Function at 0x4a4c90
Capabilities:
Check os version
Get number of processors

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xc8
mov esi, esp
mov dword [esi + 0xb0], ebp
mov edi, ecx
mov dword [esi + 0xb4], esp
mov dword [esi + 0xc0], 0xffffffff
lea eax, [esi + 0xb8]
mov dword [esi + 0xbc], 0x4c3ea0
mov ecx, dword fs:[0]
mov dword [esi + 0xb8], ecx
mov dword fs:[0], eax
mov eax, dword [0x572290]
mov ecx, 0x6f9e5aff
mov eax, dword [eax - 0x4201b5c3]
add eax, ecx
lea ecx, [esi + 0x80]
call eax
lea ecx, [edi + 0x30]
mov dword [esi + 4], edi
lea eax, [edi + 0x5c]
mov dword [esi + 0x90], eax
mov edi, 0x6f9e5aff
mov dword [esi + 0x7c], 0
lea edx, [esi + 8]
mov dword [esi], ecx
jmp 0x4a4d3e
mov eax, dword [0x5720f0]
mov eax, dword [eax + 0x52601a7e]
mov ecx, 0xee58f8c3
add eax, ecx
mov ecx, dword [esi]
call eax
mov ecx, dword [esi + 4]
mov dword [ecx + 0x28], eax
mov ecx, dword [esi]
lea edx, [esi + 8]
mov edi, 0x6f9e5aff
lea ebx, [esi + 0x80]
test byte [esi + 0x7c], 1
jne 0x4a5090
mov eax, dword [esi + 4]
mov eax, dword [eax + 0x28]
cmp eax, 6
jl 0x4a509c
cmp eax, 9
jae 0x4a4e00
cmp eax, 8
jne 0x4a50e7
mov dword [esi + 0xc0], 0
mov ecx, dword [ebp + 8]
push 0xffffffffffffffff
call fcn.004a9110
test al, al
je 0x4a5551
mov eax, dword [0x5720f0]
mov eax, dword [eax + 0x52601a7e]
mov ecx, 0xee58f8c3
add eax, ecx
mov ecx, dword [esi]
call eax
mov ecx, dword [esi + 4]
mov dword [ecx + 0x28], eax
cmp eax, 0xa
je 0x4a520c
mov byte [esi + 0x40], 1
mov eax, dword [0x572330]
mov eax, dword [eax - 0x72acac8a]
mov ebx, 0xf4a72f5b
add eax, ebx
lea edi, [esi + 0x80]
mov ecx, edi
lea edx, [esi + 0x20]
push edx
call eax
mov eax, dword [0x572330]
mov eax, dword [eax - 0x72acac86]
add eax, ebx
mov ecx, edi
lea edx, [esi + 0x40]
push edx
push dword [esi + 0x24]
push dword [esi + 0x20]
lea edx, [esi + 8]
push edx
call eax
jmp 0x4a4d34
cmp eax, 0xe
jae 0x4a5297
cmp eax, 9
jne 0x4a53b9
mov dword [esi + 0xc0], 0
mov ecx, dword [ebp + 8]
push 0xffffffffffffffff
call fcn.004a8850
test al, al
je 0x4a5551
mov eax, dword [0x5720f0]
mov eax, dword [eax + 0x52601a7e]
mov ecx, 0xee58f8c3
add eax, ecx
mov ecx, dword [esi]
call eax
mov ecx, dword [esi + 4]
mov dword [ecx + 0x28], eax
cmp eax, 0xb
jne 0x4a4f10
mov ecx, dword [ebp + 8]
call fcn.004a8a60
test al, al
mov edi, 0x6f9e5aff
lea ebx, [esi + 0x80]
je 0x4a5551
mov eax, dword [0x572290]
mov eax, dword [eax - 0x4201b5a3]
add eax, edi
mov ecx, ebx
call eax
test al, al
jne 0x4a551f
mov eax, dword [0x572290]
mov eax, dword [eax - 0x4201b59f]
add eax, edi
mov ecx, ebx
