Function at 0x4fc670
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x6817685c
mov eax, dword fs:[0]
push eax
sub esp, 0x574
mov eax, dword [0x68188590]
xor eax, esp
mov dword [esp + 0x570], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x68188590]
xor eax, esp
push eax
lea eax, [esp + 0x588]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x2c], esi
mov dword [esi], 0x6817d1b4
mov dword [esp + 0x590], 0xb
call fcn.004f59d0
mov ecx, esi
mov byte [esi + 0xa8dc], 0
mov byte [esi + 0xa8e8], 0
call fcn.004f8640
mov eax, dword [esi + 0xa35c]
mov ecx, dword [esi + 0xa680]
mov edx, dword [esi + 0xa7a8]
shr eax, 0xa
shr ecx, 0xa
cmp dword [esi + 0xa7e0], 0x10
lea edi, [esi + 0xa7c8]
mov dword [esp + 0x28], eax
mov dword [esp + 0x30], ecx
mov eax, dword [edx + 0x1c]
jb 0x4fc717
mov ecx, dword [edi + 4]
mov dword [esp + 0x14], ecx
jmp 0x4fc71e
lea edx, [edi + 4]
mov dword [esp + 0x14], edx
mov ecx, dword [eax]
push 4
lea edx, [esi + 0xa2cc]
push edx
mov edx, dword [esp + 0x1c]
push 0xe4
lea ebx, [esi + 0xc]
push ebx
lea ebp, [esi + 8]
push ebp
push edx
push eax
mov eax, dword [ecx + 0x30]
call eax
push 1
mov ecx, esi
call fcn.004f9ae0
cmp dword [edi + 0x18], 0x10
mov ecx, dword [esi + 0xa7a8]
mov eax, dword [ecx + 0x1c]
jb 0x4fc762
mov edx, dword [edi + 4]
mov dword [esp + 0x14], edx
jmp 0x4fc769
lea ecx, [edi + 4]
mov dword [esp + 0x14], ecx
mov edx, dword [eax]
mov edx, dword [edx + 0x30]
push 4
lea ecx, [esi + 0xa670]
push ecx
mov ecx, dword [esp + 0x1c]
push 0x1db
push ebx
push ebp
push ecx
push eax
call edx
cmp dword [edi + 0x18], 0x10
mov eax, dword [esi + 0xa7a8]
mov eax, dword [eax + 0x1c]
jb 0x4fc79e
mov ecx, dword [edi + 4]
mov dword [esp + 0x14], ecx
jmp 0x4fc7a5
lea edx, [edi + 4]
mov dword [esp + 0x14], edx
mov edx, dword [eax]
mov edx, dword [edx + 0x30]
push 4
lea ecx, [esi + 0xa354]
push ecx
mov ecx, dword [esp + 0x1c]
push 0x1dc
push ebx
push ebp
push ecx
push eax
call edx
cmp dword [edi + 0x18], 0x10
mov eax, dword [esi + 0xa7a8]
mov eax, dword [eax + 0x1c]
jb 0x4fc7da
mov ecx, dword [edi + 4]
mov dword [esp + 0x14], ecx
jmp 0x4fc7e1
lea edx, [edi + 4]
mov dword [esp + 0x14], edx
mov edx, dword [eax]
mov edx, dword [edx + 0x30]
push 4
lea ecx, [esi + 0xa358]
push ecx
mov ecx, dword [esp + 0x1c]
push 0x1dd
push ebx
push ebp
push ecx
push eax
call edx
cmp dword [edi + 0x18], 0x10
mov eax, dword [esi + 0xa7a8]
mov eax, dword [eax + 0x1c]
jb 0x4fc816
mov ecx, dword [edi + 4]
mov dword [esp + 0x14], ecx
jmp 0x4fc81d
lea edx, [edi + 4]
mov dword [esp + 0x14], edx
mov ecx, dword [eax]
push 4
lea edx, [esp + 0x2c]
push edx
mov edx, dword [esp + 0x1c]
