Function at 0x483ba8
Capabilities:
Access peb ldr_data
Get number of processors
Get process heap flags

Disassembly:
push ebp
mov ebp, esp
mov ecx, 9
push 0
push 0
dec ecx
jne 0x483bb0
push ecx
push ebx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
lea eax, [ebp - 8]
call fcn.00404ec4
xor eax, eax
push ebp
push 0x484685
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 8]
call fcn.0040444c
mov ecx, dword [ebp - 0x10]
mov dl, 1
mov eax, dword [0x430db8]
call fcn.00430e68
mov dword [ebp - 0xc], eax
xor eax, eax
push ebp
push 0x48463a
push dword fs:[eax]
mov dword fs:[eax], esp
push 1
mov ecx, 0x48469c
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x13], al
push 0
mov ecx, 0x4846c0
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 8], al
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x4846d0
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
add eax, 0xc
call fcn.00404a90
push 0
mov ecx, 0x4846e0
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x10], al
push 0
mov ecx, 0x4846f4
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x11], al
push 0
mov ecx, 0x484708
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x12], al
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x48471c
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
add eax, 0x14
call fcn.00404a90
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x48472c
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
add eax, 0x18
call fcn.00404a90
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x48473c
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 4]
add eax, 0x1c
call fcn.00404a90
push 0
mov ecx, 0x484750
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x20], eax
push 0
mov ecx, 0x484764
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x24], al
push 0
mov ecx, 0x484778
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x25], al
push 0x32
mov ecx, 0x48478c
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x28], eax
push 0x32
mov ecx, 0x48479c
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x2c], eax
push 0x32
mov ecx, 0x4847ac
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x30], eax
push 0x64
mov ecx, 0x4847c4
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x4847d4
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x38], eax
push 0
mov ecx, 0x4847e4
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x3c], al
push 0
mov ecx, 0x4847f8
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x3d], al
push 0
mov ecx, 0x48480c
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x3e], al
push 0
mov ecx, 0x484820
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x3f], al
push 1
mov ecx, 0x484834
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x40], al
push 1
mov ecx, 0x484844
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x41], al
push 1
mov ecx, 0x484854
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x42], al
push 0x32
mov ecx, 0x484868
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x44], eax
push 0
mov ecx, 0x484874
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x48], eax
push 1
mov ecx, 0x484884
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x4c], al
push 0x484894
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x4848a8
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 4]
add eax, 0x50
call fcn.00404a90
push 1
mov ecx, 0x4848bc
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x54], al
push 0x1d4c0
mov ecx, 0x4848d0
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x58], eax
push 0
mov ecx, 0x4848e4
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x5c], eax
push 1
mov ecx, 0x4848f8
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x60], eax
push 0
mov ecx, 0x484910
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x64], eax
push 0
mov ecx, 0x484924
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x68], eax
push 0
mov ecx, 0x484938
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x6c], al
push 0
mov ecx, 0x48494c
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x6d], al
push 0
mov ecx, 0x484960
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x6e], al
push 1
mov ecx, 0x484974
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x70], eax
push 1
mov ecx, 0x484984
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x74], eax
push 1
mov ecx, 0x484998
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x78], eax
push 0
mov ecx, 0x4849a8
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x7c], al
push 0
mov ecx, 0x4849bc
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x7d], al
push 0
mov ecx, 0x4849d4
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x7e], al
push 0
mov ecx, 0x4849e8
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x7f], al
push 0
mov ecx, 0x4849fc
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x80], al
push 0
mov ecx, 0x484a10
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x81], al
push 1
mov ecx, 0x484a24
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x82], al
push 0
mov ecx, 0x484a38
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x83], al
push 0
mov ecx, 0x484a4c
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x84], al
push 1
mov ecx, 0x484a60
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x85], al
push 0
mov ecx, 0x484a6c
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x86], al
push 0
mov ecx, 0x484a80
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0x87], al
push 0x12c
mov ecx, 0x484a90
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x88], eax
push 0x484aa8
lea eax, [ebp - 0x28]
push eax
mov ecx, 0x484ab8
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 4]
add eax, 0x8c
call fcn.00404a90
push 0x484ac8
lea eax, [ebp - 0x2c]
push eax
mov ecx, 0x484ad8
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 4]
add eax, 0x90
call fcn.00404a90
push 0xa
mov ecx, 0x484aec
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x94], eax
push 0x64
mov ecx, 0x484b00
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x98], eax
push 0xa
mov ecx, 0x484b14
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x9c], eax
push 0x64
mov ecx, 0x484b28
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0xa0], eax
push 1
mov ecx, 0x484b40
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0xa4], al
push 1
mov ecx, 0x484b54
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0xa5], al
push 0
lea eax, [ebp - 0x30]
push eax
mov ecx, 0x484b68
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 4]
add eax, 0xa8
call fcn.00404a90
push 0
mov ecx, 0x484b7c
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0xac], eax
push 0
mov ecx, 0x484b90
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0xb0], eax
push 0x32
mov ecx, 0x484ba4
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0xb4], eax
push 0x80
mov ecx, 0x484bb8
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0xb8], eax
push 1
mov ecx, 0x484bcc
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0xbc], al
push 0x484be0
lea eax, [ebp - 0x34]
push eax
mov ecx, 0x484bf0
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 4]
add eax, 0xc0
call fcn.00404a90
push 1
mov ecx, 0x484c04
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0xc4], al
push 1
mov ecx, 0x484c18
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0xc5], al
push 0
mov ecx, 0x484c2c
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0xc6], al
push 0
mov ecx, 0x484c40
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0xc7], al
push 0
mov ecx, 0x484c54
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0xc8], al
push 0
mov ecx, 0x484c68
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0xc9], al
push 0
mov ecx, 0x484c7c
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0xca], al
push 0
mov ecx, 0x484c90
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp - 4]
mov byte [edx + 0xcb], al
push 0
lea eax, [ebp - 0x38]
push eax
mov ecx, 0x484ca4
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 4]
add eax, 0xcc
call fcn.00404a90
push 0
lea eax, [ebp - 0x3c]
push eax
mov ecx, 0x484cbc
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 4]
add eax, 0xd0
call fcn.00404a90
push 0
lea eax, [ebp - 0x40]
push eax
mov ecx, 0x484cd4
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x40]
mov eax, dword [ebp - 4]
add eax, 0xd4
call fcn.00404a90
push 0
lea eax, [ebp - 0x44]
push eax
mov ecx, 0x484cec
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 4]
add eax, 0xd8
call fcn.00404a90
push 0
lea eax, [ebp - 0x48]
push eax
mov ecx, 0x484d04
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 4]
add eax, 0xdc
call fcn.00404a90
push 0
lea eax, [ebp - 0x4c]
push eax
mov ecx, 0x484d1c
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 4]
add eax, 0xe0
call fcn.00404a90
push 0
mov ecx, 0x484d34
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0xe4], eax
push 0
mov ecx, 0x484d48
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0xe8], eax
push 0
mov ecx, 0x484d5c
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0xec], eax
push 0
mov ecx, 0x484d70
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0xf0], eax
push 0
mov ecx, 0x484d84
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0xf4], eax
push 0
mov ecx, 0x484d98
mov edx, 0x4846b0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0xf8], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x484641
mov eax, dword [ebp - 0xc]
call fcn.00403414
ret