Function at 0x467380
Capabilities:
Access peb ldr_data
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x564f8e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x84
push ebx
push ebp
push esi
push edi
mov edi, ecx
lea ecx, [esp + 0x14]
mov dword [esp + 0x18], edi
call fcn.00531800
xor ebx, ebx
lea ecx, [esp + 0x84]
mov dword [esp + 0x9c], ebx
call fcn.0054a580
mov ecx, dword [0x59d378]
mov eax, dword [0x59d374]
mov dx, word [0x59d37c]
mov dword [esp + 0x40], ecx
mov ecx, dword [0x59d64c]
mov dword [esp + 0x3c], eax
mov eax, dword [0x59d648]
mov dword [esp + 0x28], ecx
mov ecx, dword [0x59d640]
mov word [esp + 0x44], dx
mov dx, word [0x59d650]
mov dword [esp + 0x34], ecx
mov ecx, dword [0x59d54c]
mov dword [esp + 0x24], eax
mov eax, dword [0x59d63c]
mov word [esp + 0x2c], dx
mov dx, word [0x59d644]
mov dword [esp + 0x4c], ecx
mov ecx, dword [0x59d634]
mov dword [esp + 0x30], eax
mov eax, dword [0x59d548]
mov word [esp + 0x38], dx
mov dx, word [0x59d550]
mov dword [esp + 0x58], ecx
mov ecx, dword [0x59d628]
mov dword [esp + 0x48], eax
mov eax, dword [0x59d630]
mov word [esp + 0x50], dx
mov dx, word [0x59d638]
mov dword [esp + 0x64], ecx
mov ecx, dword [0x59d61c]
mov dword [esp + 0x54], eax
mov eax, dword [0x59d624]
mov word [esp + 0x5c], dx
mov dx, word [0x59d62c]
mov dword [esp + 0x70], ecx
mov ecx, dword [0x59d610]
push ebx
mov dword [esp + 0x64], eax
mov eax, dword [0x59d618]
mov word [esp + 0x6c], dx
mov dx, word [0x59d620]
push 1
push ecx
mov dword [esp + 0x88], ecx
mov dword [esp + 0x78], eax
mov eax, dword [0x59d60c]
mov word [esp + 0x80], dx
mov dx, word [0x59d614]
mov ecx, esp
mov dword [esp + 0x28], esp
push 6
push 0x59b910
mov byte [esp + 0xb0], 1
mov dword [esp + 0x8c], eax
mov word [esp + 0x94], dx
call fcn.005318a0
push ecx
mov byte [esp + 0xac], 2
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x59d604
call fcn.005318a0
mov byte [esp + 0xac], 1
mov ecx, 0x5c6628
call fcn.00533b90
push ebx
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b910
call fcn.005318a0
push ecx
mov byte [esp + 0xac], 3
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59c0ec
call fcn.005318a0
mov ecx, 0x5c6628
mov byte [esp + 0xac], 1
call fcn.00533b90
mov ecx, edi
call fcn.0046a0d0
push 2
lea ecx, [esp + 0x88]
call fcn.0053b6d0
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.00531830
lea ecx, [esp + 0x88]
call fcn.0053b400
lea esi, [edi + 0xc]
push ebx
add edi, 0x9c
push 1
lea eax, [esp + 0x2c]
push esi
push eax
mov ecx, edi
call fcn.004551e0
cmp ax, bx
push ebx
jne 0x4675d1
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b920
call fcn.005318a0
push ecx
mov byte [esp + 0xac], 4
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59ba20
jmp 0x46815e
push ebx
lea ecx, [esp + 0x38]
push esi
push ecx
mov ecx, edi
call fcn.004551e0
mov edx, dword [edi]
lea eax, [esp + 0x3c]
push 0xc8
push eax
mov ecx, edi
call dword [edx + 0x14]
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b910
call fcn.005318a0
push ecx
mov byte [esp + 0xac], 5
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59d5fc
call fcn.005318a0
mov ecx, 0x5c6628
mov byte [esp + 0xac], 1
call fcn.00533b90
push ebx
push 1
lea ecx, [esp + 0x50]
push esi
push ecx
mov ecx, edi
call fcn.004551e0
push ebx
push 1