push 0x1de
push ebx
push ebp
push edx
push eax
mov eax, dword [ecx + 0x30]
call eax
cmp dword [edi + 0x18], 0x10
mov ecx, dword [esi + 0xa7a8]
mov eax, dword [ecx + 0x1c]
jb 0x4fc850
mov edx, dword [edi + 4]
mov dword [esp + 0x14], edx
jmp 0x4fc857
lea ecx, [edi + 4]
mov dword [esp + 0x14], ecx
mov edx, dword [eax]
mov edx, dword [edx + 0x30]
push 4
lea ecx, [esp + 0x34]
push ecx
mov ecx, dword [esp + 0x1c]
push 0x1df
push ebx
push ebp
push ecx
push eax
call edx
cmp dword [edi + 0x18], 0x10
mov eax, dword [esi + 0xa7a8]
mov eax, dword [eax + 0x1c]
jb 0x4fc88a
mov ecx, dword [edi + 4]
mov dword [esp + 0x14], ecx
jmp 0x4fc891
lea edx, [edi + 4]
mov dword [esp + 0x14], edx
mov edx, dword [eax]
mov edx, dword [edx + 0x30]
push 4
lea ecx, [esi + 0xa67c]
push ecx
mov ecx, dword [esp + 0x1c]
push 0x1ea
push ebx
push ebp
push ecx
push eax
call edx
mov ebp, dword [esi + 0xa7a8]
mov eax, dword [ebp + 0x50]
lea ecx, [eax + 0xd30]
mov eax, ecx
lea edx, [eax + 1]
mov dword [esp + 0x1c], edx
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x4fc8c6
sub eax, dword [esp + 0x1c]
cmp dword [edi + 0x18], 0x10
mov edx, dword [ebp + 0x1c]
jb 0x4fc8e1
mov ebp, dword [edi + 4]
jmp 0x4fc8e4
lea ebp, [edi + 4]
add eax, 1
push eax
push ecx
push 0x1f9
push ebx
mov eax, ebp
lea ebp, [esi + 8]
push ebp
push eax
mov eax, dword [edx]
mov ecx, dword [eax + 0x30]
push edx
call ecx
cmp dword [edi + 0x18], 0x10
mov edx, dword [esi + 0xa7a8]
mov eax, dword [edx + 0x1c]
jb 0x4fc912
mov ecx, dword [edi + 4]
jmp 0x4fc915
lea ecx, [edi + 4]
mov edx, dword [eax]
push ebx
push ebp
push ecx
push eax
mov eax, dword [edx + 0x370]
call eax
cmp dword [edi + 0x18], 0x10
mov ecx, dword [esi + 0xa7a8]
mov dword [esp + 0x34], eax
mov eax, dword [ecx + 0x1c]
jb 0x4fc93f
mov edx, dword [edi + 4]
mov dword [esp + 0x14], edx
jmp 0x4fc946
lea ecx, [edi + 4]
mov dword [esp + 0x14], ecx
mov edx, dword [eax]
mov edx, dword [edx + 0x30]
push 4
lea ecx, [esp + 0x38]
push ecx
mov ecx, dword [esp + 0x1c]
push 0x1ef
push ebx
push ebp
push ecx
push eax
call edx
cmp dword [edi + 0x18], 0x10
mov eax, dword [esi + 0xa7a8]
mov eax, dword [eax + 0x1c]
jb 0x4fc979
mov ecx, dword [edi + 4]
mov dword [esp + 0x14], ecx
jmp 0x4fc980
lea edx, [edi + 4]
mov dword [esp + 0x14], edx
mov edx, dword [eax]
mov edx, dword [edx + 0x30]
push 1
lea ecx, [esi + 0xa6cc]
push ecx
mov ecx, dword [esp + 0x1c]
push 0x1ff
push ebx
push ebp
push ecx
push eax
call edx
cmp byte [esi + 0xa341], 0
mov byte [esp + 0x1b], 0
je 0x4fc9be
mov eax, dword [esi + 0xa7a8]
mov ecx, dword [eax + 0x50]
mov dl, byte [ecx + 0xb88]
mov byte [esp + 0x1b], dl
