Function at 0x4066b0
Capabilities:
Get number of processors
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x41ecb9
mov eax, dword fs:[0]
push eax
sub esp, 0xa0
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4b9060]
xor eax, esp
push eax
lea eax, [esp + 0xb4]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x18], esi
mov ebp, dword [0x4221a4]
lea eax, [esp + 0x1c]
push 0xffffffffffffffff
push 0
push str.WMPBOX_Windows_beta_3
push 0x423d80
push eax
call ebp
add esp, 0x14
mov ecx, dword [esp + 0xc4]
push eax
mov dword [esp + 0xc0], 0
call dword [0x422ba4]
lea ecx, [esp + 0x1c]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
lea ecx, [esp + 0x1c]
call dword [0x42214c]
mov ecx, dword [esi + 0x10]
mov ebx, dword [0x422338]
push eax
mov dword [esp + 0xc0], 1
call ebx
lea ecx, [esp + 0x1c]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x423d8c
lea eax, [esp + 0x28]
push 0x423d80
push eax
call ebp
add esp, 0x14
mov ecx, dword [esi + 0x18]
mov ebp, dword [0x422b98]
push eax
mov dword [esp + 0xc0], 2
call ebp
lea ecx, [esp + 0x1c]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
lea ecx, [esp + 0x1c]
call dword [0x42214c]
mov ecx, dword [esi + 0x18]
push eax
mov dword [esp + 0xc0], 3
call ebx
lea ecx, [esp + 0x1c]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
lea ecx, [esp + 0x14]
call dword [0x42214c]
mov ebx, dword [0x422268]
lea ecx, [esp + 0x1c]
push 0
push eax
mov dword [esp + 0xc4], 4
call ebx
mov ecx, dword [esi + 0x18]
lea eax, [esp + 0x1c]
mov edi, dword [0x422340]
push eax
mov byte [esp + 0xc0], 5
call edi
mov esi, dword [0x422264]
lea ecx, [esp + 0x1c]
mov byte [esp + 0xbc], 4
call esi
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x423d98
lea eax, [esp + 0x20]
push 0x423d80
push eax
call dword [0x4221a4]
add esp, 0x14
mov ecx, dword [esp + 0x18]
push eax
mov dword [esp + 0xc0], 6
mov ecx, dword [ecx + 0x20]
call ebp
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
lea ecx, [esp + 0x14]
call dword [0x42214c]
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 7
mov ecx, dword [eax + 0x20]
mov eax, dword [0x422338]
call eax
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push str.Alt4
lea eax, [esp + 0x20]
push 0x423d80
push eax
call dword [0x4221a4]
add esp, 0x14
push 0
push eax
lea ecx, [esp + 0x24]
mov dword [esp + 0xc4], 8
call ebx
lea eax, [esp + 0x1c]
mov byte [esp + 0xbc], 9
push eax
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax + 0x20]
call edi
lea ecx, [esp + 0x1c]
mov byte [esp + 0xbc], 8
call esi
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
mov edi, dword [0x4221a4]
lea eax, [esp + 0x14]
push 0xffffffffffffffff
push 0
push 0x423dac
push 0x423d80
push eax
call edi
add esp, 0x14
mov esi, dword [esp + 0x18]
push eax
mov dword [esp + 0xc0], 0xa
mov ecx, dword [esi + 0x28]
call ebp
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
lea ecx, [esp + 0x14]
call dword [0x42214c]
mov ecx, dword [esi + 0x28]
mov ebx, dword [0x422338]
push eax
mov dword [esp + 0xc0], 0xb
call ebx
mov dword [esp + 0xbc], 0xffffffff
lea ecx, [esp + 0x14]
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x423dbc
lea eax, [esp + 0x20]
push 0x423d80
push eax
call edi
add esp, 0x14
mov ecx, dword [esi + 0x30]
push eax
mov dword [esp + 0xc0], 0xc
call ebp
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
lea ecx, [esp + 0x14]
call dword [0x42214c]
mov ecx, dword [esi + 0x30]
push eax
mov dword [esp + 0xc0], 0xd
call ebx
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push str.GPIO
lea eax, [esp + 0x20]
push 0x423d80
push eax
call edi
add esp, 0x14
mov ecx, dword [esi + 0x38]
push eax
mov dword [esp + 0xc0], 0xe
call ebp
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
lea ecx, [esp + 0x14]
call dword [0x42214c]
mov ecx, dword [esi + 0x38]
push eax
mov dword [esp + 0xc0], 0xf
call ebx
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x423dd8
lea eax, [esp + 0x20]
push 0x423d80
push eax
call edi
add esp, 0x14
mov ecx, dword [esi + 0x44]
push eax
mov dword [esp + 0xc0], 0x10
call ebp
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
lea ecx, [esp + 0x14]
