Function at 0x6afda0
Capabilities:
Check os version
Get number of processors

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x7323f0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x84
push ebx
push ebp
push esi
push edi
mov ebp, ecx
mov eax, dword [0x7a39fc]
mov esi, dword [eax + 4]
mov ecx, esi
call fcn.005ed8b0
mov eax, dword [eax]
mov dword [ebp + 0x59e0], eax
mov ecx, dword [0x7a39fc]
mov ecx, dword [ecx + 8]
call fcn.004aec90
mov cl, byte [eax + 0x104]
or edi, 0xffffffff
test cl, 1
je 0x6afe33
mov al, byte [ebp + 0x59f0]
cmp al, 0xff
je 0x6afe33
mov edx, dword [0x7a39fc]
mov ecx, dword [edx + 8]
push 1
movsx eax, al
push 0
push eax
call fcn.004aee70
mov ecx, eax
call fcn.00564700
push eax
mov ecx, esi
call fcn.005eda50
push eax
mov ecx, esi
call fcn.005ed5b0
jmp 0x6afe43
push 0
mov ecx, esi
call fcn.005ed8b0
mov ecx, eax
call fcn.006346c0
mov ecx, eax
mov ebx, dword [ecx + 0x2f8]
mov dword [esp + 0x18], eax
mov dword [esp + 0x2c], ebx
call fcn.0060fb20
mov esi, dword [eax + 0xa74]
mov dword [esp + 0x1c], eax
mov al, byte [ebx + 0x32]
dec al
mov byte [esp + 0x14], al
mov ecx, dword [esp + 0x14]
push ecx
mov ecx, ebx
call fcn.00647730
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx]
mov byte [esp + 0x13], al
lea eax, [esp + 0x38]
push eax
call dword [edx + 0x70]
push eax
lea ecx, [ebp + 0x14c]
mov dword [esp + 0xa0], 0
call fcn.00415e00
lea ecx, [esp + 0x38]
mov dword [esp + 0x9c], edi
call fcn.005e5c20
mov al, byte [ebx + 0x32]
cmp al, 1
mov ecx, ebx
jne 0x6affaf
push 0
call fcn.00647730
mov edx, dword [0x7a3a28]
movzx ecx, al
mov eax, dword [edx + 0xac]
imul ecx, ecx, 0x1a0
mov eax, dword [ecx + eax]
mov ecx, dword [0x7a39fc]
mov ecx, dword [ecx + 4]
push eax
lea edx, [esp + 0x3c]
push edx
call fcn.005edeb0
push eax
lea ecx, [ebp + 0x3cc]
mov dword [esp + 0xa0], 1
call fcn.00415e00
lea ecx, [esp + 0x38]
mov dword [esp + 0x9c], edi
call fcn.005e5c20
push 0x73d71c
lea ecx, [esp + 0x28]
call fcn.005e5a90
lea eax, [esp + 0x24]
push eax
lea ecx, [ebp + 0x50c]
mov dword [esp + 0xa0], 2
call fcn.00415e00
lea ecx, [esp + 0x24]
mov dword [esp + 0x9c], edi
call fcn.005e5c20
push 0
mov ecx, ebx
call fcn.00647750
movzx ecx, al
push ecx
lea ecx, [esp + 0x28]
call fcn.005e5bc0
lea edx, [esp + 0x24]
push edx
lea ecx, [ebp + 0x78c]
mov dword [esp + 0xa0], 3
call fcn.00415e00
lea ecx, [esp + 0x24]
mov dword [esp + 0x9c], edi
call fcn.005e5c20
push 0x73d71c
lea ecx, [esp + 0x28]
call fcn.005e5a90
mov dword [esp + 0x9c], 4
jmp 0x6b00c7
push 1
call fcn.00647730
mov edx, dword [0x7a3a28]
movzx ecx, al
mov eax, dword [edx + 0xac]
imul ecx, ecx, 0x1a0
mov eax, dword [ecx + eax]
mov ecx, dword [0x7a39fc]
mov ecx, dword [ecx + 4]
push eax