cmp dword [edi + 0x18], 0x10
mov eax, dword [esi + 0xa7a8]
mov eax, dword [eax + 0x1c]
jb 0x4fc9d6
mov ecx, dword [edi + 4]
mov dword [esp + 0x14], ecx
jmp 0x4fc9dd
lea edx, [edi + 4]
mov dword [esp + 0x14], edx
mov ecx, dword [eax]
push 1
lea edx, [esp + 0x1f]
push edx
mov edx, dword [esp + 0x1c]
push 0x1e9
push ebx
push ebp
push edx
push eax
mov eax, dword [ecx + 0x30]
call eax
mov ecx, dword [esi + 0xa7a8]
mov eax, dword [ecx + 0x1c]
mov edx, dword [eax]
push eax
mov eax, dword [edx + 0x1c]
call eax
cmp dword [edi + 0x18], 0x10
mov ecx, dword [esi + 0xa7a8]
mov byte [esp + 0x27], al
mov eax, dword [ecx + 0x1c]
jb 0x4fca25
mov edx, dword [edi + 4]
mov dword [esp + 0x14], edx
jmp 0x4fca2c
lea ecx, [edi + 4]
mov dword [esp + 0x14], ecx
mov edx, dword [eax]
mov edx, dword [edx + 0x30]
push 1
lea ecx, [esp + 0x2b]
push ecx
mov ecx, dword [esp + 0x1c]
push 0x1f6
push ebx
push ebp
push ecx
push eax
call edx
cmp dword [edi + 0x18], 0x10
mov eax, dword [esi + 0xa7a8]
mov eax, dword [eax + 0x1c]
jb 0x4fca5f
mov ecx, dword [edi + 4]
mov dword [esp + 0x14], ecx
jmp 0x4fca66
lea edx, [edi + 4]
mov dword [esp + 0x14], edx
mov ecx, dword [eax]
push 1
lea edx, [esi + 0xa260]
push edx
mov edx, dword [esp + 0x1c]
push 0x1f7
push ebx
push ebp
push edx
push eax
mov eax, dword [ecx + 0x30]
call eax
mov eax, dword [esi + 0xa314]
test eax, eax
je 0x4fcb27
mov ecx, dword [esi + 0xa318]
sub ecx, eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 1
jbe 0x4fcb27
cmp dword [edi + 0x18], 0x10
mov ecx, dword [esi + 0xa7a8]
mov eax, dword [ecx + 0x1c]
jb 0x4fcac7
mov edx, dword [edi + 4]
mov dword [esp + 0x14], edx
jmp 0x4fcace
lea ecx, [edi + 4]
mov dword [esp + 0x14], ecx
mov edx, dword [eax]
mov edx, dword [edx + 0x30]
push 4
lea ecx, [esi + 0xa330]
push ecx
mov ecx, dword [esp + 0x1c]
push 0x1e4
push ebx
push ebp
push ecx
push eax
call edx
cmp dword [edi + 0x18], 0x10
mov eax, dword [esi + 0xa7a8]
mov eax, dword [eax + 0x1c]
jb 0x4fcb03
mov ecx, dword [edi + 4]
mov dword [esp + 0x14], ecx
jmp 0x4fcb0a
lea edx, [edi + 4]
mov dword [esp + 0x14], edx
mov ecx, dword [eax]
push 4
lea edx, [esi + 0xa334]
push edx
mov edx, dword [esp + 0x1c]
push 0x1e5
push ebx
push ebp
push edx
push eax
mov eax, dword [ecx + 0x30]
call eax
cmp byte [esi + 0xa340], 0
je 0x4fcb6c
cmp dword [edi + 0x18], 0x10
mov ecx, dword [esi + 0xa7a8]
mov eax, dword [ecx + 0x1c]
jb 0x4fcb48
mov edx, dword [edi + 4]
mov dword [esp + 0x14], edx
jmp 0x4fcb4f
lea ecx, [edi + 4]
mov dword [esp + 0x14], ecx
mov edx, dword [eax]
mov edx, dword [edx + 0x30]
push 1
lea ecx, [esi + 0xa7a4]
push ecx
mov ecx, dword [esp + 0x1c]