push ecx
cmp ax, bx
mov ecx, esp
jne 0x467679
mov dword [esp + 0x2c], esp
push 6
push 0x59b920
call fcn.005318a0
push ecx
mov byte [esp + 0xac], 6
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59ba20
jmp 0x46815e
mov dword [esp + 0x2c], esp
push 6
push 0x59b910
call fcn.005318a0
push ecx
mov byte [esp + 0xac], 7
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59d5f4
call fcn.005318a0
mov ecx, 0x5c6628
mov byte [esp + 0xac], 1
call fcn.00533b90
push ebx
push 1
lea edx, [esp + 0x5c]
push esi
push edx
mov ecx, edi
call fcn.004551e0
cmp ax, bx
push ebx
jne 0x4676fc
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b920
call fcn.005318a0
push ecx
mov byte [esp + 0xac], 8
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59ba20
jmp 0x46815e
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b910
call fcn.005318a0
push ecx
mov byte [esp + 0xac], 9
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59d5ec
call fcn.005318a0
mov ecx, 0x5c6628
mov byte [esp + 0xac], 1
call fcn.00533b90
sub esp, 0x24
lea ecx, [esp + 0xa8]
mov eax, esp
mov dword [esp + 0x44], esp
push ebx
push ecx
push eax
mov ecx, 0x5c65f0
call fcn.005426b0
mov ecx, esi
call fcn.0053a050
mov ecx, esi
call fcn.0053a480
test ax, ax
push ebx
je 0x4677e1
mov ecx, esi
call fcn.0053a3c0
mov ecx, dword [eax + 4]
cmp ecx, ebx
jne 0x467780
xor ebp, ebp
jmp 0x467788
mov ebp, dword [eax + 8]
sub ebp, ecx
sar ebp, 2
xor edi, edi
cmp bp, bx
jle 0x4677cd
movsx edx, di
push edx
push ebx
mov ecx, esi
call fcn.0053a3c0
mov ecx, eax
call fcn.0042ab20
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00531810
lea ecx, [esp + 0x18]
call fcn.005319b0
push 3
lea ecx, [esp + 0x18]
call fcn.00531ac0
cmp al, 0xf9
je 0x4677cd
inc edi
cmp di, bp
jl 0x46778f
push 3
lea ecx, [esp + 0x18]
call fcn.00531ac0
cmp al, 0xf9
je 0x467811
jmp 0x46773d
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b920
call fcn.005318a0
push ecx
mov byte [esp + 0xac], 0xa
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59ba20
jmp 0x46815e
push 4
lea ecx, [esp + 0x18]
call fcn.00531ac0
cmp al, 2
sete byte [esp + 0x13]
sub esp, 0x24
lea ecx, [esp + 0xa8]
mov eax, esp
mov dword [esp + 0x44], esp
push ebx
push ecx
push eax
mov ecx, 0x5c65f0
call fcn.005426b0
mov ecx, esi
call fcn.0053a050
mov ecx, esi
call fcn.0053a480
test ax, ax
push ebx
je 0x467906
mov ecx, esi
call fcn.0053a3c0
mov ecx, dword [eax + 4]
cmp ecx, ebx
jne 0x46786a
xor ebp, ebp
jmp 0x467872
mov ebp, dword [eax + 8]
sub ebp, ecx
sar ebp, 2
xor edi, edi
cmp bp, bx
jle 0x4678b7
movsx edx, di
push edx
push ebx
mov ecx, esi
call fcn.0053a3c0
mov ecx, eax
call fcn.0042ab20
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00531810
lea ecx, [esp + 0x18]
call fcn.005319b0
push 3
lea ecx, [esp + 0x18]
call fcn.00531ac0
cmp al, 0xf9
je 0x4678b7
inc edi
cmp di, bp
jl 0x467879
push 3
lea ecx, [esp + 0x18]
call fcn.00531ac0
cmp al, 0xf9
jne 0x467823
movzx ax, byte [esp + 0x13]
lea ecx, [esp + 0x14]
lea edi, [eax + 4]
push edi
call fcn.00531ac0
cmp al, 2
je 0x467991
push edi
lea ecx, [esp + 0x18]
call fcn.00531ac0
cmp al, 4
je 0x467936
push edi
lea ecx, [esp + 0x18]
call fcn.00531ac0
cmp al, 8
je 0x467967
jmp 0x467823
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b920
call fcn.005318a0
push ecx
mov byte [esp + 0xac], 0xb
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59ba20
jmp 0x46815e
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b910
call fcn.005318a0
push ecx
mov byte [esp + 0xac], 0xc
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59d5e4
jmp 0x46815e
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b910
call fcn.005318a0
push ecx
mov byte [esp + 0xac], 0xd
mov ecx, esp
mov dword [esp + 0x2c], esp
jmp 0x468157
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b910
call fcn.005318a0
push ecx
mov byte [esp + 0xac], 0xe
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59d5d4
call fcn.005318a0
mov ecx, 0x5c6628
mov byte [esp + 0xac], 1
call fcn.00533b90
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b910
call fcn.005318a0
push ecx
mov byte [esp + 0xac], 0xf
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59d5cc
call fcn.005318a0
mov ecx, 0x5c6628
mov byte [esp + 0xac], 1
call fcn.00533b90
push 0x64
call fcn.0043d4c0
mov edx, dword [esp + 0x1c]
add esp, 4
lea ecx, [esp + 0x60]
push ebx
push 1
push esi
push ecx
lea ecx, [edx + 0x9c]
call fcn.004551e0
cmp ax, bx
jne 0x467a6f
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b920
call fcn.005318a0
push ecx
mov byte [esp + 0xac], 0x10
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59ba20
jmp 0x46815e
push 0x7d0
call fcn.0043d4c0
add esp, 4
push ebx
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b910
call fcn.005318a0
push ecx
mov byte [esp + 0xac], 0x11
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59d5c4
call fcn.005318a0
mov ecx, 0x5c6628
mov byte [esp + 0xac], 1
call fcn.00533b90
sub esp, 0x24
lea ecx, [esp + 0xa8]
mov eax, esp
mov dword [esp + 0x44], esp
push ebx
push ecx
push eax
mov ecx, 0x5c65f0
call fcn.005426b0
mov ecx, esi
call fcn.0053a050
mov ecx, esi
call fcn.0053a480
test ax, ax
push ebx
je 0x467ba1
mov ecx, esi
call fcn.0053a3c0
mov ecx, dword [eax + 4]
cmp ecx, ebx
jne 0x467b05
xor ebp, ebp
jmp 0x467b0d
mov ebp, dword [eax + 8]
sub ebp, ecx
sar ebp, 2
xor edi, edi
cmp bp, bx
jle 0x467b52
movsx edx, di
push edx
push ebx
mov ecx, esi
call fcn.0053a3c0
mov ecx, eax
call fcn.0042ab20
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00531810
lea ecx, [esp + 0x18]
call fcn.005319b0
push 3
lea ecx, [esp + 0x18]
call fcn.00531ac0
cmp al, 0xf9
je 0x467b52
inc edi
cmp di, bp
jl 0x467b14
push 3
lea ecx, [esp + 0x18]
call fcn.00531ac0
cmp al, 0xf9
jne 0x467abe
movzx ax, byte [esp + 0x13]
lea ecx, [esp + 0x14]
lea edi, [eax + 4]
push edi
call fcn.00531ac0
cmp al, 2
je 0x467c2c
push edi
lea ecx, [esp + 0x18]
call fcn.00531ac0
cmp al, 4
je 0x467bd1
push edi
lea ecx, [esp + 0x18]
call fcn.00531ac0
cmp al, 8
je 0x467c02
jmp 0x467abe
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b920
call fcn.005318a0
push ecx
mov byte [esp + 0xac], 0x12
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59ba20
jmp 0x46815e
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b910
call fcn.005318a0
push ecx
mov byte [esp + 0xac], 0x13
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59d5e4
jmp 0x46815e
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b910
call fcn.005318a0
push ecx
mov byte [esp + 0xac], 0x14
mov ecx, esp
mov dword [esp + 0x2c], esp
jmp 0x468157
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b910
call fcn.005318a0
push ecx
mov byte [esp + 0xac], 0x15
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59d5bc
call fcn.005318a0
mov ecx, 0x5c6628
mov byte [esp + 0xac], 1
call fcn.00533b90
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b910
call fcn.005318a0
push ecx
mov byte [esp + 0xac], 0x16
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59d5b4
call fcn.005318a0
mov ecx, 0x5c6628
mov byte [esp + 0xac], 1
call fcn.00533b90
push 0x64
call fcn.0043d4c0
mov edx, dword [esp + 0x1c]
add esp, 4
lea ecx, [esp + 0x6c]
push ebx
push 1
push esi
push ecx
lea ecx, [edx + 0x9c]
call fcn.004551e0
cmp ax, bx
jne 0x467d0a
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b920
call fcn.005318a0
push ecx
mov byte [esp + 0xac], 0x17
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59ba20
jmp 0x46815e
push 0x7d0
call fcn.0043d4c0
add esp, 4
push ebx
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b910
call fcn.005318a0
push ecx
mov byte [esp + 0xac], 0x18
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59d5ac
call fcn.005318a0
mov ecx, 0x5c6628
mov byte [esp + 0xac], 1
call fcn.00533b90
sub esp, 0x24
lea ecx, [esp + 0xa8]
mov eax, esp
mov dword [esp + 0x44], esp
push ebx
push ecx
push eax
mov ecx, 0x5c65f0
call fcn.005426b0
mov ecx, esi
call fcn.0053a050
mov ecx, esi
call fcn.0053a480
test ax, ax
push ebx
je 0x467e3c
mov ecx, esi
call fcn.0053a3c0
mov ecx, dword [eax + 4]
cmp ecx, ebx
jne 0x467da0
xor ebp, ebp
jmp 0x467da8
mov ebp, dword [eax + 8]
sub ebp, ecx
sar ebp, 2
xor edi, edi
cmp bp, bx
jle 0x467ded
movsx edx, di
push edx
push ebx
mov ecx, esi
call fcn.0053a3c0
mov ecx, eax
call fcn.0042ab20
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00531810
lea ecx, [esp + 0x18]
call fcn.005319b0
push 3
lea ecx, [esp + 0x18]
call fcn.00531ac0
cmp al, 0xf9
je 0x467ded
inc edi
cmp di, bp
jl 0x467daf
push 3
lea ecx, [esp + 0x18]
call fcn.00531ac0
cmp al, 0xf9
jne 0x467d59
movzx ax, byte [esp + 0x13]
lea ecx, [esp + 0x14]
lea edi, [eax + 4]
push edi
call fcn.00531ac0
cmp al, 2
je 0x467ec7
push edi
lea ecx, [esp + 0x18]
call fcn.00531ac0
cmp al, 4
je 0x467e6c
push edi
lea ecx, [esp + 0x18]
call fcn.00531ac0
cmp al, 8
je 0x467e9d
jmp 0x467d59
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b920
call fcn.005318a0
push ecx
mov byte [esp + 0xac], 0x19
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59ba20
jmp 0x46815e
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b910
call fcn.005318a0
push ecx
mov byte [esp + 0xac], 0x1a
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59d5e4
jmp 0x46815e
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b910
call fcn.005318a0
push ecx
mov byte [esp + 0xac], 0x1b
mov ecx, esp
mov dword [esp + 0x2c], esp
jmp 0x468157
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b910
call fcn.005318a0
push ecx
mov byte [esp + 0xac], 0x1c
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59d5a4
call fcn.005318a0
mov ecx, 0x5c6628
mov byte [esp + 0xac], 1
call fcn.00533b90
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b910
call fcn.005318a0
push ecx
mov byte [esp + 0xac], 0x1d
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59d59c
call fcn.005318a0
mov ecx, 0x5c6628
mov byte [esp + 0xac], 1
call fcn.00533b90
push 0x64
call fcn.0043d4c0
mov edx, dword [esp + 0x1c]
add esp, 4
lea ecx, [esp + 0x78]
push ebx
push 1
push esi
push ecx
lea ecx, [edx + 0x9c]
call fcn.004551e0
cmp ax, bx
jne 0x467fa5
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b920
call fcn.005318a0
push ecx
mov byte [esp + 0xac], 0x1e
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59ba20
jmp 0x46815e
push 0x7d0
call fcn.0043d4c0
add esp, 4
push ebx
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b910
call fcn.005318a0
push ecx
mov byte [esp + 0xac], 0x1f
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59d594
call fcn.005318a0
mov ecx, 0x5c6628
mov byte [esp + 0xac], 1
call fcn.00533b90
sub esp, 0x24
lea ecx, [esp + 0xa8]
mov eax, esp
mov dword [esp + 0x44], esp
push ebx
push ecx
push eax
mov ecx, 0x5c65f0
call fcn.005426b0
mov ecx, esi
call fcn.0053a050
mov ecx, esi
call fcn.0053a480
test ax, ax
push ebx
je 0x4680d7
mov ecx, esi
call fcn.0053a3c0
mov ecx, dword [eax + 4]
cmp ecx, ebx
jne 0x46803b
xor ebp, ebp
jmp 0x468043
mov ebp, dword [eax + 8]
sub ebp, ecx
sar ebp, 2
xor edi, edi
cmp bp, bx
jle 0x468088
movsx edx, di
push edx
push ebx
mov ecx, esi
call fcn.0053a3c0
mov ecx, eax
call fcn.0042ab20
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00531810
lea ecx, [esp + 0x18]
call fcn.005319b0
push 3
lea ecx, [esp + 0x18]
call fcn.00531ac0
cmp al, 0xf9
je 0x468088
inc edi
cmp di, bp
jl 0x46804a
push 3
lea ecx, [esp + 0x18]
call fcn.00531ac0
cmp al, 0xf9
jne 0x467ff4
movzx ax, byte [esp + 0x13]
lea ecx, [esp + 0x14]
lea edi, [eax + 4]
push edi
call fcn.00531ac0
cmp al, 2
je 0x46817a
push edi
lea ecx, [esp + 0x18]
call fcn.00531ac0
cmp al, 4
je 0x468104
push edi
lea ecx, [esp + 0x18]
call fcn.00531ac0
cmp al, 8
je 0x468132
jmp 0x467ff4
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b920
call fcn.005318a0
push ecx
mov byte [esp + 0xac], 0x20
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59ba20
jmp 0x46815e
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b910
call fcn.005318a0
push ecx
mov byte [esp + 0xac], 0x21
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59d5e4
jmp 0x46815e
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b910
call fcn.005318a0
push ecx
mov byte [esp + 0xac], 0x22
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59d5dc
call fcn.005318a0
mov ecx, 0x5c6628
mov byte [esp + 0xac], 1
call fcn.00533b90
jmp 0x468215
push ebx
push ebx
mov ecx, 0x5c65f0
call fcn.0053f850
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b910
call fcn.005318a0
push ecx
mov byte [esp + 0xac], 0x23
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59d58c
call fcn.005318a0
mov ecx, 0x5c6628
mov byte [esp + 0xac], 1
call fcn.00533b90
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59b910
call fcn.005318a0
push ecx
mov byte [esp + 0xac], 0x24
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x59d584
call fcn.005318a0
mov ecx, 0x5c6628
mov byte [esp + 0xac], 1
call fcn.00533b90
mov ecx, dword [esp + 0x18]
call fcn.0047de70
lea ecx, [esp + 0x84]
mov byte [esp + 0x9c], bl
call fcn.0053b1d0
lea ecx, [esp + 0x14]
mov dword [esp + 0x9c], 0xffffffff
call fcn.00531940
mov ecx, dword [esp + 0x94]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x90
ret