Function at 0x40ed00
Capabilities:
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x46f11c
mov eax, dword fs:[0]
push eax
sub esp, 0x18c
push ebx
push ebp
push esi
push edi
mov eax, dword [0x498700]
xor eax, esp
push eax
lea eax, [esp + 0x1a0]
mov dword fs:[0], eax
mov esi, edx
mov ebp, dword [esp + 0x1b0]
xor ebx, ebx
mov dword [esp + 0x1a8], ebx
mov dword [esp + 0x14], ebx
push ebx
mov dword [ecx + 0x18], 7
mov dword [ecx + 0x14], ebx
push 0x481268
mov dword [esp + 0x68], ebp
mov dword [esp + 0x58], ecx
mov word [ecx + 4], bx
call fcn.00406b60
mov dword [esp + 0x1a8], ebx
lea edi, [esp + 0x18]
mov dword [esp + 0x14], 1
call fcn.00411290
push 0x481268
lea ecx, [esp + 0x3c]
mov dword [esp + 0x1ac], 1
call fcn.004018b0
push 0x481268
lea ecx, [esp + 0x30]
mov byte [esp + 0x1ac], 2
call fcn.004018b0
push 0x481268
lea ecx, [esp + 0x40]
mov byte [esp + 0x1ac], 3
call fcn.004018b0
mov byte [esp + 0x1a8], 4
lea eax, [esi*8]
sub eax, esi
cmp dword [eax*8 + 0x49d370], 8
lea eax, [eax*8 + 0x49d358]
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x54], eax
jb 0x40edfe
mov esi, eax
mov eax, dword [esi + 4]
jmp 0x40ee05
mov esi, dword [esp + 0x54]
add eax, 4
mov edi, dword [esp + 0x1b4]
push eax
push edi
lea eax, [esp + 0x40]
push str._d._sA
push eax
call fcn.004090f0
add esp, 0x10
cmp dword [esi + 0x18], 8
jb 0x40ee2b
mov eax, dword [esi + 4]
jmp 0x40ee2e
lea eax, [esi + 4]
push eax
push edi
lea ecx, [esp + 0x34]
push str._d._sB
push ecx
call fcn.004090f0
add esp, 0x10
cmp dword [esi + 0x18], 8
jb 0x40ee4d
mov eax, dword [esi + 4]
jmp 0x40ee50
lea eax, [esi + 4]
push eax
push edi
lea edx, [esp + 0x44]
push str._d._sC
push edx
call fcn.004090f0
mov edx, dword [esp + 0x48]
mov eax, edx
add esp, 0x10
mov dword [esp + 0x108], 7
mov dword [esp + 0x104], ebx
mov word [esp + 0xf4], bx
lea esi, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x40ee87
sub eax, esi
sar eax, 1
push eax
push edx
lea ecx, [esp + 0xf8]
call fcn.00406b60
lea eax, [esp + 0x188]
push eax
lea edi, [ebp + 4]
mov byte [esp + 0x1ac], 5
push edi
lea eax, [esp + 0xf8]
mov dword [esp + 0x1c], 3
call fcn.00410fc0
mov ecx, dword [eax]
cmp ecx, ebx
mov edx, dword [eax + 4]
mov esi, dword [edi + 4]
mov dword [esp + 0x48], ecx
mov dword [esp + 0x4c], edx
je 0x40eee4
cmp ecx, edi
je 0x40eee9
call fcn.0044ec76
cmp dword [esp + 0x4c], esi
je 0x40effc
mov edx, dword [esp + 0x2c]
mov ebp, 7
mov eax, edx
mov dword [esp + 0xd0], ebp
mov dword [esp + 0xcc], ebx
mov word [esp + 0xbc], bx
lea esi, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x40ef17
sub eax, esi
sar eax, 1
push eax
push edx
lea ecx, [esp + 0xc0]
call fcn.00406b60
