call fcn.00404f10
lea eax, [ebx + 0x28]
mov edx, 0x5e49bc
call fcn.00404f10
lea eax, [ebx + 0x2c]
mov edx, 0x5e49cc
call fcn.00404f10
lea eax, [ebx + 0x30]
mov edx, 0x5e49e0
call fcn.00404f10
lea eax, [ebx + 0x34]
mov edx, 0x5e49f8
call fcn.00404f10
lea eax, [ebx + 0x40]
mov edx, 0x5e4a10
call fcn.00404f10
lea eax, [ebx + 0x44]
mov edx, 0x5e4a20
call fcn.00404f10
lea eax, [ebx + 0x48]
mov edx, 0x5e4a10
call fcn.00404f10
lea eax, [ebx + 0x38]
mov edx, 0x5e4a30
call fcn.00404f10
lea eax, [ebx + 0x3c]
mov edx, 0x5e4a58
call fcn.00404f10
lea eax, [ebx + 0x4c]
mov edx, 0x5e4a80
call fcn.00404f10
lea eax, [ebx + 0x50]
mov edx, 0x5e4aa8
call fcn.00404f10
lea eax, [ebx + 0x54]
mov edx, 0x5e4ad0
call fcn.00404f10
lea eax, [ebx + 0x58]
mov edx, 0x5e4b00
call fcn.00404f10
lea eax, [ebx + 0x5c]
mov edx, 0x5e4b14
call fcn.00404f10
lea eax, [ebx + 0x60]
mov edx, 0x5e4b28
call fcn.00404f10
lea eax, [ebx + 0x64]
mov edx, 0x5e4b40
call fcn.00404f10
lea eax, [ebx + 0x68]
mov edx, 0x5e4b64
call fcn.00404f10
lea eax, [ebx + 0x6c]
mov edx, 0x5e4b78
call fcn.00404f10
lea eax, [ebx + 0x70]
mov edx, 0x5e4bb0
call fcn.00404f10
lea eax, [ebx + 0x74]
mov edx, 0x5e4bc8
call fcn.00404f10
lea eax, [ebx + 0x78]
mov edx, 0x5e4bec
call fcn.00404f10
lea eax, [ebx + 0x7c]
mov edx, 0x5e4c0c
call fcn.00404f10
lea eax, [ebx + 0x80]
mov edx, 0x5e4c24
call fcn.00404f10
lea eax, [ebx + 0x84]
mov edx, 0x5e4c48
call fcn.00404f10
lea eax, [ebx + 0x88]
mov edx, 0x5e4c68
call fcn.00404f10
lea eax, [ebx + 0x8c]
mov edx, 0x5e4ca8
call fcn.00404f10
lea eax, [ebx + 0x90]
mov edx, 0x5e4b64
call fcn.00404f10
lea eax, [ebx + 0x94]
mov edx, 0x5e4cb8
call fcn.00404f10
lea eax, [ebx + 0x98]
call fcn.00404ebc
lea eax, [ebx + 0x9c]
mov edx, 0x5e4cc8
call fcn.00404f10
lea eax, [ebx + 0xa0]
mov edx, 0x5e4cd8
call fcn.00404f10
lea eax, [ebx + 0xa4]
mov edx, 0x5e4d04
call fcn.00404f10
lea eax, [ebx + 0xc]
mov edx, 0x5e4d40
call fcn.00404f10
mov dl, 1
mov eax, dword [0x5e1e54]
call fcn.00403f78
mov ebx, eax
mov dword [esi + 0x5c], ebx
lea eax, [ebx + 4]
mov edx, 0x5e4d4c
call fcn.00404f10
lea eax, [ebx + 8]
mov edx, 0x5e4d80
call fcn.00404f10
lea eax, [ebx + 0xc]
mov edx, 0x5e4dbc
call fcn.00404f10
lea eax, [ebx + 0x10]
mov edx, 0x5e4de4
call fcn.00404f10
lea eax, [ebx + 0x14]
mov edx, 0x5e4e04
call fcn.00404f10
lea eax, [ebx + 0x18]
mov edx, 0x5e4e24