lea edx, [esp + 0x3c]
push edx
call fcn.005edeb0
push eax
lea ecx, [ebp + 0x3cc]
mov dword [esp + 0xa0], 5
call fcn.00415e00
lea ecx, [esp + 0x38]
mov dword [esp + 0x9c], edi
call fcn.005e5c20
push 0
mov ecx, ebx
call fcn.00647730
mov ecx, dword [0x7a3a28]
mov edx, dword [ecx + 0xac]
mov ecx, dword [0x7a39fc]
mov ecx, dword [ecx + 4]
movzx eax, al
imul eax, eax, 0x1a0
mov eax, dword [eax + edx]
push eax
lea edx, [esp + 0x3c]
push edx
call fcn.005edeb0
push eax
lea ecx, [ebp + 0x50c]
mov dword [esp + 0xa0], 6
call fcn.00415e00
lea ecx, [esp + 0x38]
mov dword [esp + 0x9c], edi
call fcn.005e5c20
push 1
mov ecx, ebx
call fcn.00647750
movzx eax, al
push eax
lea ecx, [esp + 0x28]
call fcn.005e5bc0
lea ecx, [esp + 0x24]
push ecx
lea ecx, [ebp + 0x78c]
mov dword [esp + 0xa0], 7
call fcn.00415e00
lea ecx, [esp + 0x24]
mov dword [esp + 0x9c], edi
call fcn.005e5c20
push 0
mov ecx, ebx
call fcn.00647750
movzx edx, al
push edx
lea ecx, [esp + 0x28]
call fcn.005e5bc0
mov dword [esp + 0x9c], 8
lea eax, [esp + 0x24]
lea ecx, [ebp + 0x8cc]
push eax
call fcn.00415e00
lea ecx, [esp + 0x24]
mov dword [esp + 0x9c], edi
call fcn.005e5c20
lea ecx, [esp + 0x30]
call fcn.005b3190
mov di, word [ebx + 0x4c]
mov ecx, ebx
mov dword [esp + 0x9c], 9
call fcn.00647a80
movsx ecx, ax
push ecx
movsx edx, di
push edx
lea eax, [esp + 0x38]
push 0x75616c
push eax
call fcn.005e5680
add esp, 0x10
lea ecx, [esp + 0x30]
push ecx
lea ecx, [ebp + 0x190c]
call fcn.00415e00
movsx eax, word [ebx + 0x4a]
test eax, eax
jle 0x6b013f
push 0x7a23e4
jmp 0x6b014d
jge 0x6b0148
push 0x7a23d8
jmp 0x6b014d
push 0x7a23b4
lea ecx, [ebp + 0x190c]
call fcn.00414e10
push 0
mov ecx, ebx
call fcn.00647720
movsx edx, ax
push edx
lea ecx, [esp + 0x28]
call fcn.005e5bc0
lea eax, [esp + 0x24]
push eax
lea ecx, [ebp + 0x168c]
mov byte [esp + 0xa0], 0xa
call fcn.00415e00
lea ecx, [esp + 0x24]
mov byte [esp + 0x9c], 9
call fcn.005e5c20
mov ecx, dword [esp + 0x18]
call fcn.0060fb20
mov ecx, eax
call fcn.004f7780
test eax, eax
jle 0x6b01b2
push 0x7a23e4
jmp 0x6b01c0
jge 0x6b01bb
push 0x7a23d8
jmp 0x6b01c0
push 0x7a23b4
lea ecx, [ebp + 0x168c]
call fcn.00414e10
movzx ecx, byte [esp + 0x13]
push ecx
call fcn.005be4a0
add esp, 4
test eax, eax
mov ecx, 0xfffffffd
je 0x6b0257
mov ax, word [ebx + 0x122]
mov cx, word [ebx + 0x11e]
add ax, word [ebx + 0x124]
movsx edx, cx
push edx
movsx eax, ax
push eax
lea ecx, [esp + 0x38]
push 0x75616c
push ecx
call fcn.005e5680
add esp, 0x10
lea edx, [esp + 0x30]
push edx
lea ecx, [ebp + 0x17cc]
call fcn.00415e00
mov eax, dword [ebp + 0x1ae8]
mov ecx, 2
or eax, ecx
mov dword [ebp + 0x1ae8], eax
mov edi, dword [ebp + 0x1728]
lea eax, [ebp + 0x16e4]
or edi, ecx
