Function at 0x10040150
Capabilities:
Get number of processors

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100c2e42
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1c
mov eax, dword [ebp + 8]
push ebx
mov ebx, dword [0x101195ec]
push esi
push edi
push 0x19c
mov dword [ebp - 0x10], ebx
mov dword [ebx], eax
call fcn.1009718a
add esp, 4
mov dword [ebp + 8], eax
mov dword [ebp - 4], 0
mov ecx, eax
call fcn.10043630
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
push dword [ebx]
mov dword [ebx + 4], eax
call fcn.100441e0
mov edx, dword [ebx + 4]
lea ecx, [ebx + 0x38]
push 0x38
push 0x400
push 0
push 0
add edx, 0x8c
call fcn.10036a00
mov edx, dword [ebx + 4]
lea ecx, [ebx + 0x5c]
push 0x38
push 0x400
push 0x168
push 0
add edx, 0x8c
call fcn.10036a00
mov edx, dword [ebx + 4]
lea ecx, [ebx + 0x80]
push 0x38
push 0x400
push 0
push 0
add edx, 0x8c
call fcn.10036a00
mov edx, dword [ebx + 4]
lea ecx, [ebx + 0xa4]
push 0x38
push 0x400
push 0
push 0
add edx, 0x8c
call fcn.10036a00
mov edx, dword [ebx + 4]
lea ecx, [ebx + 0xc8]
add esp, 0x40
add edx, 0x8c
push 0x38
push 0x400
push 0
push 0
call fcn.10036a00
mov edx, dword [ebx + 4]
lea ecx, [ebx + 0xec]
push 0x38
push 0x400
push 0x78
push 0
add edx, 0x8c
call fcn.10036a00
mov edx, dword [ebx + 4]
lea ecx, [ebx + 0x110]
push 0x38
push 0x400
push 0xf0
push 0
add edx, 0x8c
call fcn.10036a00
push 0x38
push 0x400
push 0xf0
push 0
mov edx, dword [ebx + 4]
lea ecx, [ebx + 0x134]
add edx, 0x8c
call fcn.10036a00
mov edx, dword [ebx + 4]
lea ecx, [ebx + 0x158]
add esp, 0x40
add edx, 0x8c
push 0x38
push 0x400
push 0xf0
push 0
call fcn.10036a00
push 0x2a8
push 0xc3
push 0x38
xor edx, edx
lea ecx, [ebx + 0x13c]
call fcn.10036d60
add esp, 0x1c
lea ecx, [ebx + 0x14c]
xor edx, edx
push 0x20
push 0x400
push 0x2e0
call fcn.10036d60
add esp, 0xc
mov ecx, ebx
add ecx, 0x15c
xor edx, edx
push 0x38
push 0x400
push 0
call fcn.10036d60
add esp, 0xc
mov ecx, ebx
mov edx, 0xc4
push 0x2a8
push 0x33d
lea ecx, [ecx + 0x16c]
push 0x38
call fcn.10036d60
add esp, 0xc
mov eax, ebx
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2410]
push 0x34
push 0xa3
push 0x323
push 0x23e
add edx, 0x4c
call fcn.10036a00
mov eax, ebx
push 0x34
push 0xa3
push 0x362
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2434]
push 0x23e
add edx, 0x4c
call fcn.10036a00
mov eax, ebx
push 0x34
push 0xa3
push 0x362
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2458]
push 0x23e
add edx, 0x4c
call fcn.10036a00
mov eax, ebx
push 0x28
push 0x6b
push 0x324
mov edx, dword [eax + 4]
lea ecx, [eax + 0x247c]
push 0x318
add edx, 0x4c
call fcn.10036a00
add esp, 0x40
push 0x28
mov eax, ebx
push 0x6b
push 0x351
push 0x318
mov edx, dword [eax + 4]
lea ecx, [eax + 0x24a0]
add edx, 0x4c
call fcn.10036a00
mov eax, ebx
push 0x28
push 0x6b
push 0x37e
mov edx, dword [eax + 4]
lea ecx, [eax + 0x24c4]
push 0x318
add edx, 0x4c
call fcn.10036a00
mov eax, ebx
push 0x28
push 0x6b
push 0x324
mov edx, dword [eax + 4]
lea ecx, [eax + 0x24e8]
push 0x1c6
add edx, 0x4c
call fcn.10036a00
mov eax, ebx
push 0x28
push 0x6b
push 0x351
mov edx, dword [eax + 4]
lea ecx, [eax + 0x250c]
push 0x1c6
add edx, 0x4c
call fcn.10036a00
add esp, 0x40
mov eax, ebx
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2530]
push 0x28
push 0x6b
push 0x37e
push 0x1c6
add edx, 0x4c
call fcn.10036a00
mov eax, ebx
push 0x42
push 0x64
push 0x252
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2554]
push 0xbe
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x42
push 0x64
push 0x2ac
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2578]
push 0xbe
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x42
push 0x64
push 0x306
mov edx, dword [eax + 4]
lea ecx, [eax + 0x259c]
push 0xbe
add edx, 0x5c
call fcn.10036a00
add esp, 0x40
mov eax, ebx
mov edx, dword [eax + 4]
lea ecx, [eax + 0x25c0]
push 0x42
push 0x64
push 0x306
push 0xbe
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x1e
push 0x64
push 0x55
mov edx, dword [eax + 4]