call fcn.00404f10
lea eax, [ebx + 0x1c]
mov edx, 0x5e4e50
call fcn.00404f10
lea eax, [ebx + 0x20]
mov edx, 0x5e4e78
call fcn.00404f10
lea eax, [ebx + 0x24]
mov edx, 0x5e4eb8
call fcn.00404f10
lea eax, [ebx + 0x28]
mov edx, 0x5e4efc
call fcn.00404f10
lea eax, [ebx + 0x2c]
mov edx, 0x5e4f24
call fcn.00404f10
lea eax, [ebx + 0x30]
mov edx, 0x5e4f54
call fcn.00404f10
lea eax, [ebx + 0x34]
mov edx, 0x5e4f80
call fcn.00404f10
lea eax, [ebx + 0x38]
mov edx, 0x5e4fb4
call fcn.00404f10
lea eax, [ebx + 0x3c]
mov edx, 0x5e4fe8
call fcn.00404f10
lea eax, [ebx + 0x40]
mov edx, 0x5e5038
call fcn.00404f10
lea eax, [ebx + 0x44]
mov edx, 0x5e5070
call fcn.00404f10
lea eax, [ebx + 0x48]
mov edx, 0x5e50a8
call fcn.00404f10
lea eax, [ebx + 0x4c]
mov edx, 0x5e50e0
call fcn.00404f10
lea eax, [ebx + 0x50]
mov edx, 0x5e511c
call fcn.00404f10
lea eax, [ebx + 0x54]
mov edx, 0x5e5158
call fcn.00404f10
lea eax, [ebx + 0x58]
mov edx, 0x5e5194
call fcn.00404f10
lea eax, [ebx + 0x5c]
mov edx, 0x5e51d0
call fcn.00404f10
lea eax, [ebx + 0x60]
mov edx, 0x5e5208
call fcn.00404f10
lea eax, [ebx + 0x64]
mov edx, 0x5e523c
call fcn.00404f10
lea eax, [ebx + 0x68]
mov edx, 0x5e524c
call fcn.00404f10
lea eax, [ebx + 0x6c]
mov edx, 0x5e526c
call fcn.00404f10
lea eax, [ebx + 0x70]
mov edx, 0x5e528c
call fcn.00404f10
lea eax, [ebx + 0x74]
mov edx, 0x5e52ac
call fcn.00404f10
lea eax, [ebx + 0x78]
mov edx, 0x5e52e0
call fcn.00404f10
lea eax, [ebx + 0x7c]
mov edx, 0x5e5304
call fcn.00404f10
lea eax, [ebx + 0x80]
mov edx, 0x5e531c
call fcn.00404f10
lea eax, [ebx + 0x84]
mov edx, 0x5e5340
call fcn.00404f10
lea eax, [ebx + 0x88]
mov edx, 0x5e5368
call fcn.00404f10
lea eax, [ebx + 0x8c]
mov edx, 0x5e5390
call fcn.00404f10
lea eax, [ebx + 0x90]
mov edx, 0x5e53a8
call fcn.00404f10
lea eax, [ebx + 0x94]
mov edx, 0x5e53d4
call fcn.00404f10
lea eax, [ebx + 0x98]
mov edx, 0x5e5408
call fcn.00404f10
mov dl, 1
mov eax, dword [0x5e0ab8]
call fcn.00403f78
mov edi, eax
mov dword [ebx + 0x9c], edi
lea eax, [edi + 4]
mov edx, 0x5e541c
call fcn.00404f10
mov eax, dword [ebx + 0x9c]
add eax, 8
mov edx, 0x5e542c
call fcn.00404f10
mov eax, dword [ebx + 0x9c]
add eax, 0xc
mov edx, 0x5e543c
call fcn.00404f10
mov eax, dword [ebx + 0x9c]
add eax, 0x10
mov edx, 0x5e5450
call fcn.00404f10
mov eax, dword [ebx + 0x9c]
add eax, 0x14
mov edx, 0x5e5468