mov dword [eax + 0x44], edi
movsx ecx, word [ebx + 0x124]
push ecx
push eax
mov ecx, ebp
call fcn.006aecd0
jmp 0x6b0263
and dword [ebp + 0x1ae8], ecx
and dword [ebp + 0x1728], ecx
movzx edx, byte [esi + 0xe9]
mov ecx, esi
mov dword [esp + 0x14], edx
call fcn.005a6190
movzx edi, al
push edi
lea ecx, [esp + 0x28]
call fcn.005e5bc0
lea eax, [esp + 0x24]
push eax
lea ecx, [ebp + 0x1e0c]
mov byte [esp + 0xa0], 0xb
call fcn.00415e00
lea ecx, [esp + 0x24]
mov byte [esp + 0x9c], 9
call fcn.005e5c20
mov al, byte [esi + 0xea]
movsx edx, al
lea ecx, [ebp + 0x1fa4]
push edx
push ecx
mov ecx, ebp
call fcn.006ae990
sub edi, dword [esp + 0x14]
test edi, edi
jle 0x6b02d2
push 0x7a23e4
jmp 0x6b02e0
jge 0x6b02db
push 0x7a23d8
jmp 0x6b02e0
push 0x7a23b4
lea ecx, [ebp + 0x1e0c]
call fcn.00414e10
test edi, edi
jle 0x6b02f6
push 0x7a23e4
jmp 0x6b0304
jge 0x6b02ff
push 0x7a23d8
jmp 0x6b0304
push 0x7a23b4
lea ecx, [ebp + 0x208c]
call fcn.00414e10
movzx eax, byte [esi + 0xf1]
mov ecx, esi
mov dword [esp + 0x14], eax
call fcn.005a63d0
movzx edi, al
push edi
lea ecx, [esp + 0x28]
call fcn.005e5bc0
lea ecx, [esp + 0x24]
push ecx
lea ecx, [ebp + 0x21cc]
mov byte [esp + 0xa0], 0xc
call fcn.00415e00
lea ecx, [esp + 0x24]
mov byte [esp + 0x9c], 9
call fcn.005e5c20
mov al, byte [esi + 0xf2]
movsx edx, al
lea ecx, [ebp + 0x2364]
push edx
push ecx
mov ecx, ebp
call fcn.006ae990
sub edi, dword [esp + 0x14]
test edi, edi
jle 0x6b037e
push 0x7a23e4
jmp 0x6b038c
jge 0x6b0387
push 0x7a23d8
jmp 0x6b038c
push 0x7a23b4
lea ecx, [ebp + 0x21cc]
call fcn.00414e10
test edi, edi
jle 0x6b03a2
push 0x7a23e4
jmp 0x6b03b0
jge 0x6b03ab
push 0x7a23d8
jmp 0x6b03b0
push 0x7a23b4
lea ecx, [ebp + 0x244c]
call fcn.00414e10
movzx eax, byte [esi + 0xf3]
mov ecx, esi
mov dword [esp + 0x14], eax
call fcn.005a6490
movzx edi, al
push edi
lea ecx, [esp + 0x28]
call fcn.005e5bc0
lea ecx, [esp + 0x24]
push ecx
lea ecx, [ebp + 0x258c]
mov byte [esp + 0xa0], 0xd
call fcn.00415e00
lea ecx, [esp + 0x24]
mov byte [esp + 0x9c], 9
call fcn.005e5c20
mov al, byte [esi + 0xf4]
movsx edx, al
lea ecx, [ebp + 0x2724]
push edx
push ecx
mov ecx, ebp
call fcn.006ae990
sub edi, dword [esp + 0x14]
test edi, edi
jle 0x6b042a
push 0x7a23e4
jmp 0x6b0438
jge 0x6b0433
push 0x7a23d8
jmp 0x6b0438
push 0x7a23b4
lea ecx, [ebp + 0x258c]
call fcn.00414e10
test edi, edi
jle 0x6b044e
push 0x7a23e4
jmp 0x6b045c
jge 0x6b0457
push 0x7a23d8
jmp 0x6b045c
push 0x7a23b4
lea ecx, [ebp + 0x280c]
call fcn.00414e10
movzx eax, byte [esi + 0xef]
mov ecx, esi
mov dword [esp + 0x14], eax
call fcn.005a6310
movzx edi, al
push edi
lea ecx, [esp + 0x28]
call fcn.005e5bc0
lea ecx, [esp + 0x24]
push ecx
lea ecx, [ebp + 0x294c]
mov byte [esp + 0xa0], 0xe
call fcn.00415e00