call dword [0x42214c]
mov ecx, dword [esi + 0x44]
push eax
mov dword [esp + 0xc0], 0x11
call dword [0x422b94]
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
lea ecx, [esp + 0x14]
call dword [0x42214c]
mov ecx, dword [esi + 0x44]
push eax
mov dword [esp + 0xc0], 0x12
call ebx
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x423de8
lea eax, [esp + 0x20]
push 0x423d80
push eax
call edi
add esp, 0x14
mov ecx, dword [esi + 0x4c]
push eax
mov dword [esp + 0xc0], 0x13
call ebp
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
lea ecx, [esp + 0x14]
call dword [0x42214c]
mov ecx, dword [esi + 0x4c]
push eax
mov dword [esp + 0xc0], 0x14
call ebx
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
lea ecx, [esp + 0x14]
call dword [0x42214c]
mov ecx, dword [esi + 0x6c]
mov esi, dword [0x4223fc]
push eax
mov dword [esp + 0xc0], 0x15
call esi
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push str.WMPBOX_Version3.0
lea eax, [esp + 0x20]
push 0x423d80
push eax
call edi
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x16
mov ecx, dword [eax + 0x70]
call esi
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x423e0c
lea eax, [esp + 0x20]
push 0x423d80
push eax
call edi
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x17
mov ecx, dword [eax + 0x74]
call esi
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x423e24
lea eax, [esp + 0x20]
push 0x423d80
push eax
call edi
add esp, 0x14
mov esi, dword [esp + 0x18]
push eax
mov dword [esp + 0xc0], 0x18
mov ecx, dword [esi + 0x7c]
call ebp
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x423e38
lea eax, [esp + 0x20]
push 0x423d80
push eax
call edi
add esp, 0x14
mov ecx, dword [esi + 0x7c]
push eax
mov dword [esp + 0xc0], 0x19
call ebx
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x423e48
lea eax, [esp + 0x20]
push 0x423d80
push eax
call edi
add esp, 0x14
mov ecx, dword [esi + 0x84]
push eax
mov dword [esp + 0xc0], 0x1a
call ebp
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x423e5c
lea eax, [esp + 0x20]
push 0x423d80
push eax
call edi
add esp, 0x14
mov ecx, dword [esi + 0x84]
push eax
mov dword [esp + 0xc0], 0x1b
call ebx
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x423e6c
lea eax, [esp + 0x20]
push 0x423d80
push eax
call edi
add esp, 0x14
mov ecx, dword [esi + 0x8c]
push eax
mov dword [esp + 0xc0], 0x1c
call ebx
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x423e74
lea eax, [esp + 0x20]
push 0x423d80
push eax
call edi
add esp, 0x14
mov ecx, dword [esi + 0x90]
push eax
mov dword [esp + 0xc0], 0x1d
call ebx
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push str._______
lea eax, [esp + 0x20]
push 0x423d80
push eax
call edi
add esp, 0x14
mov ecx, dword [esi + 0xa0]
mov ebp, dword [0x4223fc]
push eax
mov dword [esp + 0xc0], 0x1e
call ebp
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push str._______
lea eax, [esp + 0x20]
push 0x423d80
push eax
call edi
add esp, 0x14
mov ecx, dword [esi + 0xa4]
push eax
mov dword [esp + 0xc0], 0x1f
call ebp
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push str._______
lea eax, [esp + 0x20]
push 0x423d80
push eax
call edi
add esp, 0x14
mov ecx, dword [esi + 0xa8]
push eax
mov dword [esp + 0xc0], 0x20
call ebp
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push str._______
lea eax, [esp + 0x20]
push 0x423d80
push eax
call edi
add esp, 0x14
mov ecx, dword [esi + 0xac]
push eax
mov dword [esp + 0xc0], 0x21
call ebp
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push str._________
lea eax, [esp + 0x20]
push 0x423d80
push eax
call edi
add esp, 0x14
mov ecx, dword [esi + 0xb0]
push eax
mov dword [esp + 0xc0], 0x22
call ebp
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x423e9c
lea eax, [esp + 0x20]
push 0x423d80
push eax
call edi
add esp, 0x14
mov ecx, dword [esi + 0xc8]
push eax
mov dword [esp + 0xc0], 0x23
call ebp
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x423eb0
lea eax, [esp + 0x20]
push 0x423d80
push eax
call edi
add esp, 0x14
mov ecx, dword [esi + 0xe0]
push eax
mov dword [esp + 0xc0], 0x24
call ebx
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push str....