lea eax, [esp + 0x178]
push eax
mov dword [esp + 0x1ac], 6
push edi
lea eax, [esp + 0xc0]
mov dword [esp + 0x1c], ebp
call fcn.00410fc0
mov ecx, dword [eax]
cmp ecx, ebx
mov ebp, dword [eax + 4]
mov esi, dword [edi + 4]
mov dword [esp + 0x30], ecx
mov dword [esp + 0x34], ebp
je 0x40ef70
cmp ecx, edi
je 0x40ef75
call fcn.0044ec76
cmp ebp, esi
je 0x40effc
mov edx, dword [esp + 0x3c]
mov eax, edx
mov dword [esp + 0x7c], 7
mov dword [esp + 0x78], ebx
mov word [esp + 0x68], bx
lea esi, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x40ef97
sub eax, esi
sar eax, 1
push eax
push edx
lea ecx, [esp + 0x6c]
call fcn.00406b60
lea ecx, [esp + 0x160]
push ecx
mov dword [esp + 0x1ac], 7
push edi
lea eax, [esp + 0x6c]
mov dword [esp + 0x1c], 0xf
call fcn.00410fc0
mov ecx, dword [eax]
cmp ecx, ebx
mov ebp, dword [eax + 4]
mov esi, dword [edi + 4]
mov dword [esp + 0x40], ecx
mov dword [esp + 0x44], ebp
je 0x40efee
cmp ecx, edi
je 0x40eff3
call fcn.0044ec76
cmp ebp, esi
mov byte [esp + 0x2b], 1
jne 0x40f001
mov byte [esp + 0x2b], 0
test byte [esp + 0x14], 8
mov ebp, 8
je 0x40f036
and dword [esp + 0x14], 0xfffffff7
cmp dword [esp + 0x7c], ebp
jb 0x40f025
mov edx, dword [esp + 0x68]
push edx
call fcn.00430f55
add esp, 4
mov dword [esp + 0x7c], 7
mov dword [esp + 0x78], ebx
mov word [esp + 0x68], bx
test byte [esp + 0x14], 4
je 0x40f075
and dword [esp + 0x14], 0xfffffffb
cmp dword [esp + 0xd0], ebp
jb 0x40f05b
mov eax, dword [esp + 0xbc]
push eax
call fcn.00430f55
add esp, 4
mov dword [esp + 0xd0], 7
mov dword [esp + 0xcc], ebx
mov word [esp + 0xbc], bx
mov dword [esp + 0x1a8], 4
test byte [esp + 0x14], 2
je 0x40f0bf
and dword [esp + 0x14], 0xfffffffd
cmp dword [esp + 0x108], ebp
jb 0x40f0a5
mov ecx, dword [esp + 0xf4]
push ecx
call fcn.00430f55
add esp, 4
mov dword [esp + 0x108], 7
mov dword [esp + 0x104], ebx
mov word [esp + 0xf4], bx
cmp byte [esp + 0x2b], 0
je 0x40fb2a
cmp dword [esp + 0x48], ebx
jne 0x40f0d5
call fcn.0044ec76
mov esi, dword [esp + 0x4c]
mov edx, dword [esp + 0x48]
cmp esi, dword [edx + 4]
jne 0x40f0e7
call fcn.0044ec76
cmp dword [esi + 0x40], ebp
jb 0x40f0f1
mov esi, dword [esi + 0x2c]
jmp 0x40f0f4
add esi, 0x2c
mov ecx, dword [esp + 0x1c]
cmp ecx, ebx
je 0x40f114
mov edx, dword [esp + 0x20]
sub edx, ecx
mov eax, 0x2aaaaaab
imul edx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x40f11d
call fcn.0044ec76
mov ecx, dword [esp + 0x1c]
cmp esi, ebx
jne 0x40f125
xor eax, eax
jmp 0x40f13f
mov eax, esi
lea ebp, [eax + 2]
lea ebx, [ebx]
mov dx, word [eax]
add eax, 2
cmp dx, bx
jne 0x40f130
sub eax, ebp
sar eax, 1
push eax
push esi
call fcn.00401ca0
mov esi, dword [esp + 0x30]
cmp esi, ebx
jne 0x40f153