mov ebx, 0x6f9e5aff
lea edi, [esi + 0x20]
push edi
call eax
mov eax, dword [0x572290]
mov eax, dword [eax - 0x4201b59b]
add eax, ebx
mov ecx, edi
call eax
mov dword [esi + 0xc0], 0
test al, al
je 0x4a4fb2
mov eax, dword [0x5720f0]
mov eax, dword [eax + 0x52601a7e]
mov ecx, 0xee58f8c3
add eax, ecx
mov ecx, dword [esi]
call eax
mov ecx, dword [esi + 4]
mov dword [ecx + 0x28], eax
cmp eax, 0xd
je 0x4a4d18
cmp eax, 0xa
jne 0x4a56d1
mov ecx, dword [ebp + 8]
call fcn.004a9320
test al, al
jne 0x4a5067
jmp 0x4a5551
cmp eax, 4
jne 0x4a5555
mov ecx, dword [ebp + 8]
push dword [esi + 0x90]
call fcn.004a8f20
test al, al
je 0x4a5551
mov eax, dword [0x5720f0]
mov eax, dword [eax + 0x52601a7e]
mov ecx, 0xee58f8c3
add eax, ecx
mov ecx, dword [esi]
call eax
mov ecx, dword [esi + 4]
mov dword [ecx + 0x28], eax
cmp eax, 0xc
jne 0x4a5613
mov byte [esi + 0x40], 0
mov eax, dword [0x572330]
mov eax, dword [eax - 0x72acac8a]
mov ebx, 0xf4a72f5b
add eax, ebx
lea edi, [esi + 0x80]
mov ecx, edi
lea edx, [esi + 0x20]
push edx
call eax
mov eax, dword [0x572330]
mov eax, dword [eax - 0x72acac86]
add eax, ebx
mov ecx, edi
lea edx, [esi + 0x40]
push edx
push dword [esi + 0x24]
push dword [esi + 0x20]
lea edx, [esi + 8]
push edx
call eax
mov eax, dword [0x5720f0]
mov eax, dword [eax + 0x52601a7e]
mov ecx, 0xee58f8c3
add eax, ecx
mov ecx, dword [esi]
call eax
jmp 0x4a4d2e
mov eax, dword [0x5720f0]
mov eax, dword [eax + 0x52601a7e]
mov ecx, 0xee58f8c3
add eax, ecx
mov ecx, dword [esi]
call eax
mov ecx, dword [esi + 4]
mov dword [ecx + 0x28], eax
cmp eax, 0xd
jne 0x4a504e
mov eax, dword [0x5720f0]
mov eax, dword [eax + 0x52601a7e]
mov ecx, 0xee58f8c3
add eax, ecx
mov ecx, dword [esi]
call eax
mov ecx, dword [esi + 4]
mov dword [ecx + 0x28], eax
cmp eax, 4
jne 0x4a584d
mov ecx, dword [ebp + 8]
push dword [esi + 0x90]
call fcn.004a8f20
test al, al
je 0x4a5551
mov eax, dword [0x5720f0]
mov eax, dword [eax + 0x52601a7e]
mov ecx, 0xee58f8c3
add eax, ecx
mov ecx, dword [esi]
call eax
mov ecx, dword [esi + 4]
mov dword [ecx + 0x28], eax
cmp eax, 0xc
jne 0x4a590b
mov eax, dword [0x5720f0]
mov eax, dword [eax + 0x52601a7e]
mov ecx, 0xee58f8c3
add eax, ecx
mov ecx, dword [esi]
call eax
jmp 0x4a4d2e
cmp eax, 0xb
jne 0x4a578f
mov ecx, dword [ebp + 8]
call fcn.004a8a60
test al, al
je 0x4a5551
mov eax, dword [0x572290]
mov eax, dword [eax - 0x4201b597]
mov edi, 0x6f9e5aff
add eax, edi
lea ecx, [esi + 0x80]
call eax
mov al, 1
mov dword [esi + 0x7c], eax
mov ecx, dword [esi]
lea edx, [esi + 8]
jmp 0x4a4d3e
mov dword [esi + 0x7c], 0
jmp 0x4a4e6e
cmp eax, 3