lea eax, [esp + 0x20]
push 0x423d80
push eax
call edi
add esp, 0x14
mov ecx, dword [esi + 0xe4]
push eax
mov dword [esp + 0xc0], 0x25
call ebp
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x423ed0
lea eax, [esp + 0x20]
push 0x423d80
push eax
call edi
add esp, 0x14
mov ecx, dword [esi + 0xec]
push eax
mov dword [esp + 0xc0], 0x26
call ebp
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x423ee0
lea eax, [esp + 0x20]
push 0x423d80
push eax
call edi
add esp, 0x14
mov ecx, dword [esi + 0xcc]
mov ebx, dword [0x422b48]
push eax
push dword [esi + 0xd0]
mov dword [esp + 0xc4], 0x27
call ebx
mov ecx, dword [esi + 0xcc]
mov edi, dword [0x422b50]
push eax
call edi
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x423ee8
lea eax, [esp + 0x20]
push 0x423d80
push eax
call dword [0x4221a4]
add esp, 0x14
mov ecx, dword [esi + 0xcc]
push eax
push dword [esi + 0xd0]
mov dword [esp + 0xc4], 0x28
call ebx
mov ecx, dword [esi + 0xcc]
mov esi, dword [0x422b4c]
push eax
call esi
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x423ef8
lea eax, [esp + 0x20]
push 0x423d80
push eax
call dword [0x4221a4]
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x29
mov ecx, dword [eax + 0x104]
call ebp
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
lea ecx, [esp + 0x14]
call dword [0x42214c]
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x2a
mov ecx, dword [eax + 0x108]
call ebp
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x423f10
lea eax, [esp + 0x20]
push 0x423d80
push eax
call dword [0x4221a4]
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x2b
mov ecx, dword [eax + 0x11c]
call ebp
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x423f20
lea eax, [esp + 0x20]
push 0x423d80
push eax
call dword [0x4221a4]
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x2c
mov ecx, dword [eax + 0x120]
call ebp
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x423f30
lea eax, [esp + 0x20]
push 0x423d80
push eax
call dword [0x4221a4]
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x2d
mov ecx, dword [eax + 0x128]
mov eax, dword [0x422338]
call eax
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
lea ecx, [esp + 0x14]
call dword [0x42214c]
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x2e
mov ecx, dword [eax + 0x12c]
call dword [0x4223cc]
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x423f40
lea eax, [esp + 0x20]
push 0x423d80
push eax
call dword [0x4221a4]
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x2f
mov ecx, dword [eax + 0x130]
call ebp
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x423f50
lea eax, [esp + 0x20]
push 0x423d80
push eax
call dword [0x4221a4]
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x30
push dword [eax + 0xf4]
mov ecx, dword [eax + 0xcc]
call ebx
push eax
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 0xcc]
call edi
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x423f58
lea eax, [esp + 0x20]
push 0x423d80
push eax
call dword [0x4221a4]
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x31
push dword [eax + 0xf4]
mov ecx, dword [eax + 0xcc]
call ebx
push eax
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 0xcc]
call esi
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x423f74
lea eax, [esp + 0x20]
push 0x423d80
push eax
call dword [0x4221a4]
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x32
mov ecx, dword [eax + 0x140]
call ebp
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x423f90
lea eax, [esp + 0x20]
push 0x423d80
push eax
call dword [0x4221a4]
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x33
mov ecx, dword [eax + 0x144]
call ebp
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x423fa0
lea eax, [esp + 0x20]
push 0x423d80
push eax
call dword [0x4221a4]
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x34
mov ecx, dword [eax + 0x148]
call ebp
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
lea ecx, [esp + 0x14]
call dword [0x42214c]
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x35
mov ecx, dword [eax + 0x14c]
call ebp
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x423fc0
lea eax, [esp + 0x20]
push 0x423d80
push eax