lea ecx, [esp + 0x24]
mov byte [esp + 0x9c], 9
call fcn.005e5c20
mov al, byte [esi + 0xf0]
movsx edx, al
lea ecx, [ebp + 0x2ae4]
push edx
push ecx
mov ecx, ebp
call fcn.006ae990
sub edi, dword [esp + 0x14]
test edi, edi
jle 0x6b04d6
push 0x7a23e4
jmp 0x6b04e4
jge 0x6b04df
push 0x7a23d8
jmp 0x6b04e4
push 0x7a23b4
lea ecx, [ebp + 0x294c]
call fcn.00414e10
test edi, edi
jle 0x6b04fa
push 0x7a23e4
jmp 0x6b0508
jge 0x6b0503
push 0x7a23d8
jmp 0x6b0508
push 0x7a23b4
lea ecx, [ebp + 0x2bcc]
call fcn.00414e10
movzx eax, byte [esi + 0xed]
mov ecx, esi
mov dword [esp + 0x14], eax
call fcn.005a6250
movzx edi, al
push edi
lea ecx, [esp + 0x28]
call fcn.005e5bc0
lea ecx, [esp + 0x24]
push ecx
lea ecx, [ebp + 0x2d0c]
mov byte [esp + 0xa0], 0xf
call fcn.00415e00
lea ecx, [esp + 0x24]
mov byte [esp + 0x9c], 9
call fcn.005e5c20
mov al, byte [esi + 0xee]
movsx edx, al
lea ecx, [ebp + 0x2ea4]
push edx
push ecx
mov ecx, ebp
call fcn.006ae990
sub edi, dword [esp + 0x14]
test edi, edi
jle 0x6b0582
push 0x7a23e4
jmp 0x6b0590
jge 0x6b058b
push 0x7a23d8
jmp 0x6b0590
push 0x7a23b4
lea ecx, [ebp + 0x2d0c]
call fcn.00414e10
test edi, edi
jle 0x6b05a6
push 0x7a23e4
jmp 0x6b05b4
jge 0x6b05af
push 0x7a23d8
jmp 0x6b05b4
push 0x7a23b4
lea ecx, [ebp + 0x2f8c]
call fcn.00414e10
movzx eax, byte [esi + 0xeb]
mov ecx, esi
mov dword [esp + 0x14], eax
call fcn.005a6550
movzx edi, al
push edi
lea ecx, [esp + 0x3c]
mov dword [esp + 0x28], edi
call fcn.005e5bc0
lea ecx, [esp + 0x38]
push ecx
lea ecx, [ebp + 0x30cc]
mov byte [esp + 0xa0], 0x10
call fcn.00415e00
lea ecx, [esp + 0x38]
mov byte [esp + 0x9c], 9
call fcn.005e5c20
push 1
mov ecx, esi
call fcn.005a5330
movsx edx, al
push edx
lea eax, [ebp + 0x3264]
push eax
mov ecx, ebp
call fcn.006ae990
sub edi, dword [esp + 0x14]
test edi, edi
jle 0x6b0635
push 0x7a23e4
jmp 0x6b0643
jge 0x6b063e
push 0x7a23d8
jmp 0x6b0643
push 0x7a23b4
lea ecx, [ebp + 0x30cc]
call fcn.00414e10
mov eax, dword [esp + 0x14]
cmp dword [esp + 0x24], eax
jne 0x6b0672
push 1
mov ecx, esi
call fcn.005a5330
push 0
mov ecx, esi
movsx edi, al
call fcn.005a5330
movsx ecx, al
sub edi, ecx
lea eax, [ebp + 0x3264]
push edi
mov ecx, ebp
push eax
call fcn.006aecd0
mov edi, dword [esp + 0x18]
push 0
mov ecx, esi
mov dword [esp + 0x24], 0
call fcn.005ab810
movsx edx, al
push edx
lea ecx, [esp + 0x3c]
call fcn.005e5bc0
lea eax, [esp + 0x38]
push eax
lea ecx, [ebp + 0xdcc]
mov byte [esp + 0xa0], 0x11
call fcn.00415e00
lea ecx, [esp + 0x38]
mov byte [esp + 0x9c], 9
call fcn.005e5c20
push 0
push 0xff
push 0xff
push 0
push 1
push 0
push 0
lea ecx, [esp + 0x3c]
push ecx
push 0
push 3
mov ecx, edi
call fcn.0060fb20
mov ecx, eax
call fcn.004f3fe0
test eax, eax