jge 0x4a5135
test eax, eax
jle 0x4a53b9
mov dword [esi + 0xc0], 0
cmp eax, 2
jne 0x4a5219
mov byte [esi + 8], 0
mov eax, dword [0x57238c]
mov eax, dword [eax + 0x7536bdec]
mov ecx, 0xb179b39b
add eax, ecx
mov ecx, dword [ebp + 8]
push 0
push edx
lea edx, [esi + 0x20]
push edx
call eax
jmp 0x4a5287
cmp eax, 6
jne 0x4a5189
mov eax, dword [0x572290]
mov eax, dword [eax - 0x4201b5ab]
add eax, edi
call eax
mov dword [esi + 0x24], edx
mov dword [esi + 0x20], eax
mov eax, dword [0x572394]
mov eax, dword [eax + 0x2e00bb70]
mov ecx, 0x4fbcec49
add eax, ecx
mov dword [esi + 0xc0], 0
mov ecx, dword [ebp + 8]
push 0
lea edx, [esi + 0x20]
push edx
lea edx, [esi + 8]
push edx
call eax
jmp 0x4a5287
mov dword [esi + 0xc0], 0
je 0x4a523d
cmp eax, 5
jne 0x4a5264
mov eax, dword [0x572290]
mov eax, dword [eax - 0x4201b5a7]
add eax, edi
call eax
mov dword [esi + 0x24], edx
mov dword [esi + 0x20], eax
mov eax, dword [0x57239c]
mov eax, dword [eax + 0x757b1527]
mov ecx, 0xc8e96e19
add eax, ecx
mov ecx, dword [ebp + 8]
push 0
lea edx, [esi + 0x20]
push edx
lea edx, [esi + 8]
push edx
call eax
jmp 0x4a5287
mov eax, dword [0x572290]
mov eax, dword [eax - 0x4201b5b3]
add eax, edi
mov ebx, ecx
call eax
fstp qword [esi + 0xa8]
vmovsd xmm0, qword [esi + 0xa8]
mov eax, dword [0x572290]
mov eax, dword [eax - 0x4201b5af]
add eax, edi
sub esp, 8
vmovsd qword [esi + 0xa0], xmm0
vmovsd qword [esp], xmm0
call eax
add esp, 8
mov dword [esi + 0xc0], 0
test al, al
je 0x4a59c9
vmovsd xmm0, qword [esi + 0xa0]
vmovsd qword [esi + 0x20], xmm0
mov eax, dword [0x572388]
mov eax, dword [eax - 0x35c0f9ed]
mov ecx, 0xbe865088
add eax, ecx
mov ecx, dword [ebp + 8]
push 0
lea edx, [esi + 0x20]
push edx
lea edx, [esi + 8]
push edx
call eax
jmp 0x4a5287
mov ecx, dword [ebp + 8]
call fcn.004a9320
jmp 0x4a4e5b
mov byte [esi + 8], 1
mov eax, dword [0x57238c]
mov eax, dword [eax + 0x7536bdec]
mov ecx, 0xb179b39b
add eax, ecx
mov ecx, dword [ebp + 8]
push 0
push edx
lea edx, [esi + 0x20]
push edx
call eax
jmp 0x4a5287
mov dword [esi + 8], 0
mov eax, dword [0x572390]
mov eax, dword [eax - 0x62adf9f3]
mov ecx, 0x8d68373f
add eax, ecx
mov ecx, dword [ebp + 8]
push 0
push edx
lea edx, [esi + 0x20]
push edx
call eax
jmp 0x4a5287
mov eax, dword [0x572398]
mov eax, dword [eax + 0xaeb7347]
mov ecx, 0x4bdcaa0a
add eax, ecx
mov ecx, dword [ebp + 8]
push 0
push dword [esi + 0x90]
lea edx, [esi + 0x20]
push edx
call eax
mov edi, 0x6f9e5aff
lea ebx, [esi + 0x80]
jmp 0x4a4e6e
jne 0x4a53b9
mov edi, 0xbdfe4a3d
add edi, dword [0x5722a0]
mov eax, dword [0x570140]
