Function at 0x464ab0
Capabilities:
Get number of processors
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5e6e16
mov eax, dword fs:[0]
push eax
sub esp, 0x420
mov eax, dword [0x65bde0]
xor eax, esp
mov dword [esp + 0x418], eax
push ebx
push esi
push edi
mov eax, dword [0x65bde0]
xor eax, esp
push eax
lea eax, [esp + 0x430]
mov dword fs:[0], eax
xor eax, eax
mov esi, ecx
push 0x3fe
push eax
lea ecx, [esp + 0x2e]
push ecx
mov dword [esp + 0x28], esi
mov word [esp + 0x30], ax
call fcn.005b6e50
add esp, 0xc
mov edx, 0x625284
lea ecx, [esp + 0x14]
call fcn.004194f0
push 0x200
lea edx, [esp + 0x28]
push edx
mov ecx, eax
mov dword [esp + 0x440], 0
call fcn.004199f0
mov edx, eax
mov ecx, 0x675920
call fcn.0043fa40
or ebx, 0xffffffff
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.0040a260
mov eax, dword [esi + 0x37d8]
mov edx, dword [eax + 0x170]
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esi + 0x37d8]
call edx
mov edx, 0x616134
lea ecx, [esp + 0x14]
call fcn.004194f0
mov dword [esp + 0x438], 1
mov edx, dword [esi + 0x37d8]
push 0x64
push eax
mov eax, dword [edx + 0x180]
lea ecx, [esi + 0x37d8]
call eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.0040a260
mov edx, dword [esi + 0x37d8]
mov eax, dword [edx + 0x174]
push 1
lea ecx, [esi + 0x37d8]
call eax
fld dword [esi + 0x17c]
fmul qword [0x62c630]
mov ebx, dword [esi + 0x37d8]
fadd qword [0x62c640]
call fcn.005b8dc0
mov edx, dword [ebx + 0x18c]
push eax
lea ecx, [esi + 0x37d8]
call edx
mov eax, dword [esi + 0x37d8]
mov edx, dword [eax + 0x16c]
push 0xcd781f
lea ecx, [esi + 0x37d8]
call edx
mov eax, dword [esi + 0x37d8]
mov edx, dword [eax + 0x168]
push 0
push 0
lea ecx, [esi + 0x37d8]
call edx
mov eax, dword [esi + 0x37d8]
mov edx, dword [eax + 0x198]
push 1
lea ecx, [esi + 0x37d8]
call edx
mov edx, 0x6252a4
lea ecx, [esp + 0x14]
call fcn.004194f0
push 0x200
lea ecx, [esp + 0x28]
push ecx
mov ecx, eax
mov dword [esp + 0x440], 2
call fcn.004199f0
mov edx, eax
mov ecx, 0x675920
call fcn.0043fa40
or ebx, 0xffffffff
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.0040a260
mov edx, dword [esi + 0x38fc]
mov edx, dword [edx + 0x170]
lea eax, [esp + 0x24]
push eax
lea ecx, [esi + 0x38fc]
call edx
mov edx, 0x616134
lea ecx, [esp + 0x14]
call fcn.004194f0
mov dword [esp + 0x438], 3
mov edx, dword [esi + 0x38fc]
push 0x64
push eax
mov eax, dword [edx + 0x180]
lea ecx, [esi + 0x38fc]
call eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.0040a260
fld dword [esi + 0x17c]
fmul qword [0x62c630]
mov ebx, dword [esi + 0x38fc]
fadd qword [0x62c640]
call fcn.005b8dc0
mov edx, dword [ebx + 0x18c]
push eax
lea ecx, [esi + 0x38fc]
call edx
mov eax, dword [esi + 0x38fc]
mov edx, dword [eax + 0x16c]
push 0xe6c885
lea ecx, [esi + 0x38fc]
call edx
mov eax, dword [esi + 0x38fc]
mov edx, dword [eax + 0x168]
push 0
push 0
lea ecx, [esi + 0x38fc]
call edx
mov eax, dword [esi + 0x38fc]
mov edx, dword [eax + 0x198]
push 1
lea ecx, [esi + 0x38fc]
call edx
mov edx, 0x6252cc
lea ecx, [esp + 0x14]
call fcn.004194f0
push 0x200
lea ecx, [esp + 0x28]
push ecx
mov ecx, eax
mov dword [esp + 0x440], 4
call fcn.004199f0
mov edx, eax
mov ecx, 0x675920
call fcn.0043fa40
or ebx, 0xffffffff
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.0040a260
mov edx, dword [esi + 0x3a20]
mov edx, dword [edx + 0x170]
lea eax, [esp + 0x24]
push eax
lea ecx, [esi + 0x3a20]
call edx
mov edx, 0x616134
lea ecx, [esp + 0x14]