call fcn.0044ec76
mov ebp, dword [esp + 0x34]
cmp ebp, dword [esi + 4]
jne 0x40f161
call fcn.0044ec76
cmp dword [ebp + 0x40], 8
jb 0x40f170
mov ecx, dword [esp + 0x34]
mov ebp, dword [ecx + 0x2c]
jmp 0x40f177
mov ebp, dword [esp + 0x34]
add ebp, 0x2c
mov esi, dword [esp + 0x1c]
cmp esi, ebx
je 0x40f19a
mov ecx, dword [esp + 0x20]
sub ecx, esi
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 1
ja 0x40f1a3
call fcn.0044ec76
mov esi, dword [esp + 0x1c]
add esi, 0xc
cmp ebp, ebx
jne 0x40f1ae
xor eax, eax
jmp 0x40f1c2
mov eax, ebp
lea ecx, [eax + 2]
mov dx, word [eax]
add eax, 2
cmp dx, bx
jne 0x40f1b3
sub eax, ecx
sar eax, 1
push eax
push ebp
mov ecx, esi
call fcn.00401ca0
cmp dword [esp + 0x40], ebx
jne 0x40f1d6
call fcn.0044ec76
mov ebp, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
cmp ebp, dword [edx + 4]
jne 0x40f1e8
call fcn.0044ec76
cmp dword [ebp + 0x40], 8
jb 0x40f1f3
mov ebp, dword [ebp + 0x2c]
jmp 0x40f1f6
add ebp, 0x2c
mov esi, dword [esp + 0x1c]
cmp esi, ebx
je 0x40f219
mov ecx, dword [esp + 0x20]
sub ecx, esi
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 2
ja 0x40f222
call fcn.0044ec76
mov esi, dword [esp + 0x1c]
add esi, 0x18
cmp ebp, ebx
jne 0x40f22d
xor eax, eax
jmp 0x40f241
mov eax, ebp
lea ecx, [eax + 2]
mov dx, word [eax]
add eax, 2
cmp dx, bx
jne 0x40f232
sub eax, ecx
sar eax, 1
push eax
push ebp
mov ecx, esi
call fcn.00401ca0
mov eax, dword [esp + 0x54]
cmp dword [eax + 0x18], 8
jb 0x40f25b
mov esi, eax
mov eax, dword [esi + 4]
jmp 0x40f262
mov esi, dword [esp + 0x54]
add eax, 4
mov ebp, dword [esp + 0x1b4]
push eax
push ebp
lea ecx, [esp + 0x40]
push str._d._sA.Percentage
push ecx
call fcn.004090f0
add esp, 0x10
cmp dword [esi + 0x18], 8
jb 0x40f288
mov eax, dword [esi + 4]
jmp 0x40f28b
lea eax, [esi + 4]
push eax
push ebp
lea edx, [esp + 0x34]
push str._d._sB.Percentage
push edx
call fcn.004090f0
add esp, 0x10
cmp dword [esi + 0x18], 8
jb 0x40f2aa
mov eax, dword [esi + 4]
jmp 0x40f2ad
lea eax, [esi + 4]
push eax
push ebp
lea eax, [esp + 0x44]
push str._d._sC.Percentage
push eax
call fcn.004090f0
mov edx, dword [esp + 0x48]
mov eax, edx
add esp, 0x10
mov dword [esp + 0xb4], 7
mov dword [esp + 0xb0], ebx
mov word [esp + 0xa0], bx
lea esi, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x40f2e4
sub eax, esi
sar eax, 1
push eax
push edx
lea ecx, [esp + 0xa4]
call fcn.00406b60
lea ecx, [esp + 0x198]
push ecx
mov byte [esp + 0x1ac], 8
or dword [esp + 0x18], 0x10
push edi
lea eax, [esp + 0xa4]
call fcn.00410fc0
mov ebp, dword [eax]
test ebp, ebp
mov ebx, dword [eax + 4]
mov esi, dword [edi + 4]
mov dword [esp + 0x4c], ebx
je 0x40f337
cmp ebp, edi
je 0x40f33c