lea ecx, [eax + 0x25e4]
push 0x14a
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x1e
push 0x64
push 0x7d
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2608]
push 0x14a
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x1e
push 0x64
push 0xa5
mov edx, dword [eax + 4]
lea ecx, [eax + 0x262c]
push 0x14a
add edx, 0x5c
call fcn.10036a00
add esp, 0x40
mov eax, ebx
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2650]
push 0x1e
push 0x64
push 0xcd
push 0x14a
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x1e
push 0x64
push 0x55
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2674]
push 0x1b8
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x1e
push 0x64
push 0x7d
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2698]
push 0x1b8
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x1e
push 0x64
push 0xa5
mov edx, dword [eax + 4]
lea ecx, [eax + 0x26bc]
push 0x1b8
add edx, 0x5c
call fcn.10036a00
add esp, 0x40
mov eax, ebx
mov edx, dword [eax + 4]
lea ecx, [eax + 0x26e0]
push 0x1e
push 0x64
push 0xcd
push 0x1b8
add edx, 0x5c
call fcn.10036a00
push 0x1e
push 0x64
mov eax, ebx
push 0x55
push 0x226
mov edx, dword [eax + 4]
add edx, 0x5c
lea ecx, [eax + 0x2704]
call fcn.10036a00
mov eax, ebx
push 0x1e
push 0x64
push 0x7d
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2728]
push 0x226
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x1e
push 0x64
push 0xa5
mov edx, dword [eax + 4]
lea ecx, [eax + 0x274c]
push 0x226
add edx, 0x5c
call fcn.10036a00
add esp, 0x40
mov eax, ebx
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2770]
push 0x1e
push 0x64
push 0xcd
push 0x226
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x1a
push 0x68
push 0x183
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2794]
push 0x148
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x1a
push 0x68
push 0x1ab
mov edx, dword [eax + 4]
lea ecx, [eax + 0x27b8]
push 0x148
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x1a
push 0x68
push 0x1d3
mov edx, dword [eax + 4]
lea ecx, [eax + 0x27dc]
push 0x148
add edx, 0x5c
call fcn.10036a00
add esp, 0x40
mov eax, ebx
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2800]
push 0x1a
push 0x68
push 0x1fb
push 0x148
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x1a
push 0x68
push 0x223
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2824]
push 0x148
add edx, 0x5c
call fcn.10036a00
push 0x1a
push 0x68
push 0x183
push 0x1b6
mov eax, ebx
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2848]
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x1a
push 0x68
push 0x1ab
mov edx, dword [eax + 4]
lea ecx, [eax + 0x286c]
push 0x1b6
add edx, 0x5c
call fcn.10036a00
add esp, 0x40
mov eax, ebx
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2890]
push 0x1a
push 0x68
push 0x1d3
push 0x1b6
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x1a
push 0x68
push 0x1fb
mov edx, dword [eax + 4]
lea ecx, [eax + 0x28b4]
push 0x1b6
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x1a
push 0x68
push 0x223
mov edx, dword [eax + 4]
lea ecx, [eax + 0x28d8]
push 0x1b6
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x1a
push 0x68
push 0x183
mov edx, dword [eax + 4]
lea ecx, [eax + 0x28fc]
push 0x224
add edx, 0x5c
call fcn.10036a00
add esp, 0x40
mov eax, ebx
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2920]
push 0x1a
push 0x68
push 0x1ab
push 0x224
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x1a
push 0x68
push 0x1d3
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2944]
push 0x224
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x1a
push 0x68
push 0x1fb
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2968]
push 0x224
add edx, 0x5c
call fcn.10036a00
push 0x1a
push 0x68
mov eax, ebx
push 0x223
push 0x224
mov edx, dword [eax + 4]
lea ecx, [eax + 0x298c]
add edx, 0x5c
call fcn.10036a00
add esp, 0x40
mov eax, ebx
mov edx, dword [eax + 4]
lea ecx, [eax + 0x29b0]
push 0x1a
push 0x7d