push 0x20a
push ebx
push ebp
push ecx
push eax
call edx
mov eax, dword [esi + 0xa7a8]
mov ecx, dword [eax + 0x50]
mov eax, dword [ecx + 0xcf4]
test eax, eax
mov dword [esp + 0x14], eax
jne 0x4fcb9b
call fcn.004f54c0
mov edx, dword [esi + 0xa7a8]
mov ecx, dword [edx + 0x50]
mov dword [esp + 0x14], eax
mov dword [ecx + 0xcf4], eax
call fcn.004f1f30
test eax, eax
je 0x4fcc2a
call fcn.004f1f30
cmp dword [eax + 0xc], 0
je 0x4fcc2a
call fcn.004f1f30
mov edx, dword [eax + 0xc]
call edx
test al, al
je 0x4fcc2a
cmp dword [edi + 0x18], 0x10
jb 0x4fcbd0
mov eax, dword [edi + 4]
mov dword [esp + 0x20], eax
jmp 0x4fcbd7
lea ecx, [edi + 4]
mov dword [esp + 0x20], ecx
mov edx, dword [esp + 0x14]
push edx
call dword [0x6817a214]
mov ecx, dword [esi + 0xa67c]
mov edx, dword [esi + 0xa680]
push eax
movzx eax, byte [esi + 0xa6cc]
push eax
mov eax, dword [esp + 0x30]
push ecx
mov ecx, dword [esi + 0xa358]
push edx
mov edx, dword [esi + 0xa354]
push eax
mov eax, dword [esi + 0xa670]
push ecx
mov ecx, dword [esp + 0x38]
push edx
push eax
push ecx
push 0x6817d280
push 0x4e24
call fcn.004f1fb0
add esp, 0x2c
call fcn.004f1f30
test eax, eax
je 0x4fcc97
call fcn.004f1f30
cmp dword [eax + 0xc], 0
je 0x4fcc97
call fcn.004f1f30
mov edx, dword [eax + 0xc]
call edx
test al, al
je 0x4fcc97
cmp dword [edi + 0x18], 0x10
jb 0x4fcc57
mov eax, dword [edi + 4]
jmp 0x4fcc5a
lea eax, [edi + 4]
mov ecx, dword [esi + 0xa914]
mov edx, dword [esi + 0xa910]
push ecx
mov ecx, dword [esi + 0xa90c]
push edx
mov edx, dword [esi + 0xa908]
push ecx
mov ecx, dword [esi + 0xa904]
push edx
mov edx, dword [esi + 0xa900]
push ecx
push edx
push eax
push 0x6817d218
push 0x4e24
call fcn.004f1fb0
add esp, 0x24
call dword [0x6817a04c]
push eax
mov dword [esp + 0x20], eax
call fcn.00520f6a
add esp, 4
cmp dword [esi + 0xa25c], 0
jne 0x4fd50a
cmp byte [esi + 0xa752], 0
jne 0x4fcd06
cmp byte [esi + 0xa753], 0
jne 0x4fcd06
mov eax, dword [esi + 0xa7a8]
mov dword [esp + 0x20], eax
call fcn.00520f77
cdq
mov ecx, 0x64
idiv ecx
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 0x50]
cmp edx, dword [ecx + 0x1be]
jb 0x4fcd06
mov edx, eax
mov eax, dword [edx + 0x50]
mov ecx, dword [eax + 0xcec]
cmp ecx, dword [eax + 0x1c2]
jne 0x4fd50a
push 0x88
lea edx, [esp + 0x3c]
push 0
push edx
call fcn.0051f6e0
mov al, byte [esp + 0x27]
mov edx, dword [esi + 0xa7a8]
mov byte [esp + 0x45], al
mov eax, dword [edx + 0x50]
mov ecx, dword [eax + 0xcd0]
mov dword [esp + 0x48], ecx
mov ecx, dword [eax + 0xcd4]
mov dword [esp + 0x4c], ecx
mov cl, byte [eax + 0xcdc]
mov byte [esp + 0x50], cl
mov ecx, dword [eax + 0xcd8]
mov dword [esp + 0x54], ecx