call fcn.00404f10
mov eax, dword [ebx + 0x9c]
add eax, 0x18
mov edx, 0x5e5478
call fcn.00404f10
mov eax, dword [ebx + 0x9c]
add eax, 0x1c
mov edx, 0x5e548c
call fcn.00404f10
mov eax, dword [ebx + 0x9c]
add eax, 0x20
mov edx, 0x5e549c
call fcn.00404f10
mov eax, dword [ebx + 0x9c]
add eax, 0x24
mov edx, 0x5e54ac
call fcn.00404f10
mov eax, dword [ebx + 0x9c]
add eax, 0x28
mov edx, 0x5e54bc
call fcn.00404f10
mov eax, dword [ebx + 0x9c]
add eax, 0x2c
mov edx, 0x5e54cc
call fcn.00404f10
mov eax, dword [ebx + 0x9c]
add eax, 0x30
mov edx, 0x5e54dc
call fcn.00404f10
mov eax, dword [ebx + 0x9c]
add eax, 0x34
mov edx, 0x5e54ec
call fcn.00404f10
mov eax, dword [ebx + 0x9c]
add eax, 0x38
mov edx, 0x5e54fc
call fcn.00404f10
mov eax, dword [ebx + 0x9c]
add eax, 0x3c
mov edx, 0x5e5510
call fcn.00404f10
mov eax, dword [ebx + 0x9c]
add eax, 0x40
mov edx, 0x5e5520
call fcn.00404f10
mov eax, dword [ebx + 0x9c]
add eax, 0x44
mov edx, 0x5e5534
call fcn.00404f10
mov eax, dword [ebx + 0x9c]
add eax, 0x48
mov edx, 0x5e5548
call fcn.00404f10
mov eax, dword [ebx + 0x9c]
add eax, 0x4c
mov edx, 0x5e555c
call fcn.00404f10
mov eax, dword [ebx + 0x9c]
add eax, 0x50
mov edx, 0x5e5574
call fcn.00404f10
mov eax, dword [ebx + 0x9c]
add eax, 0x54
mov edx, 0x5e5584
call fcn.00404f10
mov eax, dword [ebx + 0x9c]
add eax, 0x5c
mov edx, 0x5e5594
call fcn.00404f10
mov eax, dword [ebx + 0x9c]
add eax, 0x60
mov edx, 0x5e55a4
call fcn.00404f10
mov eax, dword [ebx + 0x9c]
add eax, 0x64
mov edx, 0x5e55b8
call fcn.00404f10
mov eax, dword [ebx + 0x9c]
add eax, 0x68
mov edx, 0x5e55cc
call fcn.00404f10
mov eax, dword [ebx + 0x9c]
add eax, 0x6c
mov edx, 0x5e55e0
call fcn.00404f10
mov eax, dword [ebx + 0x9c]
add eax, 0x70
mov edx, 0x5e55f4
call fcn.00404f10
mov eax, dword [ebx + 0x9c]
add eax, 0x78
mov edx, 0x5e5604
call fcn.00404f10
mov eax, dword [ebx + 0x9c]
add eax, 0x7c
mov edx, 0x5e5614
call fcn.00404f10
mov eax, dword [ebx + 0x9c]
add eax, 0x80
mov edx, 0x5e562c
call fcn.00404f10
mov eax, dword [ebx + 0x9c]
add eax, 0x84
mov edx, 0x5e5640
call fcn.00404f10
mov eax, dword [ebx + 0x9c]
add eax, 0x74
mov edx, 0x5e5650
call fcn.00404f10
mov eax, dword [ebx + 0x9c]
add eax, 0x88
mov edx, 0x5e5660
call fcn.00404f10
mov dl, 1
mov eax, dword [0x5e11c8]
call fcn.00403f78
mov edi, eax
mov dword [ebx + 0xa0], edi
lea eax, [edi + 4]
mov edx, 0x5e549c