call fcn.004194f0
mov dword [esp + 0x438], 5
mov edx, dword [esi + 0x3a20]
push 0x64
push eax
mov eax, dword [edx + 0x180]
lea ecx, [esi + 0x3a20]
call eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.0040a260
fld dword [esi + 0x17c]
fmul qword [0x62c630]
mov ebx, dword [esi + 0x3a20]
fadd qword [0x62c640]
call fcn.005b8dc0
mov edx, dword [ebx + 0x18c]
push eax
lea ecx, [esi + 0x3a20]
call edx
mov eax, dword [esi + 0x3a20]
mov edx, dword [eax + 0x16c]
push 0xe6c885
lea ecx, [esi + 0x3a20]
call edx
mov eax, dword [esi + 0x3a20]
mov edx, dword [eax + 0x168]
push 0
push 0
lea ecx, [esi + 0x3a20]
call edx
mov eax, dword [esi + 0x3a20]
mov edx, dword [eax + 0x198]
push 1
lea ecx, [esi + 0x3a20]
call edx
mov edx, 0x6252f4
lea ecx, [esp + 0x14]
call fcn.004194f0
push 0x200
lea ecx, [esp + 0x28]
push ecx
mov ecx, eax
mov dword [esp + 0x440], 6
call fcn.004199f0
mov edx, eax
mov ecx, 0x675920
call fcn.0043fa40
or ebx, 0xffffffff
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.0040a260
mov edx, dword [esi + 0x3b44]
mov edx, dword [edx + 0x170]
lea eax, [esp + 0x24]
push eax
lea ecx, [esi + 0x3b44]
call edx
mov edx, 0x616134
lea ecx, [esp + 0x14]
call fcn.004194f0
mov dword [esp + 0x438], 7
mov edx, dword [esi + 0x3b44]
push 0x64
push eax
mov eax, dword [edx + 0x180]
lea ecx, [esi + 0x3b44]
call eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.0040a260
fld dword [esi + 0x17c]
fmul qword [0x62c630]
mov ebx, dword [esi + 0x3b44]
fadd qword [0x62c640]
call fcn.005b8dc0
mov edx, dword [ebx + 0x18c]
push eax
lea ecx, [esi + 0x3b44]
call edx
mov eax, dword [esi + 0x3b44]
mov edx, dword [eax + 0x16c]
push 0xe6c885
lea ecx, [esi + 0x3b44]
call edx
mov eax, dword [esi + 0x3b44]
mov edx, dword [eax + 0x168]
push 0
push 0
lea ecx, [esi + 0x3b44]
call edx
mov eax, dword [esi + 0x3b44]
mov edx, dword [eax + 0x198]
push 1
lea ecx, [esi + 0x3b44]
call edx
mov edx, 0x625318
lea ecx, [esp + 0x14]
call fcn.004194f0
push 0x200
lea ecx, [esp + 0x28]
push ecx
mov ecx, eax
mov dword [esp + 0x440], 8
call fcn.004199f0
mov edx, eax
mov ecx, 0x675920
call fcn.0043fa40
or ebx, 0xffffffff
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.0040a260
mov edx, dword [esi + 0x3c68]
mov edx, dword [edx + 0x170]
lea eax, [esp + 0x24]
push eax
lea ecx, [esi + 0x3c68]
call edx
mov edx, 0x616134
lea ecx, [esp + 0x14]
call fcn.004194f0
mov dword [esp + 0x438], 9
mov edx, dword [esi + 0x3c68]
push 0x64
push eax
mov eax, dword [edx + 0x180]
lea ecx, [esi + 0x3c68]
call eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.0040a260
fld dword [esi + 0x17c]
fmul qword [0x62c630]
mov ebx, dword [esi + 0x3c68]
fadd qword [0x62c640]
call fcn.005b8dc0
mov edx, dword [ebx + 0x18c]
push eax
lea ecx, [esi + 0x3c68]
call edx
mov eax, dword [esi + 0x3c68]
mov edx, dword [eax + 0x16c]
push 0xe6c885
lea ecx, [esi + 0x3c68]
call edx
mov eax, dword [esi + 0x3c68]
mov edx, dword [eax + 0x168]
push 0
push 0
lea ecx, [esi + 0x3c68]
call edx
mov eax, dword [esi + 0x3c68]
mov edx, dword [eax + 0x198]
push 1
lea ecx, [esi + 0x3c68]
call edx
mov edx, 0x62533c
lea ecx, [esp + 0x14]
call fcn.004194f0
push 0x200
lea ecx, [esp + 0x28]
push ecx
mov ecx, eax
mov dword [esp + 0x440], 0xa
call fcn.004199f0
mov edx, eax
mov ecx, 0x675920
call fcn.0043fa40
or ebx, 0xffffffff
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.0040a260
mov edx, dword [esi + 0x3d8c]
mov edx, dword [edx + 0x170]