call fcn.0044ec76
cmp ebx, esi
je 0x40f428
mov edx, dword [esp + 0x2c]
xor eax, eax
mov dword [esp + 0x94], eax
mov word [esp + 0x84], ax
mov eax, edx
mov dword [esp + 0x98], 7
lea esi, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x40f370
sub eax, esi
sar eax, 1
push eax
push edx
lea ecx, [esp + 0x88]
call fcn.00406b60
lea edx, [esp + 0x170]
push edx
mov dword [esp + 0x1ac], 9
or dword [esp + 0x18], 0x20
push edi
lea eax, [esp + 0x88]
call fcn.00410fc0
mov ecx, dword [eax]
test ecx, ecx
mov ebx, dword [eax + 4]
mov esi, dword [edi + 4]
mov dword [esp + 0x30], ecx
mov dword [esp + 0x34], ebx
je 0x40f3ca
cmp ecx, edi
je 0x40f3cf
call fcn.0044ec76
cmp ebx, esi
je 0x40f428
mov edx, dword [esp + 0x3c]
lea esi, [esp + 0x128]
call fcn.004064a0
lea eax, [esp + 0x190]
push eax
mov dword [esp + 0x1ac], 0xa
or dword [esp + 0x18], 0x40
push edi
mov eax, esi
call fcn.00410fc0
mov ecx, dword [eax]
test ecx, ecx
mov ebx, dword [eax + 4]
mov esi, dword [edi + 4]
mov dword [esp + 0x40], ecx
mov dword [esp + 0x44], ebx
je 0x40f41b
cmp ecx, edi
je 0x40f420
call fcn.0044ec76
cmp ebx, esi
je 0x40f428
mov bl, 1
jmp 0x40f42a
xor bl, bl
test byte [esp + 0x14], 0x40
je 0x40f46e
and dword [esp + 0x14], 0xffffffbf
cmp dword [esp + 0x140], 8
jb 0x40f450
mov ecx, dword [esp + 0x12c]
push ecx
call fcn.00430f55
add esp, 4
xor esi, esi
mov dword [esp + 0x140], 7
mov dword [esp + 0x13c], esi
mov word [esp + 0x12c], si
jmp 0x40f470
xor esi, esi
test byte [esp + 0x14], 0x20
je 0x40f4b0
and dword [esp + 0x14], 0xffffffdf
cmp dword [esp + 0x98], 8
jb 0x40f496
mov edx, dword [esp + 0x84]
push edx
call fcn.00430f55
add esp, 4
mov dword [esp + 0x98], 7
mov dword [esp + 0x94], esi
mov word [esp + 0x84], si
mov dword [esp + 0x1a8], 4
test byte [esp + 0x14], 0x10
je 0x40f4fb
and dword [esp + 0x14], 0xffffffef
cmp dword [esp + 0xb4], 8
jb 0x40f4e1
mov eax, dword [esp + 0xa0]
push eax
call fcn.00430f55
add esp, 4
mov dword [esp + 0xb4], 7
mov dword [esp + 0xb0], esi
mov word [esp + 0xa0], si
test bl, bl
je 0x40fb2a
cmp ebp, esi
jne 0x40f50c
call fcn.0044ec76
mov ebx, dword [esp + 0x4c]
cmp ebx, dword [ebp + 4]
jne 0x40f51a
call fcn.0044ec76
cmp dword [ebx + 0x40], 8
jb 0x40f525
mov ebp, dword [ebx + 0x2c]
jmp 0x40f528
lea ebp, [ebx + 0x2c]
mov esi, dword [esp + 0x1c]
test esi, esi
je 0x40f548
mov ecx, dword [esp + 0x20]
sub ecx, esi
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
jne 0x40f551
call fcn.0044ec76
mov esi, dword [esp + 0x1c]
push ebp
call fcn.0044e81d
mov dword [esi + 4], eax
mov esi, dword [esp + 0x34]
add esp, 4
test esi, esi
jne 0x40f56a
call fcn.0044ec76
mov ebp, dword [esp + 0x34]
cmp ebp, dword [esi + 4]