call fcn.00404f10
mov eax, dword [ebx + 0xa0]
add eax, 8
mov edx, 0x5e5594
call fcn.00404f10
mov eax, dword [ebx + 0xa0]
add eax, 0xc
mov edx, 0x5e54bc
call fcn.00404f10
mov eax, dword [ebx + 0xa0]
add eax, 0x10
mov edx, 0x5e54cc
call fcn.00404f10
mov eax, dword [ebx + 0xa0]
add eax, 0x14
mov edx, 0x5e54dc
call fcn.00404f10
mov eax, dword [ebx + 0xa0]
add eax, 0x18
mov edx, 0x5e5604
call fcn.00404f10
mov eax, dword [ebx + 0xa0]
add eax, 0x1c
mov edx, 0x5e5614
call fcn.00404f10
mov eax, dword [ebx + 0xa0]
add eax, 0x20
mov edx, 0x5e5670
call fcn.00404f10
mov eax, dword [ebx + 0xa0]
add eax, 0x24
mov edx, 0x5e5680
call fcn.00404f10
mov eax, dword [ebx + 0xa0]
add eax, 0x28
mov edx, 0x5e5690
call fcn.00404f10
mov eax, dword [ebx + 0xa0]
add eax, 0x2c
mov edx, 0x5e56a4
call fcn.00404f10
mov eax, dword [ebx + 0xa0]
add eax, 0x30
mov edx, 0x5e5640
call fcn.00404f10
mov eax, dword [ebx + 0xa0]
add eax, 0x34
mov edx, 0x5e56b8
call fcn.00404f10
mov eax, dword [ebx + 0xa0]
add eax, 0x38
mov edx, 0x5e56c8
call fcn.00404f10
mov eax, dword [ebx + 0xa0]
add eax, 0x3c
mov edx, 0x5e56dc
call fcn.00404f10
mov eax, dword [ebx + 0xa0]
add eax, 0x44
mov edx, 0x5e56f8
call fcn.00404f10
mov eax, dword [ebx + 0xa0]
add eax, 0x40
mov edx, 0x5e555c
call fcn.00404f10
lea eax, [ebx + 0xac]
mov edx, 0x5e5714
call fcn.00404f10
lea eax, [ebx + 0xb0]
mov edx, 0x5e5720
call fcn.00404f10
mov dl, 1
mov eax, dword [0x5e15bc]
call fcn.00403f78
mov edi, eax
mov dword [ebx + 0xa4], edi
lea eax, [edi + 4]
mov edx, 0x5e572c
call fcn.00404f10
mov eax, dword [ebx + 0xa4]
add eax, 8
mov edx, 0x5e5740
call fcn.00404f10
mov eax, dword [ebx + 0xa4]
add eax, 0xc
mov edx, 0x5e5754
call fcn.00404f10
mov eax, dword [ebx + 0xa4]
add eax, 0x10
mov edx, 0x5e5764
call fcn.00404f10
mov eax, dword [ebx + 0xa4]
add eax, 0x14
mov edx, 0x5e5774
call fcn.00404f10
mov eax, dword [ebx + 0xa4]
add eax, 0x18
mov edx, 0x5e5788
call fcn.00404f10
mov eax, dword [ebx + 0xa4]
add eax, 0x28
mov edx, 0x5e579c
call fcn.00404f10
mov eax, dword [ebx + 0xa4]
add eax, 0x2c
mov edx, 0x5e57ac
call fcn.00404f10
mov eax, dword [ebx + 0xa4]
add eax, 0x30
mov edx, 0x5e57bc
call fcn.00404f10
mov eax, dword [ebx + 0xa4]
add eax, 0x34
mov edx, 0x5e57cc
call fcn.00404f10
mov eax, dword [ebx + 0xa4]
add eax, 0x38
mov edx, 0x5e57e4
call fcn.00404f10
mov eax, dword [ebx + 0xa4]