lea eax, [esp + 0x24]
push eax
lea ecx, [esi + 0x3d8c]
call edx
mov edx, 0x616134
lea ecx, [esp + 0x14]
call fcn.004194f0
mov dword [esp + 0x438], 0xb
mov edx, dword [esi + 0x3d8c]
push 0x64
push eax
mov eax, dword [edx + 0x180]
lea ecx, [esi + 0x3d8c]
call eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.0040a260
fld dword [esi + 0x17c]
fmul qword [0x62c630]
mov ebx, dword [esi + 0x3d8c]
fadd qword [0x62c640]
call fcn.005b8dc0
mov edx, dword [ebx + 0x18c]
push eax
lea ecx, [esi + 0x3d8c]
call edx
mov eax, dword [esi + 0x3d8c]
mov edx, dword [eax + 0x16c]
push 0xe6c885
lea ecx, [esi + 0x3d8c]
call edx
mov eax, dword [esi + 0x3d8c]
mov edx, dword [eax + 0x168]
push 0
push 0
lea ecx, [esi + 0x3d8c]
call edx
mov eax, dword [esi + 0x3d8c]
mov edx, dword [eax + 0x198]
push 1
lea ecx, [esi + 0x3d8c]
call edx
mov edx, 0x625368
lea ecx, [esp + 0x14]
call fcn.004194f0
push 0x200
lea ecx, [esp + 0x28]
push ecx
mov ecx, eax
mov dword [esp + 0x440], 0xc
call fcn.004199f0
mov edx, eax
mov ecx, 0x675920
call fcn.0043fa40
or ebx, 0xffffffff
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.0040a260
mov edx, dword [esi + 0x3eb0]
mov edx, dword [edx + 0x170]
lea eax, [esp + 0x24]
push eax
lea ecx, [esi + 0x3eb0]
call edx
mov edx, 0x616134
lea ecx, [esp + 0x14]
call fcn.004194f0
mov dword [esp + 0x438], 0xd
mov edx, dword [esi + 0x3eb0]
push 0x64
push eax
mov eax, dword [edx + 0x180]
lea ecx, [esi + 0x3eb0]
call eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.0040a260
fld dword [esi + 0x17c]
fmul qword [0x62c630]
mov ebx, dword [esi + 0x3eb0]
fadd qword [0x62c640]
call fcn.005b8dc0
mov edx, dword [ebx + 0x18c]
push eax
lea ecx, [esi + 0x3eb0]
call edx
mov eax, dword [esi + 0x3eb0]
mov edx, dword [eax + 0x16c]
push 0xe6c885
lea ecx, [esi + 0x3eb0]
call edx
mov eax, dword [esi + 0x3eb0]
mov edx, dword [eax + 0x168]
push 0
push 0
lea ecx, [esi + 0x3eb0]
call edx
mov eax, dword [esi + 0x3eb0]
mov edx, dword [eax + 0x198]
push 1
lea ecx, [esi + 0x3eb0]
call edx
mov edx, 0x625384
lea ecx, [esp + 0x14]
call fcn.004194f0
push 0x200
lea ecx, [esp + 0x28]
push ecx
mov ecx, eax
mov dword [esp + 0x440], 0xe
call fcn.004199f0
mov edx, eax
mov ecx, 0x675920
call fcn.0043fa40
or ebx, 0xffffffff
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.0040a260
mov edx, dword [esi + 0x346c]
mov edx, dword [edx + 0x170]
lea eax, [esp + 0x24]
push eax
lea ecx, [esi + 0x346c]
call edx
mov edx, 0x61615c
lea ecx, [esp + 0x14]
call fcn.004194f0
mov dword [esp + 0x438], 0xf
mov edx, dword [esi + 0x346c]
push 0x64
push eax
mov eax, dword [edx + 0x180]
lea ecx, [esi + 0x346c]
call eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.0040a260
fld dword [esi + 0x17c]
mov ebx, dword [esi + 0x346c]
fmul qword [0x62c660]
fadd qword [0x62c640]
call fcn.005b8dc0
mov edx, dword [ebx + 0x18c]
push eax
lea ecx, [esi + 0x346c]
call edx
mov eax, dword [esi + 0x346c]
mov edx, dword [eax + 0x16c]
push 0xffffff
lea ecx, [esi + 0x346c]
call edx
mov eax, dword [esi + 0x346c]
mov edx, dword [eax + 0x168]
push 0
push 0
lea ecx, [esi + 0x346c]
call edx
mov eax, dword [esi + 0x346c]
mov edx, dword [eax + 0x198]
push 1
lea ecx, [esi + 0x346c]
call edx
mov edx, 0x625384
lea ecx, [esp + 0x14]
call fcn.004194f0
push 0x200
lea ecx, [esp + 0x28]
push ecx
mov ecx, eax
mov dword [esp + 0x440], 0x10
call fcn.004199f0
mov edx, eax
mov ecx, 0x675920
call fcn.0043fa40
or ebx, 0xffffffff