mov ecx, dword [eax + 0xce0]
mov dword [esp + 0x58], ecx
mov ecx, dword [eax + 0xce4]
mov eax, dword [eax + 0xce8]
imul eax, eax, 0x3e8
mov dword [esp + 0x60], eax
mov eax, dword [esi + 0xa2a4]
add esp, 0xc
test ecx, ecx
mov byte [esp + 0x38], 1
mov dword [esp + 0x50], ecx
mov dword [esp + 0x58], eax
je 0x4fcd9a
mov eax, dword [esi + 0xa698]
cmp eax, ecx
jbe 0x4fcda0
mov dword [esp + 0x5c], eax
jmp 0x4fcda4
mov ecx, dword [esi + 0xa698]
mov dword [esp + 0x5c], ecx
mov eax, dword [esi + 0xa694]
push edi
lea ecx, [edx + 0x70]
mov dword [esp + 0x64], eax
call fcn.004f7370
test eax, eax
je 0x4fcdd2
mov ecx, dword [esi + 0xa7a8]
push edi
add ecx, 0x70
call fcn.004fc240
mov ecx, dword [eax]
mov dword [esp + 0x64], ecx
jmp 0x4fcdda
mov dword [esp + 0x64], 0
cmp dword [edi + 0x18], 0x10
mov edx, dword [esi + 0xa69c]
mov al, byte [esi + 0xa6a0]
mov ecx, dword [esi + 0xa6a4]
mov dword [esp + 0x68], edx
mov edx, dword [esi + 0xa7a8]
mov byte [esp + 0x6c], al
mov eax, dword [edx + 0x1c]
mov dword [esp + 0x70], ecx
jb 0x4fce0c
mov ecx, dword [edi + 4]
jmp 0x4fce0f
lea ecx, [edi + 4]
mov edx, dword [eax]
push ebx
push ebp
push ecx
push eax
mov eax, dword [edx + 0x374]
call eax
movzx ecx, byte [esi + 0xa6a8]
mov edx, dword [esi + 0xa6ac]
mov byte [esp + 0x75], cl
movzx ecx, byte [esi + 0xa6b4]
mov byte [esp + 0x74], al
mov eax, dword [esi + 0xa6b0]
mov byte [esp + 0x80], cl
movzx ecx, byte [esi + 0xa6c0]
mov dword [esp + 0x78], edx
mov dx, word [esi + 0xa6b8]
mov dword [esp + 0x7c], eax
mov ax, word [esi + 0xa6bc]
mov word [esp + 0x82], dx
mov edx, dword [esi + 0xa6c4]
mov word [esp + 0x84], ax
mov eax, dword [esi + 0xa6c8]
mov byte [esp + 0x86], cl
push 2
mov ecx, esi
mov dword [esp + 0x8c], edx
mov dword [esp + 0x90], eax
call fcn.004f6ab0
cmp dword [edi + 0x18], 0x10
mov cx, word [esi + 0xa670]
mov edx, dword [esi + 0xa7a8]
mov word [esp + 0x90], ax
mov eax, dword [edx + 0x1c]
mov word [esp + 0x92], cx
jb 0x4fcec8
mov ecx, dword [edi + 4]
jmp 0x4fcecb
lea ecx, [edi + 4]
mov edx, dword [eax]
push ebx
push ebp
push ecx
push eax
mov eax, dword [edx + 0x118]
call eax
mov cl, byte [esi + 0xa6cc]
mov edx, dword [esp + 0x1c]
mov word [esp + 0x94], ax
mov eax, dword [esi + 0xa7a8]
mov byte [esp + 0x96], cl
mov ecx, dword [eax + 0x50]
movzx ebp, word [ecx + 0xb90]
push ebp
push 0
push 0x6817d15c
push 0x6817d154
mov dword [esp + 0xa8], edx
call fcn.004f7e90
push ebp
push 0
push 0x6817ca54
push 0x6817d154
mov dword [esp + 0x40], eax
call fcn.004f7e90
add esp, 0x20
test eax, eax
jne 0x4fcf3e
mov eax, dword [esp + 0x20]
jmp 0x4fcf48
mov ecx, dword [esp + 0x20]
cmp ecx, eax
ja 0x4fcf48