push 0x25b
push 0x29d
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x1a
push 0x7d
push 0x27b
mov edx, dword [eax + 4]
lea ecx, [eax + 0x29d4]
push 0x29d
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x1a
push 0x7d
push 0x29b
mov edx, dword [eax + 4]
lea ecx, [eax + 0x29f8]
push 0x29d
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x1a
push 0x7d
push 0x2bb
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2a1c]
push 0x29d
add edx, 0x5c
call fcn.10036a00
add esp, 0x40
mov eax, ebx
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2a40]
push 0x1a
push 0x7d
push 0x2db
push 0x29d
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x1e
push 0x64
push 0x55
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2a64]
push 0x390
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x1e
push 0x64
push 0x7d
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2a88]
push 0x390
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x1e
push 0x64
push 0xa5
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2aac]
push 0x390
add edx, 0x5c
call fcn.10036a00
add esp, 0x40
mov eax, ebx
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2ad0]
push 0x1e
push 0x64
push 0xcd
push 0x390
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x1e
push 0x64
push 0xf5
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2af4]
push 0x390
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x1e
push 0x64
push 0x11d
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2b18]
push 0x390
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x1e
push 0x64
push 0x145
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2b3c]
push 0x390
add edx, 0x5c
call fcn.10036a00
add esp, 0x40
mov eax, ebx
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2b60]
push 0x1e
push 0x64
push 0x16d
push 0x390
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x1e
push 0x64
push 0x195
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2b84]
push 0x390
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x1e
push 0x64
push 0x1bd
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2ba8]
push 0x390
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x1e
push 0x64
push 0x1e5
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2bcc]
push 0x390
add edx, 0x5c
call fcn.10036a00
add esp, 0x40
mov eax, ebx
mov edx, dword [eax + 4]
push 0x1e
push 0x64
push 0x20d
push 0x390
add edx, 0x5c
lea ecx, [eax + 0x2bf0]
call fcn.10036a00
mov eax, ebx
push 0x1e
push 0x64
push 0x55
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2c14]
push 0x304
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x1e
push 0x64
push 0x7d
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2c38]
push 0x304
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x1e
push 0x64
push 0xa5
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2c5c]
push 0x304
add edx, 0x5c
call fcn.10036a00
add esp, 0x40
mov eax, ebx
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2c80]
push 0x1e
push 0x64
push 0xcd
push 0x304
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x1e
push 0x64
push 0xf5
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2ca4]
push 0x304
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x1e
push 0x64
push 0x11d
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2cc8]
push 0x304
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x1e
push 0x64
push 0x145
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2cec]
push 0x304
add edx, 0x5c
call fcn.10036a00
add esp, 0x40
mov eax, ebx
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2d10]
push 0x1e
push 0x64
push 0x16d
push 0x304
add edx, 0x5c
call fcn.10036a00
push 0x1e
push 0x64
push 0x195
push 0x304
mov eax, ebx
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2d34]
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x1e
push 0x64
push 0x1bd
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2d58]
push 0x304
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x1e