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.0040a260
mov edx, dword [esi + 0x3590]
mov edx, dword [edx + 0x170]
lea eax, [esp + 0x24]
push eax
lea ecx, [esi + 0x3590]
call edx
mov edx, 0x61615c
lea ecx, [esp + 0x14]
call fcn.004194f0
mov dword [esp + 0x438], 0x11
mov edx, dword [esi + 0x3590]
push 0x64
push eax
mov eax, dword [edx + 0x180]
lea ecx, [esi + 0x3590]
call eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x438], ebx
call fcn.0040a260
fld dword [esi + 0x17c]
fmul qword [0x62c660]
mov ebx, dword [esi + 0x3590]
fadd qword [0x62c640]
call fcn.005b8dc0
mov edx, dword [ebx + 0x18c]
push eax
lea ecx, [esi + 0x3590]
call edx
mov eax, dword [esi + 0x3590]
mov edx, dword [eax + 0x16c]
push 0xffffff
lea ecx, [esi + 0x3590]
call edx
mov eax, dword [esi + 0x3590]
mov edx, dword [eax + 0x168]
push 0
push 0
lea ecx, [esi + 0x3590]
call edx
mov eax, dword [esi + 0x3590]
mov edx, dword [eax + 0x198]
push 1
lea ecx, [esi + 0x3590]
call edx
mov edx, 0x625194
lea ecx, [esp + 0x14]
call fcn.004194f0
push 0x200
lea ecx, [esp + 0x28]
push ecx
mov ecx, eax
mov dword [esp + 0x440], 0x12
call fcn.004199f0
mov edx, eax
mov ecx, 0x675920
call fcn.0043fa40
lea ecx, [esp + 0x14]
call fcn.0040a260
lea ecx, [esp + 0x14]
call fcn.00403a00
lea ecx, [esp + 0x10]
mov ebx, 0x6752c8
mov dword [esp + 0x438], 0x13
call fcn.00443ac0
mov edi, eax
mov edx, 0x623960
lea ecx, [esp + 0x20]
mov byte [esp + 0x438], 0x14
call fcn.004194f0
mov byte [esp + 0x438], 0x15
mov edx, dword [edi]
push edx
lea ecx, [esp + 0x28]
push ecx
mov ecx, eax
call fcn.004199f0
push eax
lea edx, [esp + 0x20]
push edx
call fcn.00403620
add esp, 0x10
lea ecx, [esp + 0x20]
call fcn.0040a260
lea ecx, [esp + 0x10]
mov byte [esp + 0x438], 0x13
call fcn.0040a260
mov ebx, dword [esi + 0x36b4]
lea ecx, [esp + 0x14]
call fcn.004199f0
push eax
mov eax, dword [ebx + 0x170]
lea ecx, [esi + 0x36b4]
call eax
mov edx, 0x616134
lea ecx, [esp + 0x10]
call fcn.004194f0
mov byte [esp + 0x438], 0x16
mov edx, dword [esi + 0x36b4]
push 0x64
push eax
mov eax, dword [edx + 0x180]
lea ecx, [esi + 0x36b4]
call eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x438], 0x13
call fcn.0040a260
fld dword [esi + 0x17c]
fmul qword [0x62c6a8]
mov ebx, dword [esi + 0x36b4]
fadd qword [0x62c640]
call fcn.005b8dc0
mov edx, dword [ebx + 0x18c]
push eax
lea ecx, [esi + 0x36b4]
call edx
mov eax, dword [esi + 0x36b4]
mov edx, dword [eax + 0x16c]
push 0xffffff
lea ecx, [esi + 0x36b4]
call edx
mov eax, dword [esi + 0x36b4]
mov edx, dword [eax + 0x168]
push 0
push 0
lea ecx, [esi + 0x36b4]
call edx
mov eax, dword [esi + 0x36b4]
mov edx, dword [eax + 0x198]
push 1
lea ecx, [esi + 0x36b4]
call edx
mov eax, dword [esi + 0x36b4]
mov edx, dword [eax + 0x174]
push 1
lea ecx, [esi + 0x36b4]
call edx
mov edx, 0x62539c
lea ecx, [esp + 0x10]
call fcn.004194f0
push 0x200
lea ecx, [esp + 0x28]
push ecx
mov ecx, eax
mov byte [esp + 0x440], 0x17
call fcn.004199f0
mov edx, eax
mov ecx, 0x675920
call fcn.0043fa40
lea ecx, [esp + 0x10]
mov byte [esp + 0x438], 0x13
call fcn.0040a260
mov edx, dword [esi + 0x3fd4]
mov edx, dword [edx + 0x170]
lea eax, [esp + 0x24]
push eax
lea ecx, [esi + 0x3fd4]
call edx
mov edx, 0x616134
lea ecx, [esp + 0x10]
call fcn.004194f0
mov byte [esp + 0x438], 0x18
mov edx, dword [esi + 0x3fd4]
push 0x64
push eax
mov eax, dword [edx + 0x180]
lea ecx, [esi + 0x3fd4]
call eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x438], 0x13