add eax, 0x1c
mov edx, 0x5e57f0
call fcn.00404f10
mov eax, dword [ebx + 0xa4]
add eax, 0x20
mov edx, 0x5e580c
call fcn.00404f10
mov eax, dword [ebx + 0xa4]
add eax, 0x24
mov edx, 0x5e5828
call fcn.00404f10
mov eax, dword [ebx + 0xa4]
add eax, 0x3c
mov edx, 0x5e5854
call fcn.00404f10
mov eax, dword [ebx + 0xa4]
add eax, 0x40
mov edx, 0x5e587c
call fcn.00404f10
mov eax, dword [ebx + 0xa4]
add eax, 0x44
mov edx, 0x5e588c
call fcn.00404f10
mov eax, dword [ebx + 0xa4]
add eax, 0x48
mov edx, 0x5e589c
call fcn.00404f10
mov eax, dword [ebx + 0xa4]
add eax, 0x4c
mov edx, 0x5e58ac
call fcn.00404f10
mov dl, 1
mov eax, dword [0x5e1b88]
call fcn.00403f78
mov edi, eax
mov dword [ebx + 0xa8], edi
lea eax, [edi + 4]
mov edx, 0x5e58bc
call fcn.00404f10
mov eax, dword [ebx + 0xa8]
add eax, 8
mov edx, 0x5e58c8
call fcn.00404f10
mov eax, dword [ebx + 0xa8]
add eax, 0xc
mov edx, 0x5e58e4
call fcn.00404f10
mov eax, dword [ebx + 0xa8]
add eax, 0x10
mov edx, 0x5e58f0
call fcn.00404f10
mov eax, dword [ebx + 0xa8]
add eax, 0x14
mov edx, 0x5e5900
call fcn.00404f10
mov eax, dword [ebx + 0xa8]
add eax, 0x18
mov edx, 0x5e5914
call fcn.00404f10
mov eax, dword [ebx + 0xa8]
add eax, 0x1c
mov edx, 0x5e5934
call fcn.00404f10
mov eax, dword [ebx + 0xa8]
add eax, 0x20
mov edx, 0x5e5960
call fcn.00404f10
mov eax, dword [ebx + 0xa8]
add eax, 0x24
mov edx, 0x5e5980
call fcn.00404f10
mov eax, dword [ebx + 0xa8]
add eax, 0x28
mov edx, 0x5e59a8
call fcn.00404f10
mov dl, 1
mov eax, dword [0x5e3328]
call fcn.005e6010
mov dword [esi + 0x34], eax
mov dl, 1
mov eax, dword [0x5e326c]
call fcn.00403f78
mov ebx, eax
mov dword [esi + 0x30], ebx
mov byte [ebx + 4], 1
mov dl, 1
mov eax, dword [0x5e2934]
call fcn.00403f78
mov ebx, eax
mov dword [esi + 0x40], ebx
lea eax, [ebx + 4]
mov edx, 0x5e59c4
call fcn.00404f10
lea eax, [ebx + 8]
mov edx, 0x5e59d8
call fcn.00404f10
mov dl, 1
mov eax, dword [0x5e2734]
call fcn.00403f78
mov ebx, eax
mov dword [esi + 0x38], ebx
lea eax, [ebx + 4]
mov edx, 0x5e59f4
call fcn.00404f10
lea eax, [ebx + 8]
mov edx, 0x5e5a10
call fcn.00404f10
lea eax, [ebx + 0xc]
mov edx, 0x5e5a28
call fcn.00404f10
lea eax, [ebx + 0x10]
mov edx, 0x5e5a3c
call fcn.00404f10
lea eax, [ebx + 0x14]
mov edx, 0x5e5a4c
call fcn.00404f10
lea eax, [ebx + 0x18]
mov edx, 0x5e5a58
call fcn.00404f10
lea eax, [ebx + 0x1c]