jle 0x6b0702
push 0x7a23e4
jmp 0x6b0710
jge 0x6b070b
push 0x7a23d8
jmp 0x6b0710
push 0x7a23b4
lea ecx, [ebp + 0xdcc]
call fcn.00414e10
push 0
mov ecx, esi
call fcn.005ab8f0
movsx edx, al
push edx
lea ecx, [esp + 0x3c]
call fcn.005e5bc0
lea eax, [esp + 0x38]
push eax
lea ecx, [ebp + 0xf0c]
mov byte [esp + 0xa0], 0x12
call fcn.00415e00
lea ecx, [esp + 0x38]
mov byte [esp + 0x9c], 9
call fcn.005e5c20
push 0
push 0xff
push 0xff
push 0
push 2
push 0
push 0
lea ecx, [esp + 0x3c]
push ecx
push 0
push 3
mov ecx, edi
call fcn.0060fb20
mov ecx, eax
call fcn.004f3fe0
test eax, eax
jle 0x6b0790
push 0x7a23e4
jmp 0x6b079e
jge 0x6b0799
push 0x7a23d8
jmp 0x6b079e
push 0x7a23b4
lea ecx, [ebp + 0xf0c]
call fcn.00414e10
push 0
mov ecx, esi
call fcn.005ab880
movsx edx, al
push edx
lea ecx, [esp + 0x3c]
call fcn.005e5bc0
lea eax, [esp + 0x38]
push eax
lea ecx, [ebp + 0x104c]
mov byte [esp + 0xa0], 0x13
call fcn.00415e00
lea ecx, [esp + 0x38]
mov byte [esp + 0x9c], 9
call fcn.005e5c20
push 0
push 0xff
push 0xff
push 0
push 3
push 0
push 0
lea ecx, [esp + 0x3c]
push ecx
push 0
push 3
mov ecx, edi
call fcn.0060fb20
mov ecx, eax
call fcn.004f3fe0
test eax, eax
jle 0x6b081e
push 0x7a23e4
jmp 0x6b082c
jge 0x6b0827
push 0x7a23d8
jmp 0x6b082c
push 0x7a23b4
lea ecx, [ebp + 0x104c]
call fcn.00414e10
mov eax, dword [esi + 0x68]
push eax
lea ecx, [esp + 0x3c]
call fcn.005e5bc0
lea edx, [esp + 0x38]
push edx
lea ecx, [ebp + 0x12cc]
mov byte [esp + 0xa0], 0x14
call fcn.00415e00
lea ecx, [esp + 0x38]
mov byte [esp + 0x9c], 9
call fcn.005e5c20
mov ecx, esi
call fcn.005a6610
push eax
lea ecx, [esp + 0x3c]
call fcn.005e5bc0
lea eax, [esp + 0x38]
push eax
lea ecx, [ebp + 0x154c]
mov byte [esp + 0xa0], 0x15
call fcn.00415e00
lea ecx, [esp + 0x38]
mov byte [esp + 0x9c], 9
call fcn.005e5c20
mov ecx, esi
call fcn.005a6610
xor ecx, ecx
cmp eax, 0xffffffff
setne cl
mov eax, ecx
mov ecx, dword [ebp + 0x14a8]
lea edx, [eax + eax]
xor edx, ecx
mov edi, ecx
and edx, 2
xor edi, edx
mov ecx, esi
mov dword [ebp + 0x14a8], edi
call fcn.005a6610
xor ecx, ecx
cmp eax, 0xffffffff
setne cl
mov eax, ecx
lea edx, [eax + eax]
mov eax, dword [ebp + 0x1368]
xor edx, eax
and edx, 2
mov ecx, eax
xor ecx, edx
mov dword [ebp + 0x1368], ecx
cmp byte [ebp + 0x59f0], 0xff
je 0x6b0918
mov eax, dword [0x7a39fc]
mov ecx, dword [eax + 8]
call fcn.004aec90
test byte [eax + 0x104], 1
jne 0x6b092a
mov ecx, esi
call fcn.005a6810
test eax, eax
je 0x6b092a
mov eax, 1
jmp 0x6b092c
xor eax, eax
mov ecx, dword [ebp + 0x49ac]
and eax, 1
add eax, eax
and ecx, 0xfffffffd
or ecx, eax
mov dword [ebp + 0x49ac], ecx
mov edx, dword [ebp + 0x47e8]
and edx, 0xfffffffd
or edx, eax
mov eax, dword [esp + 0x1c]
mov dword [ebp + 0x47e8], edx