mov ecx, 0xc115db07
mov eax, dword [eax - 0x490b3c8c]
add eax, ecx
sub esp, 4
movzx ecx, byte [esi + 0x20]
mov byte [esp], cl
lea ebx, [esi + 0x40]
mov ecx, ebx
call eax
mov eax, dword [0x570140]
mov eax, dword [eax - 0x490b3c88]
mov ecx, 0xc115db07
add eax, ecx
push edi
call eax
add esp, 4
mov ecx, dword [0x570140]
mov ecx, dword [ecx - 0x490b3c84]
mov edx, 0xc115db07
add ecx, edx
push eax
call ecx
add esp, 4
mov dword [esi + 0xc0], 2
mov ecx, ebx
push eax
push edi
call fcn.00405290
mov dword [esi + 0xc0], 0x1b
mov ecx, dword [esi + 4]
lea eax, [esi + 0x40]
push eax
push 0
lea eax, [esi + 8]
push eax
call fcn.004a6710
mov eax, dword [0x572290]
mov ecx, 0x6f9e5aff
mov eax, dword [eax - 0x4201b5bf]
add eax, ecx
lea edi, [esi + 0x94]
mov ecx, dword [esi]
push edi
call eax
mov dword [esi + 0xc0], 0x1c
push 0
lea eax, [esi + 8]
push eax
push edi
push 0x65
lea eax, [esi + 0x20]
push eax
call fcn.004a6280
add esp, 0x14
mov dword [esi + 0xc0], 0x1d
lea eax, [esi + 0x64]
mov ecx, dword [esi]
push eax
call fcn.004a6af0
mov eax, dword [0x572290]
mov ecx, 0x6f9e5aff
mov eax, dword [eax - 0x4201b5bf]
add eax, ecx
lea edx, [esi + 0x58]
mov ecx, dword [esi]
push edx
call eax
mov eax, dword [esi + 0x58]
mov dword [esi + 0xc0], 0x1e
mov ecx, dword [ebp + 8]
lea edx, [esi + 0x20]
push edx
lea edx, [esi + 0x64]
push edx
push eax
call fcn.004a61d0
jmp 0x4a54d0
mov edi, 0xbdfe4a3d
add edi, dword [0x5722a0]
mov eax, dword [0x570140]
mov ecx, 0xc115db07
mov eax, dword [eax - 0x490b3c8c]
add eax, ecx
sub esp, 4
movzx ecx, byte [esi + 0x20]
mov byte [esp], cl
lea ebx, [esi + 0x40]
mov ecx, ebx
call eax
mov eax, dword [0x570140]
mov eax, dword [eax - 0x490b3c88]
mov ecx, 0xc115db07
add eax, ecx
push edi
call eax
add esp, 4
mov ecx, dword [0x570140]
mov ecx, dword [ecx - 0x490b3c84]
mov edx, 0xc115db07
add ecx, edx
push eax
call ecx
add esp, 4
mov dword [esi + 0xc0], 1
mov ecx, ebx
push eax
push edi
call fcn.00405290
mov dword [esi + 0xc0], 0x17
mov ecx, dword [esi + 4]
lea eax, [esi + 0x40]
push eax
push 0x10
lea eax, [esi + 8]
push eax
call fcn.004a6710
mov eax, dword [0x572290]
mov ecx, 0x6f9e5aff
mov eax, dword [eax - 0x4201b5bf]
add eax, ecx
lea edi, [esi + 0x94]
mov ecx, dword [esi]
push edi
call eax
mov dword [esi + 0xc0], 0x18
push 0
lea eax, [esi + 8]
push eax
push edi
push 0x65
lea eax, [esi + 0x20]
push eax
call fcn.004a6280
add esp, 0x14
mov dword [esi + 0xc0], 0x19
lea eax, [esi + 0x64]
mov ecx, dword [esi]
push eax
call fcn.004a6af0
mov eax, dword [0x572290]
mov ecx, 0x6f9e5aff
mov eax, dword [eax - 0x4201b5bf]