mov edx, 0x5e5a88
call fcn.00404f10
mov dl, 1
mov eax, dword [0x5e2a3c]
call fcn.00403f78
mov ebx, eax
mov dword [esi + 0x3c], ebx
lea eax, [ebx + 4]
mov edx, 0x5e4b28
call fcn.00404f10
lea eax, [ebx + 8]
mov edx, 0x5e5ab8
call fcn.00404f10
lea eax, [ebx + 0xc]
mov edx, 0x5e5ad0
call fcn.00404f10
lea eax, [ebx + 0x10]
mov edx, 0x5e4bb0
call fcn.00404f10
lea eax, [ebx + 0x14]
mov edx, 0x5e4bc8
call fcn.00404f10
lea eax, [ebx + 0x18]
mov edx, 0x5e5ae8
call fcn.00404f10
lea eax, [ebx + 0x1c]
mov edx, 0x5e4cc8
call fcn.00404f10
lea eax, [ebx + 0x20]
mov edx, 0x5e5b08
call fcn.00404f10
lea eax, [ebx + 0x24]
mov edx, 0x5e5b18
call fcn.00404f10
lea eax, [ebx + 0x28]
mov edx, 0x5e5b28
call fcn.00404f10
lea eax, [ebx + 0x2c]
mov edx, 0x5e5b38
call fcn.00404f10
lea eax, [ebx + 0x30]
mov edx, 0x5e4b40
call fcn.00404f10
lea eax, [ebx + 0x34]
mov edx, 0x5e4c24
call fcn.00404f10
lea eax, [ebx + 0x38]
mov edx, 0x5e5b48
call fcn.00404f10
lea eax, [ebx + 0x3c]
mov edx, 0x5e5b80
call fcn.00404f10
lea eax, [ebx + 0x40]
mov edx, 0x5e5bc0
call fcn.00404f10
lea eax, [ebx + 0x44]
mov edx, 0x5e5bf8
call fcn.00404f10
lea eax, [ebx + 0x48]
mov edx, 0x5e5c14
call fcn.00404f10
lea eax, [ebx + 0x4c]
mov edx, 0x5e5c40
call fcn.00404f10
mov dl, 1
mov eax, dword [0x5dfefc]
call fcn.00403f78
mov ebx, eax
mov dword [esi + 0x54], ebx
lea eax, [ebx + 4]
mov edx, 0x5e5c68
call fcn.00404f10
lea eax, [ebx + 8]
mov edx, 0x5e5c90
call fcn.00404f10
lea eax, [ebx + 0xc]
mov edx, 0x5e5cb8
call fcn.00404f10
lea eax, [ebx + 0x10]
mov edx, 0x5e5cd4
call fcn.00404f10
lea eax, [ebx + 0x14]
mov edx, 0x5e5cf4
call fcn.00404f10
lea eax, [ebx + 0x18]
mov edx, 0x5e5d38
call fcn.00404f10
lea eax, [ebx + 0x1c]
mov edx, 0x5e5d7c
call fcn.00404f10
lea eax, [ebx + 0x20]
mov edx, 0x5e5d98
call fcn.00404f10
lea eax, [ebx + 0x24]
mov edx, 0x5e5dc0
call fcn.00404f10
lea eax, [ebx + 0x28]
mov edx, 0x5e5df8
call fcn.00404f10
lea eax, [ebx + 0x2c]
mov edx, 0x5e5d38
call fcn.00404f10
mov byte [esi + 0x44], 1
lea eax, [esi + 0x48]
mov edx, 0x5e5e2c
call fcn.00404f10
lea eax, [esi + 0x4c]
mov edx, 0x5e5b28
call fcn.00404f10
lea eax, [esi + 0x64]
call fcn.00404ebc
mov byte [esi + 0x6d], 0
mov byte [esi + 0x6e], 1
mov al, byte [0x5e5e30]
mov byte [esi + 0x45], al
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5e4844
lea eax, [ebp - 8]
call fcn.00404ebc
ret