push 0x64
push 0x1e5
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2d7c]
push 0x304
add edx, 0x5c
call fcn.10036a00
add esp, 0x40
mov eax, ebx
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2da0]
push 0x1e
push 0x64
push 0x20d
push 0x304
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x22
push 0x9e
push 0x25b
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2dc4]
push 0x148
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x22
push 0x9e
push 0x280
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2de8]
push 0x148
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x22
push 0x9e
push 0x2a5
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2e0c]
push 0x148
add edx, 0x5c
call fcn.10036a00
add esp, 0x40
mov eax, ebx
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2e30]
push 0x22
push 0x9e
push 0x25b
push 0x1f7
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x22
push 0x9e
push 0x280
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2e54]
push 0x1f7
add edx, 0x5c
call fcn.10036a00
push 0x22
push 0x9e
mov eax, ebx
push 0x2a5
push 0x1f7
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2e78]
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x27
push 0x78
push 0x33a
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2e9c]
push 0x1c2
add edx, 0x5c
call fcn.10036a00
add esp, 0x40
mov eax, ebx
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2ec0]
push 0x27
push 0x78
push 0x367
push 0x1c2
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x27
push 0x78
push 0x392
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2ee4]
push 0x1c2
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x27
push 0x78
push 0x3bd
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2f08]
push 0x1c2
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x27
push 0x78
push 0x33a
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2f2c]
push 0x138
add edx, 0x5c
call fcn.10036a00
add esp, 0x40
mov eax, ebx
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2f50]
push 0x27
push 0x78
push 0x367
push 0x138
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x27
push 0x78
push 0x392
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2f74]
push 0x138
add edx, 0x5c
call fcn.10036a00
mov eax, ebx
push 0x27
push 0x78
push 0x3bd
mov edx, dword [eax + 4]
lea ecx, [eax + 0x2f98]
push 0x138
add edx, 0x5c
call fcn.10036a00
push 0x29
mov eax, ebx
lea ecx, [ebx + 0x110]
push 0x59
push 0x2c7
push 0x392
mov edx, dword [eax + 4]
add edx, 0x4c
call fcn.10036a00
add esp, 0x40
mov esi, ebx
mov edx, 0x2ad
push 0x34
push 0xa3
push 0x2af
lea ecx, [esi + 0x23d0]
call fcn.10036d60
add esp, 0xc
lea ecx, [esi + 0x23e0]
mov edx, 0xe5
push 0x28
push 0x6b
push pe_nt_image_headers32
call fcn.10036d60
add esp, 0xc
lea ecx, [esi + 0x23f0]
mov edx, 0x15c
push 0x28
push 0x6b
push pe_nt_image_headers32
call fcn.10036d60
add esp, 0xc
lea ecx, [esi + 0x2400]
mov edx, 0x1d2
push 0x28
push 0x6b
push pe_nt_image_headers32
call fcn.10036d60
add esp, 0xc
mov dword [esi + 0x10], 0
push 0x440
call fcn.1009718a
mov ecx, eax
add esp, 4
mov dword [ebp - 0x14], ecx
mov dword [ebp - 4], 1
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov dword [ebp - 4], 0xffffffff
push dword [esi + 0x140]
mov eax, dword [esi + 4]
push dword [ebx + 0x13c]
mov dword [esi + 8], ecx
push dword [eax + 8]
push dword [esi]
call fcn.10043700
push 0x16c
call fcn.1009718a
mov ecx, dword [esi + 4]
add esp, 4
mov dword [esi + 0xc], eax
push dword [esi + 0x150]
push dword [ebx + 0x14c]
push dword [ecx + 8]
mov ecx, eax
push dword [esi]
call fcn.10045270
push 0x154
call fcn.1009718a
mov ecx, eax
add esp, 4
mov dword [ebp - 0x18], ecx
mov dword [ebp - 4], 2
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov dword [ebp - 4], 0xffffffff
lea ebx, [esi + 0x16c]
push dword [esi + 0x170]
mov dword [esi + 0x14], ecx
mov eax, dword [esi + 4]
push dword [ebx]
push dword [eax + 8]
push dword [esi]
call fcn.1004eaa0
push 0x3ae4
call fcn.1009718a
mov edi, eax
add esp, 4
mov dword [ebp - 0x1c], edi
mov dword [ebp - 4], 3
lea ecx, [edi + 0x3494]
mov edx, 5
mov byte [ecx + 8], 0
lea ecx, [ecx + 0x104]
mov dword [ecx - 0x104], 0
mov dword [ecx - 0x100], 0
mov dword [ecx - 0x5c], 0
sub edx, 1
jne 0x10040fb3
mov dword [edi], edx
mov dword [edi + 4], edx
mov byte [edi + 8], dl
mov dword [ebp - 4], 0xffffffff
mov ecx, edi
push dword [esi + 0x170]
mov eax, dword [esi + 4]
push dword [ebx]
mov dword [esi + 0x18], edi
push dword [eax + 8]
push dword [esi]
call fcn.10050da0
push 0x34
call fcn.1009718a
mov ecx, eax
add esp, 4
mov dword [ebp + 8], ecx
mov dword [ebp - 4], 4
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov dword [ebp - 4], 0xffffffff
push dword [esi + 0x170]
mov eax, dword [esi + 4]
push dword [ebx]
mov dword [esi + 0x1c], ecx
push dword [eax + 8]
push dword [esi]
call fcn.10050d50
push 0x34
call fcn.1009718a
mov ecx, eax
add esp, 4
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 5
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov dword [ebp - 4], 0xffffffff
push dword [esi + 0x170]
mov eax, dword [esi + 4]
push dword [ebx]
mov dword [esi + 0x20], ecx
push dword [eax + 8]
push dword [esi]
call fcn.1004f420
push 0x7135dc
call fcn.1009718a
mov ecx, eax
add esp, 4
mov dword [ebp - 0x18], ecx
mov dword [ebp - 4], 6
mov dword [ecx + 0x940], 0
mov dword [ecx + 0x944], 0
mov dword [ecx + 0x3c4cc0], 0
mov dword [ecx + 0x3c4cc4], 0
mov byte [ecx + 0x6ef88c], 0
mov dword [ecx + 0x6ef884], 0
mov dword [ecx + 0x6ef888], 0
mov dword [ecx + 0x6ef994], 0
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov dword [ebp - 4], 0xffffffff
push dword [esi + 0x170]
mov eax, dword [esi + 4]
push dword [ebx]
mov dword [esi + 0x24], ecx
push dword [eax + 8]
push dword [esi]
call fcn.10055b90
push 0x34
call fcn.1009718a
mov ecx, eax
add esp, 4
mov dword [ebp - 0x14], ecx
mov dword [ebp - 4], 7
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov dword [ebp - 4], 0xffffffff
push dword [esi + 0x170]
mov eax, dword [esi + 4]
push dword [ebx]
mov dword [esi + 0x28], ecx
push dword [eax + 8]
push dword [esi]
call fcn.1004dab0
push 0xef8
call fcn.1009718a
mov ecx, eax
add esp, 4
mov dword [ebp - 0x10], ecx
mov dword [ebp - 4], 8
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov dword [ebp - 4], 0xffffffff
push dword [esi + 0x170]
mov eax, dword [esi + 4]
push dword [ebx]
mov dword [esi + 0x2c], ecx
push dword [eax + 8]
push dword [esi]
call fcn.1004db00
push 0x2764
call fcn.1009718a
mov ecx, eax
add esp, 4
mov dword [ebp - 0x20], ecx
mov dword [ebp - 4], 9
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov byte [ecx + 0x165], 0
mov dword [ebp - 4], 0xffffffff
push dword [esi + 0x170]
mov eax, dword [esi + 4]
push dword [ebx]
mov dword [esi + 0x30], ecx
push dword [eax + 8]
push dword [esi]
call fcn.1004f470
push 0x2764
call fcn.1009718a
mov ecx, eax
add esp, 4
mov dword [ebp - 0x24], ecx
mov dword [ebp - 4], 0xa
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov byte [ecx + 0x165], 0
mov dword [ebp - 4], 0xffffffff
push dword [esi + 0x170]
mov eax, dword [esi + 4]
push dword [ebx]
mov dword [esi + 0x34], ecx
push dword [eax + 8]
push dword [esi]
call fcn.10054f70
mov eax, dword [esi + 4]
lea ecx, [esi + 0x1190]
push dword [eax + 8]
push dword [esi]
call fcn.10045e00
mov eax, dword [esi + 4]
lea ecx, [esi + 0x17c]
push dword [eax + 8]
push dword [esi]
call fcn.10046ec0
mov dword [esi + 0x2304], 0xc2600000
mov dword [esi + 0x2310], 0
mov dword [esi + 0x2314], 0
mov dword [esi + 0x231c], 0
mov dword [esi + 0x2324], 0
mov byte [esi + 0x2320], 0
mov dword [esi + 0x23c0], 0
mov dword [esi + 0x23c4], 0
mov dword [esi + 0x23c8], 0
mov dword [esi + 0x23cc], 0
mov byte [esi + 0x2308], 1
mov word [esi + 0x230a], 0
mov word [esi + 0x230d], 0
mov byte [esi + 0x230f], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebp - 0xc]
mov dword [esi + 0x2318], eax
mov al, 1
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 4