call fcn.0040a260
fld dword [esi + 0x17c]
fmul qword [0x62c688]
mov ebx, dword [esi + 0x3fd4]
fadd qword [0x62c640]
call fcn.005b8dc0
mov edx, dword [ebx + 0x18c]
push eax
lea ecx, [esi + 0x3fd4]
call edx
mov eax, dword [esi + 0x3fd4]
mov edx, dword [eax + 0x16c]
push 0xffff
lea ecx, [esi + 0x3fd4]
call edx
mov eax, dword [esi + 0x3fd4]
mov edx, dword [eax + 0x168]
push 0
push 0
lea ecx, [esi + 0x3fd4]
call edx
mov eax, dword [esi + 0x3fd4]
push 1
lea ecx, [esi + 0x3fd4]
mov edx, dword [eax + 0x198]
call edx
mov eax, dword [esi + 0x3ff4]
push 1
push 0
push eax
call fcn.00432ec0
mov ecx, dword [esi + 0x88c]
add esp, 0xc
push 1
push 0
push ecx
call fcn.00432ec0
add esp, 0xc
mov edx, 0x616c68
lea ecx, [esp + 0x10]
call fcn.004194f0
push 0x200
lea edx, [esp + 0x28]
push edx
mov ecx, eax
mov byte [esp + 0x440], 0x19
call fcn.004199f0
mov edx, eax
mov ecx, 0x675920
call fcn.0043fa40
add esi, 0x169c
mov edi, eax
call fcn.0040a650
lea ecx, [esp + 0x10]
mov byte [esp + 0x438], 0x13
call fcn.0040a260
mov ebx, dword [esp + 0x1c]
mov eax, dword [ebx + 0x16bc]
push 1
push 0
push eax
call fcn.00432ec0
add esp, 0xc
mov edx, 0x624124
lea ecx, [esp + 0x10]
call fcn.004194f0
push 0x200
lea ecx, [esp + 0x28]
push ecx
mov ecx, eax
mov byte [esp + 0x440], 0x1a
call fcn.004199f0
mov edx, eax
mov ecx, 0x675920
call fcn.0043fa40
lea esi, [ebx + 0x1844]
mov edi, eax
call fcn.0040a650
lea ecx, [esp + 0x10]
mov byte [esp + 0x438], 0x13
call fcn.0040a260
mov edx, dword [ebx + 0x1864]
push 1
push 0
push edx
call fcn.00432ec0
add esp, 0xc
mov edx, 0x622b28
lea ecx, [esp + 0x10]
call fcn.004194f0
push 0x200
lea ecx, [esp + 0x28]
push ecx
mov ecx, eax
mov byte [esp + 0x440], 0x1b
call fcn.004199f0
mov edx, eax
mov ecx, 0x675920
call fcn.0043fa40
lea esi, [ebx + 0x19ec]
mov edi, eax
call fcn.0040a650
lea ecx, [esp + 0x10]
mov byte [esp + 0x438], 0x13
call fcn.0040a260
mov edx, dword [ebx + 0x1a0c]
push 1
push 0
push edx
call fcn.00432ec0
add esp, 0xc
mov edx, 0x624134
lea ecx, [esp + 0x10]
call fcn.004194f0
push 0x200
lea ecx, [esp + 0x28]
push ecx
mov ecx, eax
mov byte [esp + 0x440], 0x1c
call fcn.004199f0
mov edx, eax
mov ecx, 0x675920
call fcn.0043fa40
lea esi, [ebx + 0x1b94]
mov edi, eax
call fcn.0040a650
lea ecx, [esp + 0x10]
mov byte [esp + 0x438], 0x13
call fcn.0040a260
mov edx, dword [ebx + 0x1bb4]
push 1
push 0
push edx
call fcn.00432ec0
add esp, 0xc
mov edx, 0x624148
lea ecx, [esp + 0x10]
call fcn.004194f0
push 0x200
lea ecx, [esp + 0x28]
push ecx
mov ecx, eax
mov byte [esp + 0x440], 0x1d
call fcn.004199f0
mov edx, eax
mov ecx, 0x675920
call fcn.0043fa40
lea esi, [ebx + 0x1d3c]
mov edi, eax
call fcn.0040a650
lea ecx, [esp + 0x10]
mov byte [esp + 0x438], 0x13
call fcn.0040a260
mov edx, dword [ebx + 0x1d5c]
push 1
push 0
push edx
call fcn.00432ec0
add esp, 0xc
mov edx, 0x624158
lea ecx, [esp + 0x10]
call fcn.004194f0
push 0x200
lea ecx, [esp + 0x28]
push ecx
mov ecx, eax
mov byte [esp + 0x440], 0x1e
call fcn.004199f0
mov edx, eax
mov ecx, 0x675920
call fcn.0043fa40
lea esi, [ebx + 0x1ee4]
mov edi, eax
call fcn.0040a650
lea ecx, [esp + 0x10]
mov byte [esp + 0x438], 0x13
call fcn.0040a260
mov edx, dword [ebx + 0x1f04]
push 1
push 0
push edx
call fcn.00432ec0
add esp, 0xc
mov edx, 0x624170
lea ecx, [esp + 0x10]
call fcn.004194f0
push 0x200
lea ecx, [esp + 0x28]
push ecx
mov ecx, eax
mov byte [esp + 0x440], 0x1f
call fcn.004199f0
mov edx, eax
mov ecx, 0x675920
call fcn.0043fa40