add eax, ecx
lea edx, [esi + 0x58]
mov ecx, dword [esi]
push edx
call eax
mov eax, dword [esi + 0x58]
mov dword [esi + 0xc0], 0x1a
mov ecx, dword [ebp + 8]
lea edx, [esi + 0x20]
push edx
lea edx, [esi + 0x64]
push edx
push eax
call fcn.004a61d0
mov ebx, eax
mov eax, dword [0x572290]
mov eax, dword [eax - 0x4201b5bb]
mov edi, 0x6f9e5aff
add eax, edi
lea ecx, [esi + 0x64]
call eax
mov eax, dword [0x572290]
mov eax, dword [eax - 0x4201b5b7]
add eax, edi
lea ecx, [esi + 0x20]
call eax
mov eax, dword [0x572290]
mov eax, dword [eax - 0x4201b5bb]
add eax, edi
lea ecx, [esi + 8]
call eax
mov eax, dword [0x572290]
add edi, dword [eax - 0x4201b5bb]
lea ecx, [esi + 0x40]
call edi
jmp 0x4a5521
mov bl, 1
mov eax, dword [0x572290]
mov edx, 0x6f9e5aff
add edx, dword [eax - 0x4201b593]
lea ecx, [esi + 0x80]
call edx
mov eax, dword [esi + 0xb8]
mov dword fs:[0], eax
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 4
xor ebx, ebx
jmp 0x4a5521
mov eax, 0xbdfe4a3d
add eax, dword [0x572294]
lea ecx, [esi + 0x40]
push eax
call fcn.00401db0
mov dword [esi + 0xc0], 0x23
mov ecx, dword [esi + 4]
lea eax, [esi + 0x40]
push eax
push 4
lea eax, [esi + 8]
push eax
call fcn.004a6710
mov eax, dword [0x572290]
mov ecx, 0x6f9e5aff
mov eax, dword [eax - 0x4201b5bf]
add eax, ecx
lea edi, [esi + 0x94]
mov ecx, dword [esi]
push edi
call eax
mov dword [esi + 0xc0], 0x24
push 0
lea eax, [esi + 8]
push eax
push edi
push 0x65
lea eax, [esi + 0x20]
push eax
call fcn.004a6280
add esp, 0x14
mov dword [esi + 0xc0], 0x25
lea eax, [esi + 0x64]
mov ecx, dword [esi]
push eax
call fcn.004a6af0
mov eax, dword [0x572290]
mov ecx, 0x6f9e5aff
mov eax, dword [eax - 0x4201b5bf]
add eax, ecx
lea edx, [esi + 0x58]
mov ecx, dword [esi]
push edx
call eax
mov eax, dword [esi + 0x58]
mov dword [esi + 0xc0], 0x26
mov ecx, dword [ebp + 8]
lea edx, [esi + 0x20]
push edx
lea edx, [esi + 0x64]
push edx
push eax
call fcn.004a61d0
jmp 0x4a54d0
mov eax, 0xbdfe4a3d
add eax, dword [0x572298]
lea ecx, [esi + 0x40]
push eax
call fcn.00401db0
mov dword [esi + 0xc0], 0x1f
mov ecx, dword [esi + 4]
lea eax, [esi + 0x40]
push eax
push 0xc
lea eax, [esi + 8]
push eax
call fcn.004a6710
mov eax, dword [0x572290]
mov ecx, 0x6f9e5aff
mov eax, dword [eax - 0x4201b5bf]
add eax, ecx
lea edi, [esi + 0x94]
mov ecx, dword [esi]
push edi
call eax
mov dword [esi + 0xc0], 0x20
push 0
lea eax, [esi + 8]
push eax
push edi
push 0x65
lea eax, [esi + 0x20]
push eax
call fcn.004a6280
add esp, 0x14
mov dword [esi + 0xc0], 0x21
lea eax, [esi + 0x64]
mov ecx, dword [esi]
push eax
