Function at 0x18eaaac
Capabilities:
Check for peb beingdebugged flag
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x100effa7
mov eax, dword fs:[0]
push eax
sub esp, 0xc8
mov eax, dword [0x10124584]
xor eax, esp
mov dword [esp + 0xc4], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x10124584]
xor eax, esp
push eax
lea eax, [esp + 0xdc]
mov dword fs:[0], eax
mov esi, ecx
add dword [esi + 0x64], 2
mov eax, dword [esi + 0x60]
mov ebx, dword [esi + 0x64]
lea edi, [esi + 0x64]
mov dword [esp + 0x30], eax
cmp ebx, eax
jne 0x18e80f4
add ebx, 0xfffffffe
mov dword [edi], ebx
mov eax, dword [esi + 4]
mov edx, dword [eax]
mov ecx, dword [edx + 8]
mov eax, dword [ecx + 4]
cmp byte [eax + 0x11], 0
mov ebp, dword [edi]
movzx ebx, word [ebp]
jne 0x18e80bd
mov edi, edi
cmp word [eax + 0xc], bx
jae 0x18e80b3
mov eax, dword [eax + 8]
jmp 0x18e80b7
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0x11], 0
je 0x18e80a8
mov eax, dword [edx + 8]
mov dword [esp + 0x20], ecx
cmp ecx, eax
je 0x18e80d4
cmp bx, word [ecx + 0xc]
jb 0x18e80d4
lea eax, [esp + 0x20]
jmp 0x18e80dc
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x2c]
mov eax, dword [eax]
cmp eax, dword [edx + 8]
je 0x18e80ed
cmp byte [eax + 0xe], 1
je 0x18e873d
add ebp, 0xfffffffe
mov dword [edi], ebp
jmp 0x18e808f
movzx eax, word [ebx]
mov ecx, dword [esi + 4]
mov ebp, dword [ecx]
mov ecx, eax
lea edx, [esp + 0x20]
push edx
lea eax, [esp + 0x30]
mov dword [esp + 0x24], ecx
push eax
lea ecx, [ebp + 4]
call fcn.018e0b68
mov ebp, dword [ebp + 8]
mov eax, dword [esp + 0x2c]
cmp eax, ebp
je 0x18e8190
cmp byte [eax + 0xe], 0xd
jne 0x18e8190
mov ebp, dword [esi + 4]
cmp ebx, dword [esp + 0x30]
je 0x18e8189
movzx esi, word [ebx]
add ebx, 2
mov dword [edi], ebx
mov edx, dword [ebp]
mov ecx, dword [edx + 8]
mov eax, dword [ecx + 4]
cmp byte [eax + 0x11], 0
jne 0x18e815d
lea ecx, [ecx]
cmp word [eax + 0xc], si
jae 0x18e8153
mov eax, dword [eax + 8]
jmp 0x18e8157
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0x11], 0
je 0x18e8148
mov eax, dword [edx + 8]
mov dword [esp + 0x20], ecx
cmp ecx, eax
je 0x18e8174
cmp si, word [ecx + 0xc]
jb 0x18e8174
lea eax, [esp + 0x20]
jmp 0x18e817c
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x2c]
mov eax, dword [eax]
cmp eax, dword [edx + 8]
je 0x18e8128
cmp byte [eax + 0xe], 2
jne 0x18e8128
mov al, 1
jmp 0x18e956e
push 0x10
push 0
mov ecx, esi
mov dword [esp + 0x38], 0
call fcn.018ded78
mov ecx, dword [esi]
mov edx, dword [ecx + 0x18]
shr edx, 0x14
mov ebp, eax
and dl, 1
mov byte [ebp + 0xc], dl
mov eax, dword [esi]
mov edx, dword [eax + 0x13c]
mov ecx, ebp
sub ecx, edx
mov dword [esp + 0x20], ecx
mov ecx, dword [esi + 0x78]
mov dword [esp + 0x40], ecx
mov ecx, edx
mov edx, dword [eax + 0x140]
sub edx, ecx
add edx, 3
and edx, 0xfffffffc
add edx, ecx
mov dword [eax + 0x140], edx
mov ebx, dword [esi]
mov eax, dword [ebx + 0x140]
sub eax, dword [ebx + 0x13c]
mov cl, byte [esi + 0x7c]
mov edx, dword [esi + 0x6c]
mov dword [esi + 0x78], eax
mov dword [esp + 0x44], eax
mov eax, dword [ebx + 0x18]
mov dword [esp + 0x2c], eax
mov eax, dword [esi + 0x70]
mov dword [esp + 0x48], eax
mov eax, dword [esi + 0x68]
mov dword [esi + 0x70], eax
mov eax, dword [edi]
mov byte [esi + 0x7c], 0
mov dword [esi + 0x6c], 0xffffffff
movzx eax, word [eax]
mov dword [esp + 0x3c], edx
movzx edx, ax
mov byte [esp + 0x1f], cl
mov ecx, dword [esi + 4]
mov ecx, dword [ecx]
mov dword [esp + 0x18], eax
lea eax, [esp + 0x14]
mov dword [esp + 0x14], edx
push eax
lea edx, [esp + 0x2c]
push edx
add ecx, 4
mov byte [esp + 0x2f], 1
call fcn.018e0b68
mov eax, dword [esi + 4]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov ecx, dword [esp + 0x28]
cmp ecx, eax
jne 0x18e8264
xor eax, eax
jmp 0x18e8268
movzx eax, byte [ecx + 0xe]
movzx eax, al
dec eax
cmp eax, 0x34
ja 0x18e8eaf
movzx eax, byte [eax + 0x100d8634]
jmp dword [eax*4 + 0x100d8600]
mov ecx, esi
call fcn.018e5f28
mov ebx, dword [edi]
mov dword [esp + 0x18], eax
cmp ebx, dword [esi + 0x60]
jne 0x18e90c3
add ebx, 0xfffffffe
mov eax, dword [esi + 4]
mov dword [edi], ebx
mov ebp, dword [eax]
movzx edx, word [ebx]
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [ebp + 4]
mov dword [esp + 0x3c], edx
call fcn.018e0b68
mov eax, dword [esp + 0x28]
cmp eax, dword [ebp + 8]
je 0x18e8449
movzx eax, byte [eax + 0xe]
cmp al, 1
je 0x18e85bf
sub ebx, 2
jmp 0x18e8414
mov edx, dword [edi]
sub edx, dword [esi + 0x5c]
sar edx, 1
push edx
jmp 0x18e9563
mov eax, dword [edi]
sub eax, dword [esi + 0x5c]
sar eax, 1
push eax
jmp 0x18e9563
mov ecx, dword [edi]
sub ecx, dword [esi + 0x5c]
sar ecx, 1
push ecx
jmp 0x18e9563
mov eax, dword [edi]
sub eax, dword [esi + 0x5c]
lea edx, [esp + 0x4c]
push edx
sar eax, 1
push eax
push 0x14
mov ecx, esi
call fcn.018e2838
lea ecx, [esp + 0x4c]
call fcn.01815ca8
jmp 0x18e956c
mov eax, dword [esp + 0x18]
cmp ax, 0x52
jne 0x18e8f25
mov eax, dword [edi]
mov ecx, dword [esi + 4]
add eax, 2
mov dword [edi], eax
movzx edx, word [eax]
push edx
mov dword [esp + 0x18], eax
xor ebx, ebx
call fcn.018e1f88
cmp al, 2
je 0x18e909e
mov eax, dword [esp + 0x14]
add eax, 0xfffffffe
mov dword [edi], eax
jmp 0x18e8ee8
mov ebp, dword [edi]
mov eax, dword [esi + 4]
movzx ecx, word [ebp]
mov ebx, dword [eax]
lea edx, [esp + 0x28]
push edx
lea eax, [esp + 0x24]
mov dword [esp + 0x2c], ecx
push eax
lea ecx, [ebx + 4]
call fcn.018e0b68
mov eax, dword [esp + 0x20]
cmp eax, dword [ebx + 8]
je 0x18e8f1e
movzx eax, byte [eax + 0xe]
cmp al, 1
je 0x18e886d
add ebp, 0xfffffffe
mov dword [edi], ebp
jmp 0x18e8ee8
cmp ax, 0x26
jne 0x18e8fcf
mov ebx, dword [edi]
add ebx, 2
mov dword [edi], ebx
mov dword [esp + 0x34], ebx
cmp ebx, dword [esi + 0x60]
je 0x18e8f80
movzx edx, word [ebx]
mov eax, dword [esi + 4]
mov eax, dword [eax]
lea ecx, [esp + 0x28]
mov dword [esp + 0x28], edx
push ecx
lea edx, [esp + 0x18]
push edx
lea ecx, [eax + 4]
mov dword [esp + 0x20], eax
call fcn.018e0b68
mov eax, dword [esp + 0x18]
mov eax, dword [eax + 8]
mov ecx, dword [esp + 0x14]
cmp ecx, eax
je 0x18e8f76
cmp byte [ecx + 0xe], 2
je 0x18e8f80
add ebx, 2
mov dword [edi], ebx
cmp ebx, dword [esi + 0x60]
jne 0x18e8f3f
mov eax, dword [edi]
cmp eax, dword [esi + 0x60]
jne 0x18e8fc5
lea ebp, [eax - 2]
mov eax, dword [esi + 4]
mov dword [edi], ebp
mov ebx, dword [eax]
movzx edx, word [ebp]
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x24]
push ecx
lea ecx, [ebx + 4]
mov dword [esp + 0x30], edx
call fcn.018e0b68
mov eax, dword [esp + 0x20]
cmp eax, dword [ebx + 8]
je 0x18e8fc0
movzx eax, byte [eax + 0xe]
cmp al, 1
je 0x18e85bf
sub ebp, 2
jmp 0x18e8f8a
push eax
mov eax, dword [esp + 0x38]
jmp 0x18e9093
cmp ax, 0x50
jne 0x18e83fb
mov eax, dword [edi]
mov ecx, dword [esi + 0x60]
add eax, 2
mov dword [edi], eax
cmp eax, ecx
jne 0x18e901e
lea ebx, [eax - 2]
mov dword [edi], ebx
movzx ecx, word [ebx]
push ecx
mov ecx, dword [esi + 4]
call fcn.018e1f88
cmp al, 1
je 0x18e9011
sub ebx, 2
mov dword [edi], ebx
movzx eax, word [ebx]
mov ecx, dword [esi + 4]
push eax
call fcn.018e1f88
cmp al, 1
jne 0x18e8ffc
mov ecx, dword [edi]
sub ecx, dword [esi + 0x5c]
sar ecx, 1
push ecx
jmp 0x18e9563
cmp word [eax], 0x3e
jne 0x18e83fb
add eax, 2
mov dword [esp + 0x18], eax
mov dword [edi], eax
cmp eax, ecx
je 0x18e9058
lea ecx, [ecx]
mov ebx, dword [edi]
movzx edx, word [ebx]
mov ecx, dword [esi + 4]
push edx
call fcn.018e1f88
cmp al, 2
je 0x18e9054
add ebx, 2
mov dword [edi], ebx
cmp ebx, dword [esi + 0x60]
jne 0x18e9038
mov eax, dword [esp + 0x18]
mov ecx, dword [edi]
cmp ecx, dword [esi + 0x60]
jne 0x18e9092
lea ebx, [ecx - 2]
mov dword [edi], ebx
movzx ecx, word [ebx]
push ecx
mov ecx, dword [esi + 4]
call fcn.018e1f88
cmp al, 1
je 0x18e955d
sub ebx, 2
mov dword [edi], ebx
movzx eax, word [ebx]
mov ecx, dword [esi + 4]
push eax
call fcn.018e1f88
cmp al, 1
jne 0x18e9078
jmp 0x18e955d
push ecx
push eax
call fcn.018ded38
mov ebx, eax
add esp, 8
xor eax, eax
push 0x10
push 0x1d
mov ecx, esi
mov dword [esp + 0x1c], eax
mov dword [ebp + 8], eax
call fcn.018ded78
mov dword [eax + 8], ebx
mov dword [eax + 0xc], 0
mov ecx, dword [esi]
mov ebx, dword [ecx + 0x18]
jmp 0x18e9138
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x18]
shr eax, 0x14
shr ecx, 0x14
xor al, cl
and al, 1
mov byte [esi + 0x7c], al
xor eax, eax
mov dword [ebp + 8], eax
mov ebx, dword [edi]
mov ebp, dword [esi + 4]
mov dword [esp + 0x14], eax
movzx eax, word [ebx]
push eax
mov ecx, ebp
call fcn.018e1f88
cmp al, 2
jne 0x18e910c
mov edx, dword [esp + 0x18]
push edx
mov ecx, esi
call fcn.018dced8
mov al, byte [esi + 0x7c]
or byte [esp + 0x1f], al
mov byte [esp + 0x27], 0
jmp 0x18e912e
movzx eax, word [ebx]
push eax
mov ecx, ebp
call fcn.018e1f88
cmp al, 0x24
jne 0x18e9533
mov ecx, dword [esp + 0x18]
push ecx
mov ecx, esi
call fcn.018dced8
add dword [edi], 2
cmp byte [esi + 0x7c], 0
je 0x18e914c
mov ebx, dword [esp + 0x18]
push 0xc
shr ebx, 0x14
push 0x1c
mov ecx, esi
and bl, 1
call fcn.018ded78
mov byte [eax + 8], bl
mov edx, dword [edi]
cmp edx, dword [esi + 0x60]
je 0x18e915e
mov eax, dword [esi + 0x58]
mov ecx, esi
call eax
test al, al
jne 0x18e914c
mov ecx, dword [esp + 0x20]
push ecx
mov ecx, esi
call fcn.018e2a28
test al, al
jne 0x18e91bb
add dword [edi], 0xfffffffe
mov ebx, dword [edi]
movzx edx, word [ebx]
mov ecx, dword [esi + 4]
push edx
call fcn.018e1f88
cmp al, 1
je 0x18e919d
jmp 0x18e9188
sub ebx, 2
mov dword [edi], ebx
movzx ecx, word [ebx]
push ecx
mov ecx, dword [esi + 4]
call fcn.018e1f88
cmp al, 1
jne 0x18e9188
push 0x101067dc
lea ecx, [esp + 0x50]
call fcn.01815c28
mov dword [esp + 0xe4], 4
jmp 0x18e8cba
mov eax, dword [edi]
mov ebp, dword [esi + 0x60]
cmp eax, ebp
jne 0x18e91fb
lea ebx, [eax - 2]
mov dword [edi], ebx
movzx ecx, word [ebx]
push ecx
mov ecx, dword [esi + 4]
call fcn.018e1f88
cmp al, 1
je 0x18e91ee
sub ebx, 2
mov dword [edi], ebx
movzx eax, word [ebx]
mov ecx, dword [esi + 4]
push eax
call fcn.018e1f88
cmp al, 1
jne 0x18e91d9
sub ebp, dword [esi + 0x5c]
sar ebp, 1
push ebp
push 8
jmp 0x18e9565
add eax, 2
cmp byte [esp + 0x27], 0
mov dword [edi], eax
je 0x18e9231
cmp byte [esi + 0x7c], 0
je 0x18e9225
mov ebx, dword [esp + 0x2c]
push 0xc
shr ebx, 0x14
push 0x1c
mov ecx, esi
and bl, 1
call fcn.018ded78
mov byte [eax + 8], bl
mov ecx, dword [esp + 0x2c]
push ecx
mov ecx, esi
call fcn.018dced8
mov ebx, dword [esp + 0x30]
mov ebp, dword [esp + 0x14]
test ebx, ebx
je 0x18e92d8
mov eax, dword [esi]
mov ecx, dword [eax + 0x13c]
mov edx, dword [eax + 0x140]
sub edx, ecx
add edx, 3
and edx, 0xfffffffc
add edx, ecx
mov dword [eax + 0x140], edx
mov eax, dword [esi]
mov edx, dword [eax + 0x13c]
lea ecx, [edx + ebx]
mov ebx, dword [eax + 0x140]
sub ebx, edx
sub ebx, ecx
add ebx, edx
mov dword [ecx + 8], ebx
cmp dword [esi + 8], ecx
jne 0x18e92d8
cmp ebp, 0xfffffffe
je 0x18e92d8
add dword [edi], 0xfffffffe
mov ebx, dword [edi]
movzx eax, word [ebx]
mov ecx, dword [esi + 4]
push eax
call fcn.018e1f88
cmp al, 1
je 0x18e92ad
sub ebx, 2
mov dword [edi], ebx
movzx edx, word [ebx]
mov ecx, dword [esi + 4]
push edx
call fcn.018e1f88
cmp al, 1
jne 0x18e9298
push 0x101067b4
lea ecx, [esp + 0x50]
call fcn.01815c28
mov ecx, dword [edi]
sub ecx, dword [esi + 0x5c]
lea eax, [esp + 0x4c]
push eax
sar ecx, 1
mov dword [esp + 0xe8], 5
push ecx
jmp 0x18e8cc7
cmp ebp, 0xfffffffc
jne 0x18e94aa
mov edx, dword [esi]
mov eax, dword [edx + 0x13c]
mov ebx, dword [esp + 0x44]
add eax, ebx
cmp dword [eax], 0x11
je 0x18e93b3
push 0x110
push 0x11
push ebx
mov ecx, esi
call fcn.018ddce8
mov ecx, dword [esi]
mov edx, dword [ecx + 0x13c]
mov ebp, dword [ecx + 0x140]
sub ebp, edx
sub ebp, eax
add ebp, edx
mov dword [eax + 8], ebp
mov ebp, dword [esp + 0x14]
mov eax, dword [esi]
mov eax, dword [eax + 0x13c]
add eax, ebx
add eax, dword [eax + 4]
mov eax, dword [eax]
cmp eax, 0x1b
je 0x18e94aa
test eax, eax
je 0x18e94aa
add dword [edi], 0xfffffffe
mov ebx, dword [edi]
movzx ecx, word [ebx]
push ecx
mov ecx, dword [esi + 4]
call fcn.018e1f88
cmp al, 1
je 0x18e936d
nop
sub ebx, 2
mov dword [edi], ebx
movzx eax, word [ebx]
mov ecx, dword [esi + 4]
push eax
call fcn.018e1f88
cmp al, 1
jne 0x18e9358
push 0x10106770
lea ecx, [esp + 0xc0]
call fcn.01815c28
mov edx, dword [edi]
sub edx, dword [esi + 0x5c]
lea ecx, [esp + 0xbc]
push ecx
sar edx, 1
push edx
push 0xd
mov ecx, esi
mov dword [esp + 0xf0], 8
call fcn.018e2838
lea ecx, [esp + 0xbc]
call fcn.01815ca8
jmp 0x18e956c
mov ecx, dword [eax + 8]
cmp dword [eax + ecx], 0x11
jne 0x18e942a
add dword [edi], 0xfffffffe
mov ebx, dword [edi]
movzx edx, word [ebx]
mov ecx, dword [esi + 4]
push edx
call fcn.018e1f88
cmp al, 1
je 0x18e93ed
lea esp, [esp]
sub ebx, 2
mov dword [edi], ebx
movzx ecx, word [ebx]
push ecx
mov ecx, dword [esi + 4]
call fcn.018e1f88
cmp al, 1
jne 0x18e93d8
push 0x10106718
lea ecx, [esp + 0x50]
call fcn.01815c28
mov eax, dword [edi]
sub eax, dword [esi + 0x5c]
lea edx, [esp + 0x4c]
push edx
sar eax, 1
push eax
push 2
mov ecx, esi
mov dword [esp + 0xf0], 6
call fcn.018e2838
lea ecx, [esp + 0x4c]
call fcn.01815ca8
jmp 0x18e956c
add eax, dword [eax + 4]
cmp dword [eax], 0x1b
jne 0x18e9322
cmp dword [eax + 8], 0x270f
jne 0x18e9322
add dword [edi], 0xfffffffe
mov ebx, dword [edi]
movzx ecx, word [ebx]
push ecx
mov ecx, dword [esi + 4]
call fcn.018e1f88
cmp al, 1
je 0x18e946d
sub ebx, 2
mov dword [edi], ebx
movzx eax, word [ebx]
mov ecx, dword [esi + 4]
push eax
call fcn.018e1f88
cmp al, 1
jne 0x18e9458
push 0x101066d4
lea ecx, [esp + 0x50]
call fcn.01815c28
mov edx, dword [edi]
sub edx, dword [esi + 0x5c]
lea ecx, [esp + 0x4c]
push ecx
sar edx, 1
push edx
push 2
mov ecx, esi
mov dword [esp + 0xf0], 7
call fcn.018e2838
lea ecx, [esp + 0x4c]
call fcn.01815ca8
jmp 0x18e956c
push 0x10
push 1
mov ecx, esi
call fcn.018ded78
mov dword [eax + 8], ebp
mov ecx, dword [esi]
mov edx, dword [ecx + 0x18]
mov ecx, dword [esp + 0x40]
shr edx, 0x14
and dl, 1
mov byte [eax + 0xc], dl
mov eax, dword [esp + 0x20]
mov dl, byte [esp + 0x1f]
mov dword [esi + 0x74], eax
mov eax, dword [esi + 0x70]
mov dword [esi + 0x78], ecx
mov byte [esi + 0x7c], dl
cmp eax, dword [esi + 0x68]
jbe 0x18e94e6
mov dword [esi + 0x68], eax
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x48]
mov dword [esi + 0x6c], eax
mov dword [esi + 0x70], ecx
test ebp, ebp
jle 0x18e952f
mov eax, dword [esi]
test dword [eax + 0x18], 0x800000
je 0x18e951d
mov edi, dword [edi]
sub edi, dword [esi + 0x5c]
lea edx, [ebp - 1]
sar edi, 1
push edx
lea ecx, [eax + 0x148]
dec edi
call fcn.018dd0b8
mov dword [eax + 4], edi
cmp ebp, 0x20
jge 0x18e952f
lea ecx, [ebp - 1]
mov eax, 1
shl eax, cl
or dword [esi + 0x18], eax
mov al, 1
jmp 0x18e956e
add ebx, 0xfffffffe
mov dword [edi], ebx
movzx ecx, word [ebx]
push ecx
mov ecx, ebp
call fcn.018e1f88
cmp al, 1
je 0x18e955d
nop
sub ebx, 2
mov dword [edi], ebx
movzx eax, word [ebx]
mov ecx, dword [esi + 4]
push eax
call fcn.018e1f88
cmp al, 1
jne 0x18e9548
sub ebx, dword [esi + 0x5c]
sar ebx, 1
push ebx
push 0x14
mov ecx, esi
call fcn.018e4618
xor al, al
mov ecx, dword [esp + 0xdc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xc4]
xor ecx, esp
call fcn.018bb05e
add esp, 0xd4
ret
sub esp, 0x14
push ebx
push esi
mov esi, ecx
add dword [esi + 0x64], 2
mov ebx, dword [esi + 0x64]
cmp ebx, dword [esi + 0x60]
jne 0x18eaad0
sub ebx, dword [esi + 0x5c]
sar ebx, 1
push ebx
push 8
call fcn.018e4618
pop esi
xor al, al
pop ebx
add esp, 0x14
ret
push ebp
mov ebp, dword [esi]
mov eax, dword [ebp + 0x18]
push edi
test eax, 0x203
je 0x18eaaea
and eax, 0x1003
cmp eax, 0x1001
jne 0x18eab27
mov eax, dword [esi + 4]
movzx ecx, word [ebx]
mov edi, dword [eax]
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x1c]
mov dword [esp + 0x18], ecx
push eax
lea ecx, [edi + 4]
call fcn.018e0b68
mov eax, dword [esp + 0x18]
cmp eax, dword [edi + 8]
je 0x18eab27
movzx eax, byte [eax + 0xe]
cmp al, 8
jne 0x18eab27
pop edi
pop ebp
mov ecx, esi
pop esi
pop ebx
add esp, 0x14
jmp 0x18e8038
xor edi, edi
test dword [ebp + 0x18], 0x400000
jne 0x18eab63
inc dword [esi + 0x68]
test dword [ebp + 0x18], 0x800000
mov edi, dword [esi + 0x68]
je 0x18eab63
sub ebx, dword [esi + 0x5c]
lea ecx, [esp + 0x1c]
sar ebx, 1
dec ebx
push ecx
lea ecx, [ebp + 0x148]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], 0
call fcn.018e50b8
push 0x10
push 0
mov ecx, esi
call fcn.018ded78
mov dword [eax + 8], edi
mov edx, dword [esi]
mov ecx, dword [edx + 0x18]
shr ecx, 0x14
and cl, 1
mov byte [eax + 0xc], cl
mov ecx, dword [esi]
sub eax, dword [ecx + 0x13c]
mov edx, dword [esi + 0x78]
mov dword [esp + 0x1c], edx
mov edx, dword [ecx + 0x140]
mov ebx, eax
mov eax, dword [ecx + 0x13c]
sub edx, eax
add edx, 3
and edx, 0xfffffffc
add edx, eax
mov dword [ecx + 0x140], edx
mov eax, dword [esi]
mov ecx, dword [eax + 0x140]
sub ecx, dword [eax + 0x13c]
mov dl, byte [esi + 0x7c]
mov dword [esi + 0x78], ecx
mov ebp, dword [eax + 0x18]
mov eax, dword [esi + 0x6c]
mov dword [esp + 0x18], ebx
mov byte [esp + 0x13], dl
mov byte [esi + 0x7c], 0
mov dword [esp + 0x14], eax
mov dword [esi + 0x6c], 0xffffffff
mov ecx, dword [esi + 0x64]
cmp ecx, dword [esi + 0x60]
je 0x18eabf0
mov edx, dword [esi + 0x58]
mov ecx, esi
call edx
test al, al
jne 0x18eabdd
push ebx
mov ecx, esi
call fcn.018e2a28
test al, al
je 0x18eac57
cmp byte [esi + 0x7c], 0
je 0x18eac1c
mov ebx, ebp
push 0xc
shr ebx, 0x14
push 0x1c
mov ecx, esi
and bl, 1
call fcn.018ded78
mov byte [eax + 8], bl
mov ebx, dword [esp + 0x18]
mov eax, dword [esi]
mov dword [eax + 0x18], ebp
mov eax, ebp
shr eax, 0x14
and al, 1
cmp byte [esi + 0xc], al
je 0x18eac30
mov byte [esi + 0xc], al
mov eax, dword [esp + 0x14]
mov ecx, dword [esi + 0x60]
mov dl, byte [esp + 0x13]
mov dword [esi + 0x6c], eax
mov eax, dword [esi + 0x64]
mov byte [esi + 0x7c], dl
cmp eax, ecx
jne 0x18eac61
sub ecx, dword [esi + 0x5c]
sar ecx, 1
push ecx
push 8
mov ecx, esi
call fcn.018e4618
pop edi
pop ebp
pop esi
xor al, al
pop ebx
add esp, 0x14
ret
test edi, edi
je 0x18eac89
mov ecx, dword [esi]
test dword [ecx + 0x18], 0x800000
je 0x18eac89
sub eax, dword [esi + 0x5c]
lea edx, [edi - 1]
sar eax, 1
push edx
add ecx, 0x148
mov ebp, eax
call fcn.018dd0b8
mov dword [eax + 4], ebp
add dword [esi + 0x64], 2
push 0x10
push 1
mov ecx, esi
call fcn.018ded78
mov dword [eax + 8], edi
mov ecx, dword [esi]
mov edx, dword [ecx + 0x18]
shr edx, 0x14
and dl, 1
mov byte [eax + 0xc], dl
mov eax, dword [esp + 0x1c]
lea ecx, [edi - 1]
mov dword [esi + 0x74], ebx
mov dword [esi + 0x78], eax
cmp ecx, 0x1e
ja 0x18eacc5
mov edx, 1
shl edx, cl
or dword [esi + 0x18], edx
pop edi
pop ebp
pop esi
mov al, 1
pop ebx
add esp, 0x14
ret