jne 0x40f578
call fcn.0044ec76
mov ebx, 8
cmp dword [ebp + 0x40], ebx
jb 0x40f587
mov ebp, dword [ebp + 0x2c]
jmp 0x40f58a
add ebp, 0x2c
mov esi, dword [esp + 0x1c]
test esi, esi
je 0x40f5ad
mov ecx, dword [esp + 0x20]
sub ecx, esi
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 1
ja 0x40f5b6
call fcn.0044ec76
mov esi, dword [esp + 0x1c]
push ebp
add esi, 0xc
call fcn.0044e81d
mov dword [esi + 4], eax
mov esi, dword [esp + 0x44]
add esp, 4
test esi, esi
jne 0x40f5d2
call fcn.0044ec76
mov ebp, dword [esp + 0x44]
cmp ebp, dword [esi + 4]
jne 0x40f5e0
call fcn.0044ec76
cmp dword [ebp + 0x40], ebx
jb 0x40f5ea
mov ebp, dword [ebp + 0x2c]
jmp 0x40f5ed
add ebp, 0x2c
mov esi, dword [esp + 0x1c]
test esi, esi
je 0x40f610
mov ecx, dword [esp + 0x20]
sub ecx, esi
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 2
ja 0x40f619
call fcn.0044ec76
mov esi, dword [esp + 0x1c]
push ebp
add esi, 0x18
call fcn.0044e81d
mov dword [esi + 4], eax
mov esi, dword [esp + 0x58]
add esp, 4
cmp dword [esi + 0x18], ebx
jb 0x40f636
mov eax, dword [esi + 4]
jmp 0x40f639
lea eax, [esi + 4]
mov ebp, dword [esp + 0x1b4]
push eax
push ebp
lea edx, [esp + 0x40]
push str._d._sA.TestVer
push edx
call fcn.004090f0
add esp, 0x10
cmp dword [esi + 0x18], ebx
jb 0x40f65e
mov eax, dword [esi + 4]
jmp 0x40f661
lea eax, [esi + 4]
push eax
push ebp
lea eax, [esp + 0x34]
push str._d._sB.TestVer
push eax
call fcn.004090f0
add esp, 0x10
cmp dword [esi + 0x18], ebx
jb 0x40f67f
mov eax, dword [esi + 4]
jmp 0x40f682
lea eax, [esi + 4]
push eax
push ebp
lea ecx, [esp + 0x44]
push str._d._sC.TestVer
push ecx
call fcn.004090f0
mov edx, dword [esp + 0x48]
add esp, 0x10
xor ebx, ebx
mov eax, edx
mov dword [esp + 0xec], 7
mov dword [esp + 0xe8], ebx
mov word [esp + 0xd8], bx
lea esi, [eax + 2]
jmp 0x40f6c0
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x40f6c0
sub eax, esi
sar eax, 1
push eax
push edx
lea ecx, [esp + 0xdc]
call fcn.00406b60
lea edx, [esp + 0x54]
push edx
mov byte [esp + 0x1ac], 0xb
or dword [esp + 0x18], 0x80
push edi
lea eax, [esp + 0xdc]
call fcn.00410fc0
mov ebp, dword [eax]
test ebp, ebp
mov ebx, dword [eax + 4]
mov esi, dword [edi + 4]
mov dword [esp + 0x4c], ebx
je 0x40f713
cmp ebp, edi
je 0x40f718
call fcn.0044ec76
cmp ebx, esi
je 0x40f7cc
mov edx, dword [esp + 0x2c]
lea esi, [esp + 0x10c]
call fcn.004064a0
lea eax, [esp + 0x180]
push eax
mov dword [esp + 0x1ac], 0xc
or dword [esp + 0x18], 0x100
push edi
mov eax, esi
call fcn.00410fc0
mov ecx, dword [eax]
test ecx, ecx
mov ebx, dword [eax + 4]
mov esi, dword [edi + 4]
mov dword [esp + 0x30], ecx
mov dword [esp + 0x34], ebx
je 0x40f76b
cmp ecx, edi
je 0x40f770