mov eax, dword [eax + 0x8f8]
xor edi, edi
test eax, eax
jle 0x6b09b0
lea ebx, [ebp + 0x3668]
lea esp, [esp]
cmp edi, 0xa
jge 0x6b09ac
mov ecx, dword [esp + 0x1c]
mov edx, dword [ecx + 0x8f4]
mov eax, dword [edx + edi*4]
add eax, 2
push 0
push eax
lea ecx, [ebx + 0x2c]
call fcn.00414c00
mov ecx, dword [ebx]
mov eax, dword [esp + 0x1c]
or ecx, 2
mov dword [ebx], ecx
mov ecx, dword [eax + 0x8f8]
inc edi
add ebx, 0x140
cmp edi, ecx
jl 0x6b0970
mov ebx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx + 0x8f8]
mov ecx, dword [ebp + 0x42e8]
xor edx, edx
cmp eax, 0xa
setg dl
shl edx, 1
xor edx, ecx
and edx, 2
xor ecx, edx
cmp edi, 0xa
mov dword [ebp + 0x42e8], ecx
jge 0x6b0a03
lea eax, [edi + edi*4]
shl eax, 6
lea eax, [eax + ebp + 0x3668]
lea esp, [esp]
test byte [eax], 2
je 0x6b0a03
and dword [eax], 0xfffffffd
inc edi
add eax, 0x140
cmp edi, 0xa
jl 0x6b09f0
mov ecx, dword [ebp + 0x59e8]
cmp ecx, dword [esp + 0x18]
jne 0x6b0a22
movsx edx, word [esi + 0x17e]
cmp dword [ebp + 0x59ec], edx
je 0x6b0b57
mov eax, dword [esp + 0x18]
mov esi, dword [eax + 0x21c]
mov edx, dword [eax]
mov ecx, 0xf
lea edi, [esp + 0x54]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp + 0x59e4]
mov dword [esp + 0x64], 0x7f000000
mov esi, dword [ecx]
push 0
lea ecx, [esp + 0x48]
push ecx
mov ecx, eax
call dword [edx + 0x148]
mov ecx, dword [ebp + 0x59e4]
push eax
call dword [esi + 0xec]
mov eax, dword [0x78d1e4]
test eax, eax
je 0x6b0b2d
mov ecx, dword [ebp + 0x59e4]
push 1
push 3
lea edx, [esp + 0x5c]
push edx
call fcn.006134c0
mov esi, dword [esp + 0x18]
mov eax, dword [esi + 0x2f8]
movsx eax, word [eax + 0x80]
mov ecx, dword [ebp + 0x59e4]
mov ecx, dword [ecx + 0x21c]
push eax
call fcn.00698150
mov eax, dword [ebp + 0x57ec]
mov ecx, dword [ebp + 0x59e4]
mov edx, dword [ecx]
push eax
call dword [edx + 0x94]
mov ecx, dword [ebp + 0x59e4]
lea edx, [esp + 0x38]
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], 0
mov eax, dword [ecx]
push edx
call dword [eax + 0x8c]
mov ecx, dword [ebp + 0x59e4]
lea edx, [esp + 0x44]
mov dword [esp + 0x44], 0x3f800000
mov dword [esp + 0x48], 0
mov dword [esp + 0x4c], 0
mov eax, dword [ecx]
push edx
call dword [eax + 0x88]
mov ecx, dword [ebp + 0x59e4]
push 1
push 0
push esi
lea eax, [ebp + 0x577c]
push eax
call fcn.006100f0
jmp 0x6b0b31
mov esi, dword [esp + 0x18]
mov dword [ebp + 0x59e8], esi
movsx eax, word [ebx + 0x80]
mov ecx, 0x64
sub ecx, eax
push ecx
lea ecx, [ebp + 0x55c4]
mov dword [ebp + 0x59ec], eax
call fcn.00417ee0
lea ecx, [esp + 0x30]
mov dword [esp + 0x9c], 0xffffffff
call fcn.005e5c20
mov ecx, dword [esp + 0x94]
pop edi
mov dword fs:[0], ecx
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret