Function at 0x421830
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x426538
mov eax, dword fs:[0]
push eax
sub esp, 0x108
mov eax, dword [0x43c06c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 4], 0
push 0
lea ecx, [ebp - 0x3c]
call fcn.00403270
mov byte [ebp - 4], 1
push 0
lea ecx, [ebp - 0x58]
call fcn.00403270
mov byte [ebp - 4], 2
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x38], 0
mov eax, dword [ebp + 8]
push eax
push str.SetEdidByWmi_sName_______s_n
call fcn.00401000
add esp, 8
push str.WmiGetMonitorRawEEdidV1Block
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x44], eax
push 0
lea ecx, [ebp - 0x4c]
call fcn.00403270
mov byte [ebp - 4], 3
push 0
lea ecx, [ebp - 0x50]
call fcn.00403270
mov byte [ebp - 4], 4
push 0
lea ecx, [ebp - 0x10]
call fcn.00403270
mov byte [ebp - 4], 5
push 0
lea ecx, [ebp - 0x40]
call fcn.00403270
mov byte [ebp - 4], 6
push 0
push 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
mov dword [ebp - 0x48], eax
push 0
push 0
push 0
push 3
push 0
push 0
push 0
push 0xffffffffffffffff
push 0
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
mov dword [ebp - 0x48], eax
lea ecx, [ebp - 0x3c]
call fcn.00403290
push eax
push 0x42a8c4
push 1
push 0
push 0x42a994
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je 0x421959
mov ecx, dword [ebp - 0x48]
push ecx
push 0x436870
push 0x1c6
push 0x436888
push 0x4368a8
call fcn.00401000
add esp, 0x14
jmp 0x422478
lea ecx, [ebp - 0x3c]
call fcn.00404600
mov dword [ebp - 0xb8], eax
push str.rootwmi
lea ecx, [ebp - 0x9c]
call fcn.00402b00
mov dword [ebp - 0xbc], eax
mov edx, dword [ebp - 0xbc]
mov dword [ebp - 0xc0], edx
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x58]
call fcn.00403290
push eax
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0xc0]
call fcn.00402bc0
push eax
mov eax, dword [ebp - 0xb8]
push eax
mov ecx, dword [ebp - 0xb8]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
call eax
mov dword [ebp - 0x48], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x9c]
call fcn.00402ba0
cmp dword [ebp - 0x48], 0
je 0x4219ff
mov ecx, dword [ebp - 0x48]
push ecx
push 0x436918
push 0x1da
push 0x436930
push 0x436950
call fcn.00401000
add esp, 0x14
jmp 0x422478
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
lea ecx, [ebp - 0x58]
call fcn.00404600
push eax
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je 0x421a4a
mov edx, dword [ebp - 0x48]
push edx
push 0x4369c0
push 0x1eb
push 0x4369d8
push 0x4369f8
call fcn.00401000
add esp, 0x14
jmp 0x422478
lea ecx, [ebp - 0x58]
call fcn.00404600
mov dword [ebp - 0xc4], eax
push str.Select__from_WmiMonitorDescriptorMethods
lea ecx, [ebp - 0xa0]
call fcn.00402b00
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0xcc], eax
mov byte [ebp - 4], 8
push 0x436584
lea ecx, [ebp - 0xa4]
call fcn.00402a60
mov dword [ebp - 0xd0], eax
mov ecx, dword [ebp - 0xd0]
mov dword [ebp - 0xd4], ecx
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x40]
call fcn.00403290
push eax
push 0
push 0x30
mov ecx, dword [ebp - 0xcc]
call fcn.00402bc0
push eax
mov ecx, dword [ebp - 0xd4]
call fcn.00402bc0
push eax
mov edx, dword [ebp - 0xc4]
push edx
mov eax, dword [ebp - 0xc4]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x50]
call edx
mov dword [ebp - 0x48], eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xa4]
call fcn.00402ba0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xa0]
call fcn.00402ba0
cmp dword [ebp - 0x48], 0
je 0x421b29
mov eax, dword [ebp - 0x48]
push eax
push 0x436abc
push 0x1fc
push 0x436ad4
push 0x436b08
call fcn.00401000
add esp, 0x14
jmp 0x422478
lea ecx, [ebp - 0x58]
call fcn.00404600
mov dword [ebp - 0xd8], eax
push str.WmiMonitorDescriptorMethods
lea ecx, [ebp - 0xa8]
call fcn.00402b00
mov dword [ebp - 0xdc], eax
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0xe0], ecx
mov byte [ebp - 4], 0xa
push 0
lea ecx, [ebp - 0x4c]
call fcn.00403290
push eax
push 0
push 0
mov ecx, dword [ebp - 0xe0]
call fcn.00402bc0
push eax
mov edx, dword [ebp - 0xd8]
push edx
mov eax, dword [ebp - 0xd8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x18]
call edx
mov dword [ebp - 0x48], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xa8]
call fcn.00402ba0
cmp dword [ebp - 0x48], 0
je 0x421bc9
mov eax, dword [ebp - 0x48]
push eax
push 0x436bb0
push 0x209
push 0x436bc8
push 0x436be8
call fcn.00401000
add esp, 0x14
jmp 0x422478
lea ecx, [ebp - 0x4c]
call fcn.00404600
mov dword [ebp - 0xe4], eax
push 0
lea ecx, [ebp - 0x50]
call fcn.00403290
push eax
push 0
mov ecx, dword [ebp - 0x44]
push ecx
mov edx, dword [ebp - 0xe4]
push edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x4c]
call edx
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je 0x421c2a
mov eax, dword [ebp - 0x48]
push eax
push 0x436c58
push 0x210
push 0x436c70
push 0x436c90
call fcn.00401000
add esp, 0x14
jmp 0x422478
lea ecx, [ebp - 0x50]
call fcn.00404600
mov dword [ebp - 0xe8], eax
lea ecx, [ebp - 0x10]
call fcn.00403290
push eax
push 0
mov ecx, dword [ebp - 0xe8]
push ecx
mov edx, dword [ebp - 0xe8]
mov eax, dword [edx]
mov ecx, dword [eax + 0x3c]
call ecx
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je 0x421c85
mov edx, dword [ebp - 0x48]
push edx
push 0x436d00
push 0x213
push 0x436d18
push 0x436d38
call fcn.00401000
add esp, 0x14
jmp 0x422478
lea ecx, [ebp - 0x40]
call fcn.00404600
test eax, eax
je 0x422464
cmp dword [ebp - 0x54], 0
jne 0x422464
push 0
lea ecx, [ebp - 0x88]
call fcn.00403270
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x80], 0
lea ecx, [ebp - 0x40]
call fcn.00404600
mov dword [ebp - 0xec], eax
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x88]
call fcn.00403290
push eax
push 1
push 0xffffffffffffffff
mov ecx, dword [ebp - 0xec]
push ecx
mov edx, dword [ebp - 0xec]
mov eax, dword [edx]
mov ecx, dword [eax + 0x10]
call ecx
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je 0x421d2a
mov edx, dword [ebp - 0x48]
push edx
push 0x436da8
push 0x21f
push 0x436dc0
push 0x436de0
call fcn.00401000
add esp, 0x14
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x88]
call fcn.00401760
jmp 0x422478
push 0x436624
lea ecx, [ebp - 0x84]
call fcn.004017c0
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea ecx, [ebp - 0x88]
call fcn.00404600
mov dword [ebp - 0xf0], eax
push 0
push 0
lea ecx, [ebp - 0x7c]
push ecx
push 0
push str.InstanceName
mov edx, dword [ebp - 0xf0]
push edx
mov eax, dword [ebp - 0xf0]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x10]
call edx
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x84]
call fcn.00403450
lea ecx, [ebp - 0x7c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp dword [ebp - 0x48], 0
je 0x421de1
mov edx, dword [ebp - 0x48]
push edx
push 0x436e50
push 0x228
push 0x436e68
push 0x436e88
call fcn.00401000
add esp, 0x14
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x84]
call fcn.00401840
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x88]
call fcn.00401760
jmp 0x422478
lea ecx, [ebp - 0x84]
call fcn.00403090
mov eax, dword [ebp - 0x84]
push eax
push str.SetEdidByWmi_InstanceName___s_n
call fcn.00401000
add esp, 8
push 0
lea ecx, [ebp + 8]
call fcn.00404600
push eax
lea ecx, [ebp - 0x84]
call fcn.00401930
cmp eax, 0xffffffff
je 0x422436
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x94], 0
push 0
lea ecx, [ebp - 0x8c]
call fcn.00403270
mov byte [ebp - 4], 0xd
push 0
lea ecx, [ebp - 0x98]
call fcn.00403270
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x88]
call fcn.00404600
mov dword [ebp - 0xf4], eax
push str.__PATH
lea ecx, [ebp - 0xac]
call fcn.00402b00
mov dword [ebp - 0xf8], eax
mov ecx, dword [ebp - 0xf8]
mov dword [ebp - 0xfc], ecx
mov byte [ebp - 4], 0xf
push 0
push 0
lea edx, [ebp - 0x24]
push edx
push 0
mov ecx, dword [ebp - 0xfc]
call fcn.00402bc0
push eax
mov eax, dword [ebp - 0xf4]
push eax
mov ecx, dword [ebp - 0xf4]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
call eax
mov dword [ebp - 0x48], eax
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xac]
call fcn.00402ba0
cmp dword [ebp - 0x48], 0
je 0x421f2f
mov ecx, dword [ebp - 0x48]
push ecx
push 0x436f48
push 0x234
push 0x436f60
push 0x436f80
call fcn.00401000
add esp, 0x14
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x98]
call fcn.00401760
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x8c]
call fcn.00401760
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x84]
call fcn.00401840
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x88]
call fcn.00401760
jmp 0x422478
lea edx, [ebp - 0x7c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, 0x11
mov word [ebp - 0x7c], ax
xor ecx, ecx
mov word [ebp - 0x74], cx
lea ecx, [ebp - 0x10]
call fcn.00404600
mov dword [ebp - 0x100], eax
push 0
lea edx, [ebp - 0x7c]
push edx
push 0
push 0x436ff0
mov eax, dword [ebp - 0x100]
push eax
mov ecx, dword [ebp - 0x100]
mov edx, dword [ecx]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x48], eax
lea ecx, [ebp - 0x7c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp dword [ebp - 0x48], 0
je 0x421feb
mov edx, dword [ebp - 0x48]
push edx
push 0x437000
push 0x23d
push 0x437018
push 0x437038
call fcn.00401000
add esp, 0x14
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x98]
call fcn.00401760
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x8c]
call fcn.00401760
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x84]
call fcn.00401840
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x88]
call fcn.00401760
jmp 0x422478
lea ecx, [ebp - 0x58]
call fcn.00404600
mov dword [ebp - 0x104], eax
push 0
lea ecx, [ebp - 0x8c]
call fcn.00403290
push eax
lea ecx, [ebp - 0x10]
call fcn.00404600
push eax
push 0
push 0
mov eax, dword [ebp - 0x44]
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x104]
push edx
mov eax, dword [ebp - 0x104]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x60]
call edx
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp dword [ebp - 0x48], 0
je 0x4220a4
mov ecx, dword [ebp - 0x48]
push ecx
push 0x4370a8
push 0x244
push 0x4370c0
push 0x4370e0
call fcn.00401000
add esp, 0x14
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x98]
call fcn.00401760
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x8c]
call fcn.00401760
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x84]
call fcn.00401840
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x88]
call fcn.00401760
jmp 0x422478
lea edx, [ebp - 0x6c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea ecx, [ebp - 0x8c]
call fcn.00404600
mov dword [ebp - 0x108], eax
push 0
push 0
lea eax, [ebp - 0x6c]
push eax
push 0
push 0x43677c
mov ecx, dword [ebp - 0x108]
push ecx
mov edx, dword [ebp - 0x108]
mov eax, dword [edx]
mov ecx, dword [eax + 0x10]
call ecx
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je 0x42214c
mov edx, dword [ebp - 0x48]
push edx
push 0x437150
push 0x248
push 0x437168
push 0x437188
call fcn.00401000
add esp, 0x14
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x98]
call fcn.00401760
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x8c]
call fcn.00401760
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x84]
call fcn.00401840
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x88]
call fcn.00401760
jmp 0x422478
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov ecx, 0x11
mov word [ebp - 0x7c], cx
mov edx, 1
mov word [ebp - 0x74], dx
lea ecx, [ebp - 0x10]
call fcn.00404600
mov dword [ebp - 0x10c], eax
push 0
lea eax, [ebp - 0x7c]
push eax
push 0
push str.BlockId
mov ecx, dword [ebp - 0x10c]
push ecx
mov edx, dword [ebp - 0x10c]
mov eax, dword [edx]
mov ecx, dword [eax + 0x14]
call ecx
mov dword [ebp - 0x48], eax
lea edx, [ebp - 0x7c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp dword [ebp - 0x48], 0
je 0x42220b
mov eax, dword [ebp - 0x48]
push eax
push 0x437208
push 0x251
push 0x437220
push 0x437240
call fcn.00401000
add esp, 0x14
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x98]
call fcn.00401760
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x8c]
call fcn.00401760
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x84]
call fcn.00401840
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x88]
call fcn.00401760
jmp 0x422478
lea ecx, [ebp - 0x58]
call fcn.00404600
mov dword [ebp - 0x110], eax
push 0
lea ecx, [ebp - 0x98]
call fcn.00403290
push eax
lea ecx, [ebp - 0x10]
call fcn.00404600
push eax
push 0
push 0
mov ecx, dword [ebp - 0x44]