call fcn.0044ec76
cmp ebx, esi
je 0x40f7cc
mov edx, dword [esp + 0x3c]
lea esi, [esp + 0x144]
call fcn.004064a0
lea ecx, [esp + 0x168]
push ecx
mov dword [esp + 0x1ac], 0xd
or dword [esp + 0x18], 0x200
push edi
mov eax, esi
call fcn.00410fc0
mov ecx, dword [eax]
test ecx, ecx
mov ebx, dword [eax + 4]
mov esi, dword [edi + 4]
mov dword [esp + 0x40], ecx
mov dword [esp + 0x44], ebx
je 0x40f7bf
cmp ecx, edi
je 0x40f7c4
call fcn.0044ec76
cmp ebx, esi
je 0x40f7cc
mov bl, 1
jmp 0x40f7ce
xor bl, bl
test dword [esp + 0x14], 0x200
je 0x40f819
and dword [esp + 0x14], 0xfffffdff
cmp dword [esp + 0x15c], 8
jb 0x40f7fa
mov edx, dword [esp + 0x148]
push edx
call fcn.00430f55
add esp, 4
xor edi, edi
mov esi, 7
mov dword [esp + 0x15c], esi
mov dword [esp + 0x158], edi
mov word [esp + 0x148], di
jmp 0x40f820
mov esi, 7
xor edi, edi
test dword [esp + 0x14], 0x100
je 0x40f862
and dword [esp + 0x14], 0xfffffeff
cmp dword [esp + 0x124], 8
jb 0x40f84c
mov eax, dword [esp + 0x110]
push eax
call fcn.00430f55
add esp, 4
mov dword [esp + 0x124], esi
mov dword [esp + 0x120], edi
mov word [esp + 0x110], di
mov dword [esp + 0x1a8], 4
test byte [esp + 0x14], 0x80
je 0x40f8ac
and dword [esp + 0x14], 0xffffff7f
cmp dword [esp + 0xec], 8
jb 0x40f896
mov ecx, dword [esp + 0xd8]
push ecx
call fcn.00430f55
add esp, 4
mov dword [esp + 0xec], esi
mov dword [esp + 0xe8], edi
mov word [esp + 0xd8], di
test bl, bl
je 0x40fb2a
cmp ebp, edi
jne 0x40f8bd
call fcn.0044ec76
mov edi, dword [esp + 0x4c]
cmp edi, dword [ebp + 4]
jne 0x40f8cb
call fcn.0044ec76
cmp dword [edi + 0x40], 8
jb 0x40f8d6
mov edi, dword [edi + 0x2c]
jmp 0x40f8d9
add edi, 0x2c
mov esi, dword [esp + 0x1c]
test esi, esi
je 0x40f8f9
mov ecx, dword [esp + 0x20]
sub ecx, esi
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x40f902
call fcn.0044ec76
mov esi, dword [esp + 0x1c]
push edi
call fcn.0044e81d
mov dword [esi + 8], eax
mov esi, dword [esp + 0x34]
add esp, 4
test esi, esi
jne 0x40f91b
call fcn.0044ec76
mov edi, dword [esp + 0x34]
cmp edi, dword [esi + 4]
jne 0x40f929
call fcn.0044ec76
mov ebx, 8
cmp dword [edi + 0x40], ebx
jb 0x40f938
mov edi, dword [edi + 0x2c]
jmp 0x40f93b
add edi, 0x2c
mov esi, dword [esp + 0x1c]
test esi, esi
je 0x40f95e
mov ecx, dword [esp + 0x20]
sub ecx, esi
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 1
ja 0x40f967
call fcn.0044ec76
mov esi, dword [esp + 0x1c]
push edi
add esi, 0xc
call fcn.0044e81d
mov dword [esi + 8], eax
mov esi, dword [esp + 0x44]
add esp, 4
test esi, esi
jne 0x40f983
call fcn.0044ec76
mov edi, dword [esp + 0x44]
cmp edi, dword [esi + 4]
jne 0x40f991
call fcn.0044ec76
cmp dword [edi + 0x40], ebx
jb 0x40f99b
mov edi, dword [edi + 0x2c]
jmp 0x40f99e
add edi, 0x2c
mov esi, dword [esp + 0x1c]
test esi, esi
je 0x40f9c1
mov ecx, dword [esp + 0x20]
sub ecx, esi
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 2
ja 0x40f9ca
call fcn.0044ec76
mov esi, dword [esp + 0x1c]
push edi
add esi, 0x18
call fcn.0044e81d
mov dword [esi + 8], eax
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
add esp, 4
cmp ecx, eax
mov ebp, eax
jbe 0x40f9f4
call fcn.0044ec76
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
cmp ecx, eax
lea esi, [esp + 0x18]
mov edi, ecx
jbe 0x40fa03
call fcn.0044ec76
push ebp
push esi
lea eax, [esp + 0x20]
push edi
push eax
call fcn.00412850
push 0
call fcn.0044e227
add esp, 0x14
push eax
call fcn.0044f348
add esp, 4
call fcn.0044f355
cdq
mov ecx, 0x64
idiv ecx
mov esi, dword [esp + 0x1c]
test esi, esi
mov ebp, edx
je 0x40fa52
mov ecx, dword [esp + 0x20]
sub ecx, esi
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x40fa5b
call fcn.0044ec76
mov esi, dword [esp + 0x1c]
cmp ebp, dword [esi + 4]
jl 0x40fb04
xor edi, edi
lea esi, [esp + 0x18]
call fcn.00411340
cmp ebp, dword [eax + 4]
je 0x40fb04
mov edi, 1
call fcn.00411340
xor edi, edi
lea ebx, [eax + 4]
call fcn.00411340
mov ecx, dword [eax + 4]
add ecx, dword [ebx]
cmp ebp, ecx
jl 0x40fad9
mov edi, 1
call fcn.00411340
xor edi, edi
lea ebx, [eax + 4]
call fcn.00411340
mov edx, dword [eax + 4]
add edx, dword [ebx]
cmp ebp, edx
je 0x40fad9
mov edi, 2
call fcn.00411340
mov eax, dword [eax]
mov ecx, dword [esp + 0x50]
push eax
call fcn.004064e0
call fcn.00411340
mov eax, dword [eax + 8]
mov ecx, dword [esp + 0x60]
mov dword [ecx + 0x34], eax
jmp 0x40fb2a
mov edi, 1
lea esi, [esp + 0x18]
call fcn.00411340
mov eax, dword [eax]
mov ecx, dword [esp + 0x50]
push eax
call fcn.004064e0
call fcn.00411340
mov edx, dword [eax + 8]
mov eax, dword [esp + 0x60]
mov dword [eax + 0x34], edx
jmp 0x40fb2a
xor edi, edi
lea esi, [esp + 0x18]
call fcn.00411340
mov eax, dword [eax]
mov ecx, dword [esp + 0x50]
push eax
call fcn.004064e0
call fcn.00411340
mov ecx, dword [eax + 8]
mov edx, dword [esp + 0x60]
mov dword [edx + 0x34], ecx
mov byte [esp + 0x1a8], 3
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40fb52
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1a8], 2
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40fb7a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1a8], 1
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40fba2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ebx, [esp + 0x18]
call fcn.004118f0
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x1a0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x198
ret 8