lea esi, [ebx + 0x208c]
mov edi, eax
call fcn.0040a650
lea ecx, [esp + 0x10]
mov byte [esp + 0x438], 0x13
call fcn.0040a260
mov edx, dword [ebx + 0x20ac]
push 1
push 0
push edx
call fcn.00432ec0
add esp, 0xc
mov edx, 0x62418c
lea ecx, [esp + 0x10]
call fcn.004194f0
push 0x200
lea ecx, [esp + 0x28]
push ecx
mov ecx, eax
mov byte [esp + 0x440], 0x20
call fcn.004199f0
mov edx, eax
mov ecx, 0x675920
call fcn.0043fa40
lea esi, [ebx + 0x2234]
mov edi, eax
call fcn.0040a650
lea ecx, [esp + 0x10]
mov byte [esp + 0x438], 0x13
call fcn.0040a260
mov edx, dword [ebx + 0x2254]
push 1
push 0
push edx
call fcn.00432ec0
add esp, 0xc
mov edx, 0x6241a4
lea ecx, [esp + 0x10]
call fcn.004194f0
push 0x200
lea ecx, [esp + 0x28]
push ecx
mov ecx, eax
mov byte [esp + 0x440], 0x21
call fcn.004199f0
mov edx, eax
mov ecx, 0x675920
call fcn.0043fa40
lea esi, [ebx + 0x2f74]
mov edi, eax
call fcn.0040a650
lea ecx, [esp + 0x10]
mov byte [esp + 0x438], 0x13
call fcn.0040a260
mov edx, dword [ebx + 0x2f94]
push 1
push 0
push edx
call fcn.00432ec0
add esp, 0xc
mov edx, 0x624264
lea ecx, [esp + 0x10]
call fcn.004194f0
push 0x200
lea ecx, [esp + 0x28]
push ecx
mov ecx, eax
mov byte [esp + 0x440], 0x22
call fcn.004199f0
mov edx, eax
mov ecx, 0x675920
call fcn.0043fa40
lea esi, [ebx + 0x2584]
mov edi, eax
call fcn.0040a650
lea ecx, [esp + 0x10]
mov byte [esp + 0x438], 0x13
call fcn.0040a260
mov edx, dword [ebx + 0x25a4]
push 1
push 0
push edx
call fcn.00432ec0
add esp, 0xc
mov edx, 0x624280
lea ecx, [esp + 0x10]
call fcn.004194f0
push 0x200
lea ecx, [esp + 0x28]
push ecx
mov ecx, eax
mov byte [esp + 0x440], 0x23
call fcn.004199f0
mov edx, eax
mov ecx, 0x675920
call fcn.0043fa40
lea esi, [ebx + 0x272c]
mov edi, eax
call fcn.0040a650
lea ecx, [esp + 0x10]
mov byte [esp + 0x438], 0x13
call fcn.0040a260
mov edx, dword [ebx + 0x274c]
push 1
push 0
push edx
call fcn.00432ec0
add esp, 0xc
mov edx, 0x6241d0
lea ecx, [esp + 0x10]
call fcn.004194f0
push 0x200
lea ecx, [esp + 0x28]
push ecx
mov ecx, eax
mov byte [esp + 0x440], 0x24
call fcn.004199f0
mov edx, eax
mov ecx, 0x675920
call fcn.0043fa40
lea esi, [ebx + 0x311c]
mov edi, eax
call fcn.0040a650
lea ecx, [esp + 0x10]
mov byte [esp + 0x438], 0x13
call fcn.0040a260
mov edx, dword [ebx + 0x313c]
push 1
push 0
push edx
call fcn.00432ec0
add esp, 0xc
mov edx, 0x624200
lea ecx, [esp + 0x10]
call fcn.004194f0
lea ecx, [esp + 0x24]
push 0x200
push ecx
mov byte [esp + 0x440], 0x25
mov ecx, eax
call fcn.004199f0
mov edx, eax
mov ecx, 0x675920
call fcn.0043fa40
lea esi, [ebx + 0x32c4]
mov edi, eax
call fcn.0040a650
lea ecx, [esp + 0x10]
mov byte [esp + 0x438], 0x13
call fcn.0040a260
mov edx, dword [ebx + 0x32e4]
push 1
push 0
push edx
call fcn.00432ec0
add esp, 0xc
mov edx, 0x624248
lea ecx, [esp + 0x10]
call fcn.004194f0
push 0x200
lea ecx, [esp + 0x28]
push ecx
mov ecx, eax
mov byte [esp + 0x440], 0x26
lea esi, [ebx + 0x28d4]
call fcn.004199f0
mov edx, eax
mov ecx, 0x675920
call fcn.0043fa40
mov edi, eax
call fcn.0040a650
lea ecx, [esp + 0x10]
mov byte [esp + 0x438], 0x13
call fcn.0040a260
mov edx, 0x6164bc
lea ecx, [esp + 0x10]
call fcn.004194f0
mov edi, eax
mov eax, 0x675920
mov byte [esp + 0x438], 0x27
call fcn.0043fa30
mov ecx, 0x675920
call fcn.0043f990
push eax
mov ecx, edi
call fcn.004199f0
push eax
call fcn.00433ab0
add esp, 8
test eax, eax
lea ecx, [esp + 0x10]
sete byte [esp + 0x1b]
mov byte [esp + 0x438], 0x13
call fcn.0040a260
fld dword [ebx + 0x17c]
cmp byte [esp + 0x1b], 0
je 0x465d87
fmul qword [0x62c630]
jmp 0x465d8d
fmul qword [0x62c6a8]
fadd qword [0x62c640]
call fcn.005b8dc0
mov edi, eax
mov ecx, esi
call fcn.0040a810
mov edx, dword [ebx + 0x28f4]
push 1
push 0
push edx
call fcn.00432ec0
add esp, 0xc
mov edx, 0x6242e4
lea ecx, [esp + 0x10]
call fcn.004194f0
push 0x200
lea ecx, [esp + 0x28]
push ecx
mov ecx, eax
mov byte [esp + 0x440], 0x28
call fcn.004199f0
mov edx, eax
mov ecx, 0x675920
call fcn.0043fa40
lea esi, [ebx + 0x2a7c]
mov edi, eax
call fcn.0040a650
lea ecx, [esp + 0x10]
mov byte [esp + 0x438], 0x13
call fcn.0040a260
mov edx, dword [ebx + 0x2a9c]
push 1
push 0
push edx
call fcn.00432ec0
add esp, 0xc
mov edx, 0x6242c8
lea ecx, [esp + 0x10]
call fcn.004194f0
push 0x200
lea ecx, [esp + 0x28]
push ecx
mov ecx, eax
mov byte [esp + 0x440], 0x29
call fcn.004199f0
mov edx, eax
mov ecx, 0x675920
call fcn.0043fa40
lea esi, [ebx + 0x2dcc]
mov edi, eax
call fcn.0040a650
lea ecx, [esp + 0x10]
mov byte [esp + 0x438], 0x13
call fcn.0040a260
mov edx, dword [ebx + 0x2dec]
push 1
push 0
push edx
call fcn.00432ec0
add esp, 0xc
mov edx, 0x6242a8
lea ecx, [esp + 0x10]
call fcn.004194f0
push 0x200
lea ecx, [esp + 0x28]
push ecx
mov ecx, eax
mov byte [esp + 0x440], 0x2a
lea esi, [ebx + 0x2c24]
call fcn.004199f0
mov edx, eax
mov ecx, 0x675920
call fcn.0043fa40
mov edi, eax
call fcn.0040a650
lea ecx, [esp + 0x10]
mov byte [esp + 0x438], 0x13
call fcn.0040a260
mov edx, 0x6164bc
lea ecx, [esp + 0x10]
call fcn.004194f0
mov edi, eax
mov eax, 0x675920
mov byte [esp + 0x438], 0x2b
call fcn.0043fa30
mov ecx, 0x675920
call fcn.0043f990
push eax
mov ecx, edi
call fcn.004199f0
push eax
call fcn.00433ab0
add esp, 8
test eax, eax
lea ecx, [esp + 0x10]
sete byte [esp + 0x1b]
mov byte [esp + 0x438], 0x13
call fcn.0040a260
cmp byte [esp + 0x1b], 0
mov eax, esi
je 0x465f43
mov ecx, 2
call fcn.0040a6e0
fld dword [ebx + 0x17c]
fmul qword [0x62c6b0]
jmp 0x465f59
mov ecx, 5
call fcn.0040a6e0
fld dword [ebx + 0x17c]
fmul qword [0x62c6a8]
fadd qword [0x62c640]
call fcn.005b8dc0
mov edi, eax
mov ecx, esi
call fcn.0040a810
mov edx, dword [ebx + 0x2c44]
push 1
push 0
push edx
call fcn.00432ec0
add esp, 0xc
mov edx, 0x6240d0
lea ecx, [esp + 0x10]
call fcn.004194f0
push 0x200
lea ecx, [esp + 0x28]
push ecx
mov ecx, eax
mov byte [esp + 0x440], 0x2c
call fcn.004199f0
mov edx, eax
mov ecx, 0x675920
call fcn.0043fa40
lea esi, [ebx + 0xffc]
mov edi, eax
call fcn.0040a650
lea ecx, [esp + 0x10]
mov byte [esp + 0x438], 0x13
call fcn.0040a260
mov edx, dword [ebx + 0x101c]
push 1
push 0
push edx
call fcn.00432ec0
add esp, 0xc
mov edx, 0x6240ec
lea ecx, [esp + 0x10]
call fcn.004194f0
push 0x200
lea ecx, [esp + 0x28]
push ecx
mov ecx, eax
mov byte [esp + 0x440], 0x2d
call fcn.004199f0
mov edx, eax
mov ecx, 0x675920
call fcn.0043fa40
lea esi, [ebx + 0x11a4]
mov edi, eax
call fcn.0040a650
lea ecx, [esp + 0x10]
mov byte [esp + 0x438], 0x13
call fcn.0040a260
mov edx, dword [ebx + 0x11c4]
push 1
push 0
push edx
call fcn.00432ec0
add esp, 0xc
mov edx, 0x624100
lea ecx, [esp + 0x10]
call fcn.004194f0
push 0x200
lea ecx, [esp + 0x28]
push ecx
mov ecx, eax
mov byte [esp + 0x440], 0x2e
call fcn.004199f0
mov edx, eax
mov ecx, 0x675920
call fcn.0043fa40
lea esi, [ebx + 0x134c]
mov edi, eax
call fcn.0040a650
lea ecx, [esp + 0x10]
mov byte [esp + 0x438], 0x13
call fcn.0040a260
push 1
mov edx, dword [ebx + 0x136c]
push 0