push ecx
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x110]
push eax
mov ecx, dword [ebp - 0x110]
mov edx, dword [ecx]
mov eax, dword [edx + 0x60]
call eax
mov dword [ebp - 0x48], eax
lea ecx, [ebp - 0x7c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp dword [ebp - 0x48], 0
je 0x4222c4
mov edx, dword [ebp - 0x48]
push edx
push 0x4372b0
push 0x258
push 0x4372c8
push 0x4372e8
call fcn.00401000
add esp, 0x14
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x98]
call fcn.00401760
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x8c]
call fcn.00401760
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x84]
call fcn.00401840
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x88]
call fcn.00401760
jmp 0x422478
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea ecx, [ebp - 0x98]
call fcn.00404600
mov dword [ebp - 0x114], eax
push 0
push 0
lea ecx, [ebp - 0x34]
push ecx
push 0
push str.BlockContent
mov edx, dword [ebp - 0x114]
push edx
mov eax, dword [ebp - 0x114]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x10]
call edx
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je 0x42236c
mov eax, dword [ebp - 0x48]
push eax
push 0x437358
push 0x25c
push 0x437370
push str.__s__EXIT_ON_WMIERROR:_Line___d__File___s__hr__0x_X_n
call fcn.00401000
add esp, 0x14
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x98]
call fcn.00401760
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x8c]
call fcn.00401760
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x84]
call fcn.00401840
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x88]
call fcn.00401760
jmp 0x422478
lea ecx, [ebp - 0x90]
push ecx
mov edx, dword [ebp - 0x64]
push edx
call dword [sym.imp.OLEAUT32.dll_SafeArrayUnaccessData]
lea eax, [ebp - 0x94]
push eax
mov ecx, dword [ebp - 0x2c]
push ecx
call dword [sym.imp.OLEAUT32.dll_SafeArrayUnaccessData]
cmp dword [ebp - 0x90], 0
je 0x4223dc
cmp dword [ebp - 0x94], 0
je 0x4223dc
push 0x80
mov edx, dword [ebp - 0x90]
push edx
mov eax, dword [ebp - 0xb4]
push eax
call fcn.00405b80
add esp, 0xc
push 0x80
mov ecx, dword [ebp - 0x94]
push ecx
mov edx, dword [ebp - 0xb4]
add edx, 0x80
push edx
call fcn.00405b80
add esp, 0xc
mov eax, dword [ebp - 0x64]
push eax
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetElement]
mov ecx, dword [ebp - 0x2c]
push ecx
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetElement]
lea edx, [ebp - 0x6c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov dword [ebp - 0x54], 1
push str.Found___n
call fcn.00401000
add esp, 4
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x98]
call fcn.00401760
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x8c]
call fcn.00401760
lea ecx, [ebp - 0x88]
call fcn.00403230
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x84]
call fcn.00401840
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x88]
call fcn.00401760
jmp 0x421c85
cmp dword [ebp - 0x54], 0
je 0x422478
mov ecx, dword [ebp - 0xb4]
call fcn.00421330
mov dword [ebp - 0x38], eax
lea ecx, [ebp - 0x7c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x6c]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [ebp - 0x24]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [ebp - 0x58]
call fcn.00403230
lea ecx, [ebp - 0x3c]
call fcn.00403230
lea ecx, [ebp - 0x40]
call fcn.00403230
lea ecx, [ebp - 0x4c]
call fcn.00403230
lea ecx, [ebp - 0x50]
call fcn.00403230
lea ecx, [ebp - 0x10]
call fcn.00403230
mov edx, dword [ebp - 0x44]
push edx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xb0], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x40]
call fcn.00401760
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x10]
call fcn.00401760
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x50]
call fcn.00401760
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4c]
call fcn.00401760
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x58]
call fcn.00401760
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x3c]
call fcn.00401760
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00401840
mov eax, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret 4