call fcn.004a6af0
mov eax, dword [0x572290]
mov ecx, 0x6f9e5aff
mov eax, dword [eax - 0x4201b5bf]
add eax, ecx
lea edx, [esi + 0x58]
mov ecx, dword [esi]
push edx
call eax
mov eax, dword [esi + 0x58]
mov dword [esi + 0xc0], 0x22
mov ecx, dword [ebp + 8]
lea edx, [esi + 0x20]
push edx
lea edx, [esi + 0x64]
push edx
push eax
call fcn.004a61d0
jmp 0x4a54d0
mov eax, 0xbdfe4a3d
add eax, dword [0x5722a4]
lea ecx, [esi + 0x40]
push eax
call fcn.00401db0
mov dword [esi + 0xc0], 0x13
mov ecx, dword [esi + 4]
lea eax, [esi + 0x40]
push eax
push 0xa
lea eax, [esi + 8]
push eax
call fcn.004a6710
mov eax, dword [0x572290]
mov ecx, 0x6f9e5aff
mov eax, dword [eax - 0x4201b5bf]
add eax, ecx
lea edi, [esi + 0x94]
mov ecx, dword [esi]
push edi
call eax
mov dword [esi + 0xc0], 0x14
push 0
lea eax, [esi + 8]
push eax
push edi
push 0x65
lea eax, [esi + 0x20]
push eax
call fcn.004a6280
add esp, 0x14
mov dword [esi + 0xc0], 0x15
lea eax, [esi + 0x64]
mov ecx, dword [esi]
push eax
call fcn.004a6af0
mov eax, dword [0x572290]
mov ecx, 0x6f9e5aff
mov eax, dword [eax - 0x4201b5bf]
add eax, ecx
lea edx, [esi + 0x58]
mov ecx, dword [esi]
push edx
call eax
mov eax, dword [esi + 0x58]
mov dword [esi + 0xc0], 0x16
mov ecx, dword [ebp + 8]
lea edx, [esi + 0x20]
push edx
lea edx, [esi + 0x64]
push edx
push eax
call fcn.004a61d0
jmp 0x4a54d0
mov eax, 0xbdfe4a3d
add eax, dword [0x5722a8]
lea ecx, [esi + 0x40]
push eax
call fcn.00401db0
mov dword [esi + 0xc0], 7
mov ecx, dword [esi + 4]
lea eax, [esi + 0x40]
push eax
push 0xb
lea eax, [esi + 8]
push eax
call fcn.004a6710
mov eax, dword [0x572290]
mov ecx, 0x6f9e5aff
mov eax, dword [eax - 0x4201b5bf]
add eax, ecx
lea edi, [esi + 0x94]
mov ecx, dword [esi]
push edi
call eax
mov dword [esi + 0xc0], 8
push 0
lea eax, [esi + 8]
push eax
push edi
push 0x65
lea eax, [esi + 0x20]
push eax
call fcn.004a6280
add esp, 0x14
mov dword [esi + 0xc0], 9
lea eax, [esi + 0x64]
mov ecx, dword [esi]
push eax
call fcn.004a6af0
mov eax, dword [0x572290]
mov ecx, 0x6f9e5aff
mov eax, dword [eax - 0x4201b5bf]
add eax, ecx
lea edx, [esi + 0x58]
mov ecx, dword [esi]
push edx
call eax
mov eax, dword [esi + 0x58]
mov dword [esi + 0xc0], 0xa
mov ecx, dword [ebp + 8]
lea edx, [esi + 0x20]
push edx
lea edx, [esi + 0x64]
push edx
push eax
call fcn.004a61d0
jmp 0x4a54d0
mov eax, 0xbdfe4a3d
add eax, dword [0x572294]
lea ecx, [esi + 0x40]
push eax
call fcn.00401db0
mov dword [esi + 0xc0], 0xf
mov ecx, dword [esi + 4]
lea eax, [esi + 0x40]
push eax
push 4
lea eax, [esi + 8]
push eax
call fcn.004a6710
mov eax, dword [0x572290]
mov ecx, 0x6f9e5aff
mov eax, dword [eax - 0x4201b5bf]
add eax, ecx
lea edi, [esi + 0x94]
mov ecx, dword [esi]
push edi
call eax
mov dword [esi + 0xc0], 0x10
push 0
lea eax, [esi + 8]
push eax
push edi
push 0x65
lea eax, [esi + 0x20]
push eax
call fcn.004a6280
add esp, 0x14
mov dword [esi + 0xc0], 0x11
lea eax, [esi + 0x64]
mov ecx, dword [esi]
push eax
call fcn.004a6af0
mov eax, dword [0x572290]
mov ecx, 0x6f9e5aff
mov eax, dword [eax - 0x4201b5bf]
add eax, ecx
lea edx, [esi + 0x58]
mov ecx, dword [esi]
push edx
call eax
mov eax, dword [esi + 0x58]
mov dword [esi + 0xc0], 0x12
mov ecx, dword [ebp + 8]
lea edx, [esi + 0x20]
push edx
lea edx, [esi + 0x64]
push edx
push eax
call fcn.004a61d0
jmp 0x4a54d0
mov eax, 0xbdfe4a3d
add eax, dword [0x572298]
lea ecx, [esi + 0x40]
push eax
call fcn.00401db0
mov dword [esi + 0xc0], 0xb
mov ecx, dword [esi + 4]
lea eax, [esi + 0x40]
push eax
push 0xc
lea eax, [esi + 8]
push eax
call fcn.004a6710
mov eax, dword [0x572290]
mov ecx, 0x6f9e5aff
mov eax, dword [eax - 0x4201b5bf]
add eax, ecx
lea edi, [esi + 0x94]
mov ecx, dword [esi]
push edi
call eax
mov dword [esi + 0xc0], 0xc
push 0
lea eax, [esi + 8]
push eax
push edi
push 0x65
lea eax, [esi + 0x20]
push eax
call fcn.004a6280
add esp, 0x14
mov dword [esi + 0xc0], 0xd
lea eax, [esi + 0x64]
mov ecx, dword [esi]
push eax
call fcn.004a6af0
mov eax, dword [0x572290]
mov ecx, 0x6f9e5aff
mov eax, dword [eax - 0x4201b5bf]
add eax, ecx
lea edx, [esi + 0x58]
mov ecx, dword [esi]
push edx
call eax
mov eax, dword [esi + 0x58]
mov dword [esi + 0xc0], 0xe
mov ecx, dword [ebp + 8]
lea edx, [esi + 0x20]
push edx
lea edx, [esi + 0x64]
push edx
push eax
call fcn.004a61d0
jmp 0x4a54d0
mov byte [esi + 0x58], 0x27
mov ecx, ebx
lea eax, [esi + 0x40]
push eax
call fcn.004a6af0
mov eax, 0xbdfe4a3d
add eax, dword [0x57229c]
mov dword [esi + 0xc0], 3
lea ecx, [esi + 0x58]
push ecx
lea ecx, [esi + 0x40]
push ecx
push eax
lea eax, [esi + 8]
push eax
call fcn.004a99c0
add esp, 0x10
mov dword [esi + 0xc0], 4
push 0
lea eax, [esi + 8]
push eax
push 0x196
lea eax, [esi + 0x20]
push eax
call fcn.004a96c0
add esp, 0x10
mov dword [esi + 0xc0], 5
lea eax, [esi + 0x64]
mov ecx, dword [esi]
push eax
call fcn.004a6af0
mov eax, dword [0x572290]
mov ecx, 0x6f9e5aff
mov eax, dword [eax - 0x4201b5bf]
add eax, ecx
lea edx, [esi + 0x94]
mov ecx, dword [esi]
push edx
call eax
mov eax, dword [esi + 0x94]
mov dword [esi + 0xc0], 6
mov ecx, dword [ebp + 8]
lea edx, [esi + 0x20]
push edx
lea edx, [esi + 0x64]
push edx
push eax
call fcn.004a9610
jmp 0x4a54d0