push edx
call fcn.00432ec0
add esp, 0xc
mov edx, 0x6240ac
lea ecx, [esp + 0x10]
call fcn.004194f0
push 0x200
lea ecx, [esp + 0x28]
push ecx
mov ecx, eax
mov byte [esp + 0x440], 0x2f
call fcn.004199f0
mov edx, eax
mov ecx, 0x675920
call fcn.0043fa40
lea esi, [ebx + 0xe54]
mov edi, eax
call fcn.0040a650
lea ecx, [esp + 0x10]
mov byte [esp + 0x438], 0x13
call fcn.0040a260
mov edx, dword [ebx + 0xe74]
push 1
push 0
push edx
call fcn.00432ec0
add esp, 0xc
cmp dword [ebx + 0x1c10c], 0
lea ecx, [esp + 0x10]
jne 0x46613b
mov edx, 0x624230
call fcn.004194f0
push 0x200
lea ecx, [esp + 0x28]
mov byte [esp + 0x43c], 0x30
push ecx
jmp 0x466157
mov edx, 0x6253c8
call fcn.004194f0
push 0x200
lea edx, [esp + 0x28]
mov byte [esp + 0x43c], 0x31
push edx
mov ecx, eax
call fcn.004199f0
mov edx, eax
mov ecx, 0x675920
call fcn.0043fa40
mov edi, eax
lea esi, [ebx + 0x23dc]
call fcn.0040a650
lea ecx, [esp + 0x10]
mov byte [esp + 0x438], 0x13
call fcn.0040a260
mov eax, dword [ebx + 0x23fc]
push 1
push 0
push eax
call fcn.00432ec0
add esp, 0xc
lea edi, [ebx + 0x4124]
call fcn.004aeac0
add ebx, 0x56b0
call fcn.00492610
mov ebx, dword [esp + 0x1c]
lea edi, [ebx + 0x8060]
call fcn.004896f0
mov esi, 0x6752c8
call fcn.00443970
test al, al
je 0x4661ea
add ebx, 0x9498
call fcn.0048f130
mov esi, dword [esp + 0x1c]
lea ebx, [esi + 0x88e8]
call fcn.0048d330
jmp 0x4661f9
add ebx, 0x88e8
call fcn.0048d330
mov esi, dword [esp + 0x1c]
lea edi, [esi + 0xa848]
call fcn.0048be40
lea edi, [esi + 0x12940]
call fcn.00481fd0
add esi, 0x13dec
call fcn.00483a50
mov esi, dword [esp + 0x1c]
lea edi, [esi + 0x130a8]
call fcn.00482bc0
lea ebx, [esi + 0xb050]
call fcn.004a01b0
lea edi, [esi + 0x10934]
call fcn.004a6070
lea edi, [esi + 0x11138]
call fcn.00426070
lea edi, [esi + 0x11938]
call fcn.004a6070
lea edi, [esi + 0x1213c]
call fcn.004a6070
lea edi, [esi + 0x13684]
call fcn.00499900
lea edi, [esi + 0xd9c8]
mov dword [esp + 0x10], edi
call fcn.00428920
add esi, 0xeecc
mov dword [esp + 0x20], esi
call fcn.0042b910
mov esi, dword [esp + 0x1c]
lea ebx, [esi + 0x1451c]
call fcn.00484fd0
lea ecx, [esi + 0x14ecc]
call fcn.004863f0
lea ebx, [esi + 0x1582c]
call fcn.004058f0
lea ecx, [esi + 0x17d64]
call fcn.004360d0
lea edi, [esi + 0x187b4]
call fcn.00402d20
lea ebx, [esi + 0x16628]
call fcn.004960b0
lea ebx, [esi + 0x19a24]
call fcn.004a1580
lea ebx, [esi + 0x1a4c0]
call fcn.004a2590
lea ebx, [esi + 0x1af5c]
call fcn.004a34a0
mov ecx, dword [esi + 0x1c12c]
mov edx, dword [esi + 0x1c128]
mov eax, dword [esi + 0x1c124]
mov ebx, dword [esp + 0x10]
push ecx
mov ecx, dword [esi + 0x1c120]
push edx
mov edx, dword [esi + 0x1c118]
push eax
mov eax, dword [esi + 0x1c114]
push ecx
push edx
push eax
call fcn.00427a00
mov ecx, dword [esi + 0x1c14c]
mov edx, dword [esi + 0x1c148]
mov eax, dword [esi + 0x1c13c]
push ecx
mov ecx, dword [esi + 0x1c144]
push edx
mov edx, dword [esi + 0x1c140]
push eax
mov eax, dword [esi + 0x1c138]
push ecx
mov ecx, dword [esi + 0x1c134]
push edx
mov edx, dword [esi + 0x1c130]
push eax
mov eax, dword [esi + 0x1c118]
push ecx
mov ecx, dword [esi + 0x1c12c]
push edx
mov edx, dword [esi + 0x1c128]
push eax
push ecx
mov eax, dword [esi + 0x1c114]
mov ecx, dword [esp + 0x48]
push edx
push eax
call fcn.0042a890
lea ecx, [esp + 0x14]
call fcn.0040a260
mov ecx, dword [esp + 0x430]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x418]
xor ecx, esp
call fcn.005b3023
mov esp, ebp
pop ebp
ret