call dword [0x4221a4]
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x36
mov ecx, dword [eax + 0x158]
call ebp
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x423fcc
lea eax, [esp + 0x20]
push 0x423d80
push eax
call dword [0x4221a4]
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x37
mov ecx, dword [eax + 0x160]
call ebp
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x423fdc
lea eax, [esp + 0x20]
push 0x423d80
push eax
call dword [0x4221a4]
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x38
mov ecx, dword [eax + 0x170]
call dword [0x422338]
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x423fe4
lea eax, [esp + 0x20]
push 0x423d80
push eax
call dword [0x4221a4]
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x39
push dword [eax + 0x138]
mov ecx, dword [eax + 0xcc]
call ebx
push eax
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 0xcc]
call edi
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
mov edi, dword [0x4221a4]
lea eax, [esp + 0x14]
push 0xffffffffffffffff
push 0
push str.SmartConfig
push 0x423d80
push eax
call edi
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x3a
push dword [eax + 0x138]
mov ecx, dword [eax + 0xcc]
call ebx
mov ebx, dword [esp + 0x1c]
push eax
mov ecx, dword [ebx + 0xcc]
call esi
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x423ff8
lea eax, [esp + 0x20]
push 0x423d80
push eax
call edi
add esp, 0x14
mov ecx, dword [ebx + 0x18c]
push eax
mov dword [esp + 0xc0], 0x3b
call ebp
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x424004
lea eax, [esp + 0x20]
push 0x423d80
push eax
call edi
add esp, 0x14
mov ecx, dword [ebx + 0x190]
push eax
mov dword [esp + 0xc0], 0x3c
call ebp
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x424010
lea eax, [esp + 0x20]
push 0x423d80
push eax
call edi
add esp, 0x14
mov ecx, dword [ebx + 0x1a0]
push eax
mov dword [esp + 0xc0], 0x3d
call ebp
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x424018
lea eax, [esp + 0x20]
push 0x423d80
push eax
call edi
add esp, 0x14
mov ecx, dword [ebx + 0x1a8]
mov esi, dword [0x422338]
push eax
mov dword [esp + 0xc0], 0x3e
call esi
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x424028
lea eax, [esp + 0x20]
push 0x423d80
push eax
call edi
add esp, 0x14
mov ecx, dword [ebx + 0x1ac]
push eax
mov dword [esp + 0xc0], 0x3f
call ebp
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x424034
lea eax, [esp + 0x20]
push 0x423d80
push eax
call edi
add esp, 0x14
mov ecx, dword [ebx + 0x1c4]
push eax
mov dword [esp + 0xc0], 0x40
call ebp
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x424044
lea eax, [esp + 0x20]
push 0x423d80
push eax
call edi
add esp, 0x14
mov ecx, dword [ebx + 0x1c8]
push eax
mov dword [esp + 0xc0], 0x41
call ebp
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x423d1c
lea eax, [esp + 0x20]
push 0x423d80
push eax
call edi
add esp, 0x14
mov ecx, dword [ebx + 0x17c]
push eax
push dword [ebx + 0x180]
mov ebx, dword [0x4224a4]
mov dword [esp + 0xc4], 0x42
call ebx
mov edi, dword [0x4224a0]
push eax
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 0x17c]
call edi
lea ecx, [esp + 0x14]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x42404c
lea eax, [esp + 0x70]
push 0x423d80
push eax
call dword [0x4221a4]
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x43
mov ecx, dword [eax + 0x1e8]
call ebp
lea ecx, [esp + 0x64]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
lea ecx, [esp + 0x6c]
call dword [0x42214c]
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x44
mov ecx, dword [eax + 0x1ec]
call esi
lea ecx, [esp + 0x6c]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x424058
lea eax, [esp + 0x38]
push 0x423d80
push eax
call dword [0x4221a4]
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x45
mov ecx, dword [eax + 0x1f0]
call ebp
lea ecx, [esp + 0x2c]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
lea ecx, [esp + 0xac]
call dword [0x42214c]
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x46
mov ecx, dword [eax + 0x1f4]
call esi
lea ecx, [esp + 0xac]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
lea ecx, [esp + 0x34]
call dword [0x42214c]
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x47
mov ecx, dword [eax + 0x200]
call esi
lea ecx, [esp + 0x34]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x424064
lea eax, [esp + 0x80]
push 0x423d80
push eax
call dword [0x4221a4]
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x48
mov ecx, dword [eax + 0x208]
call ebp
lea ecx, [esp + 0x74]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
lea ecx, [esp + 0x3c]
call dword [0x42214c]
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x49
mov ecx, dword [eax + 0x218]
call esi
lea ecx, [esp + 0x3c]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
lea ecx, [esp + 0x94]
call dword [0x42214c]
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x4a
mov ecx, dword [eax + 0x21c]
call esi
lea ecx, [esp + 0x94]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x424070
lea eax, [esp + 0x50]
push 0x423d80
push eax
call dword [0x4221a4]
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x4b
mov ecx, dword [eax + 0x224]
call ebp
lea ecx, [esp + 0x44]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x42407c
lea eax, [esp + 0x88]
push 0x423d80
push eax
call dword [0x4221a4]
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x4c
mov ecx, dword [eax + 0x22c]
call ebp
lea ecx, [esp + 0x7c]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
lea ecx, [esp + 0x4c]
call dword [0x42214c]
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x4d
mov ecx, dword [eax + 0x230]
call esi
lea ecx, [esp + 0x4c]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
lea ecx, [esp + 0xa4]
call dword [0x42214c]
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x4e
mov ecx, dword [eax + 0x23c]
call esi
lea ecx, [esp + 0xa4]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
lea ecx, [esp + 0x54]
call dword [0x42214c]
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x4f
mov ecx, dword [eax + 0x240]
call esi
lea ecx, [esp + 0x54]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x42408c
lea eax, [esp + 0x90]
push 0x423d80
push eax
call dword [0x4221a4]
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x50
mov ecx, dword [eax + 0x244]
call ebp
lea ecx, [esp + 0x84]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
lea ecx, [esp + 0x5c]
call dword [0x42214c]
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x51
mov ecx, dword [eax + 0x250]
call esi
lea ecx, [esp + 0x5c]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x424098
lea eax, [esp + 0xa8]
push 0x423d80
push eax
call dword [0x4221a4]
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x52
mov ecx, dword [eax + 0x254]
call ebp
lea ecx, [esp + 0x9c]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x4240a4
lea eax, [esp + 0x2c]
push 0x423d80
push eax
call dword [0x4221a4]
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x53
mov ecx, dword [eax + 0x25c]
call ebp
lea ecx, [esp + 0x20]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
lea ecx, [esp + 0x8c]
call dword [0x42214c]
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x54
mov ecx, dword [eax + 0x268]
call esi
lea ecx, [esp + 0x8c]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x4240b0
lea eax, [esp + 0x30]
push 0x423d80
push eax
call dword [0x4221a4]
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x55
mov ecx, dword [eax + 0x270]
call ebp
lea ecx, [esp + 0x24]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x4240bc
lea eax, [esp + 0x34]
push 0x423d80
push eax
call dword [0x4221a4]
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x56
mov ecx, dword [eax + 0x274]
call ebp
lea ecx, [esp + 0x28]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x4240c8
lea eax, [esp + 0x3c]
push 0x423d80
push eax
call dword [0x4221a4]
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x57
mov ecx, dword [eax + 0x27c]
call esi
lea ecx, [esp + 0x30]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
mov esi, dword [0x4221a4]
lea eax, [esp + 0x38]
push 0xffffffffffffffff
push 0
push 0x423d3c
push 0x423d80
push eax
call esi
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x58
push dword [eax + 0x1d4]
mov ecx, dword [eax + 0x17c]
call ebx
push eax
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 0x17c]
call edi
lea ecx, [esp + 0x38]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x4240d0
push 0x423d80
lea eax, [esp + 0x50]
push eax
call esi
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x59
mov ecx, dword [eax + 0x288]
call ebp
lea ecx, [esp + 0x40]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x4240dc
lea eax, [esp + 0x54]
push 0x423d80
push eax
call esi
add esp, 0x14
mov esi, dword [0x4223d8]
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x5a
mov ecx, dword [eax + 0x28c]
call esi
lea ecx, [esp + 0x48]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x4240e0
lea eax, [esp + 0x5c]
push 0x423d80
push eax
call dword [0x4221a4]
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x5b
mov ecx, dword [eax + 0x290]
call ebp
lea ecx, [esp + 0x50]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x4240f0
lea eax, [esp + 0x64]
push 0x423d80
push eax
call dword [0x4221a4]
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x5c
mov ecx, dword [eax + 0x294]
call ebp
lea ecx, [esp + 0x58]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x4240dc
lea eax, [esp + 0x6c]
push 0x423d80
push eax
call dword [0x4221a4]
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x5d
mov ecx, dword [eax + 0x298]
call esi
mov dword [esp + 0xbc], 0xffffffff
lea ecx, [esp + 0x60]
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x4240fc
lea eax, [esp + 0x74]
push 0x423d80
push eax
call dword [0x4221a4]
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x5e
mov ecx, dword [eax + 0x29c]
call esi
lea ecx, [esp + 0x68]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x424100
lea eax, [esp + 0x7c]
push 0x423d80
push eax
call dword [0x4221a4]
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x5f
mov ecx, dword [eax + 0x2a0]
call dword [0x422338]
lea ecx, [esp + 0x70]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x4240dc
lea eax, [esp + 0x84]
push 0x423d80
push eax
call dword [0x4221a4]
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x60
mov ecx, dword [eax + 0x2a4]
call esi
lea ecx, [esp + 0x78]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x424100
lea eax, [esp + 0x8c]
push 0x423d80
push eax
call dword [0x4221a4]
add esp, 0x14
mov esi, dword [0x422338]
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x61
mov ecx, dword [eax + 0x2a8]
call esi
lea ecx, [esp + 0x80]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x424100
lea eax, [esp + 0x94]
push 0x423d80
push eax
call dword [0x4221a4]
add esp, 0x14
mov dword [esp + 0xbc], 0x62
push eax
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax + 0x2ac]
call esi
lea ecx, [esp + 0x88]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x424100
lea eax, [esp + 0x9c]
push 0x423d80
push eax
call dword [0x4221a4]
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x63
mov ecx, dword [eax + 0x2b0]
call esi
lea ecx, [esp + 0x90]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
mov esi, dword [0x4221a4]
lea eax, [esp + 0x98]
push 0xffffffffffffffff
push 0
push 0x424108
push 0x423d80
push eax
call esi
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x64
mov ecx, dword [eax + 0x2b4]
call ebp
lea ecx, [esp + 0x98]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x42410c
lea eax, [esp + 0xac]
push 0x423d80
push eax
call esi
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x65
mov ecx, dword [eax + 0x2b8]
call ebp
lea ecx, [esp + 0xa0]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x42411c
lea eax, [esp + 0xb4]
push 0x423d80
push eax
call esi
add esp, 0x14
push eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], 0x66
mov ecx, dword [eax + 0x2bc]
call ebp
lea ecx, [esp + 0xa8]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
push 0xffffffffffffffff
push 0
push 0x423d58
push 0x423d80
lea eax, [esp + 0xc0]
push eax
call esi
add esp, 0x14
mov ebp, dword [esp + 0x18]
push eax
mov dword [esp + 0xc0], 0x67
push dword [ebp + 0x280]
mov ecx, dword [ebp + 0x17c]
call ebx
mov ecx, dword [ebp + 0x17c]
push eax
call edi
lea ecx, [esp + 0xb0]
mov dword [esp + 0xbc], 0xffffffff
call dword [0x422140]
mov ecx, dword [esp + 0xb4]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xac
ret 4