mov eax, ecx
mov ecx, dword [esi + 0xa6d0]
shr eax, 0xa
test ecx, ecx
mov word [esp + 0x9c], ax
je 0x4fcfbb
mov ebp, dword [esi + 0xa6d8]
test ebp, ebp
je 0x4fcfbb
mov eax, dword [esi + 0xa6dc]
imul eax, eax, 0x64
xor edx, edx
div ebp
mov ebp, 0x64
xor edx, edx
sub ebp, eax
mov eax, dword [esi + 0xa6d4]
imul eax, eax, 0x64
div ecx
mov edx, 0x64
mov ecx, 0x2710
sub edx, eax
imul ebp, edx
sub ecx, ebp
mov eax, 0x51eb851f
mul ecx
shr edx, 5
cmp edx, 0x64
jbe 0x4fcfb2
mov byte [esp + 0x9e], 0x64
jmp 0x4fcfea
mov byte [esp + 0x9e], dl
jmp 0x4fcfea
mov ebp, dword [esi + 0xa6d8]
test ebp, ebp
je 0x4fcfea
test ecx, ecx
jne 0x4fcfea
mov eax, dword [esi + 0xa6dc]
imul eax, eax, 0x64
xor edx, edx
div ebp
mov byte [esp + 0x9e], 0x64
cmp eax, 0x64
ja 0x4fcfea
mov byte [esp + 0x9e], al
mov eax, dword [esi + 0xa6e8]
cmp eax, 4
jb 0x4fcffa
mov eax, 4
test eax, eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], 0
je 0x4fd07a
lea ebx, [ebx]
mov eax, dword [esi + 0xa6e4]
mov ebp, dword [eax]
cmp ebp, eax
jne 0x4fd021
call fcn.0051fb05
mov edx, dword [ebp + 8]
mov eax, dword [esp + 0x20]
mov dword [esp + eax*4 + 0xa0], edx
mov eax, dword [esi + 0xa6e4]
mov ebp, dword [eax]
cmp ebp, eax
jne 0x4fd048
call fcn.0051fb05
cmp ebp, dword [esi + 0xa6e4]
je 0x4fd069
mov eax, dword [ebp + 4]
mov ecx, dword [ebp]
mov dword [eax], ecx
mov edx, dword [ebp]
mov eax, dword [ebp + 4]
push ebp
mov dword [edx + 4], eax
call fcn.0051ed44
add esp, 4
add dword [esi + 0xa6e8], 0xffffffff
mov eax, dword [esp + 0x20]
add eax, 1
cmp eax, dword [esp + 0x1c]
mov dword [esp + 0x20], eax
jne 0x4fd010
xor al, al
cmp byte [esi + 0xa752], al
mov byte [esp + 0xb0], 0
mov byte [esp + 0xb1], 0
je 0x4fd0a1
cmp byte [esi + 0xa753], al
setne al
add al, 1
jmp 0x4fd0ac
cmp byte [esi + 0xa753], 0
je 0x4fd0ac
mov al, 3
cmp dword [edi + 0x18], 0x10
mov cx, word [esi + 0xa750]
mov edx, dword [esi + 0xa7a8]
mov byte [esp + 0xb2], al
mov eax, dword [edx + 0x1c]
mov word [esp + 0xb4], cx
jb 0x4fd0d6
mov edx, dword [edi + 4]
jmp 0x4fd0d9
lea edx, [edi + 4]
mov ebp, dword [eax]
push ebx
lea ecx, [esi + 8]
push ecx
push edx
push eax
mov eax, dword [ebp + 0x50]
call eax
mov ebp, eax
test ebp, ebp
je 0x4fd177
cmp dword [edi + 0x18], 0x10
mov ecx, dword [esi + 0xa7a8]
mov eax, dword [ecx + 0x1c]
jb 0x4fd109
mov edx, dword [edi + 4]
mov dword [esp + 0x1c], edx
jmp 0x4fd110
lea ecx, [edi + 4]
mov dword [esp + 0x1c], ecx
mov edx, dword [eax]
mov edx, dword [edx + 0x58]
push ebx
lea ecx, [esi + 8]
push ecx
mov ecx, dword [esp + 0x24]
push ecx
push eax
call edx
imul eax, eax, 0x64
xor edx, edx
div ebp
cmp eax, 0x64
jbe 0x4fd138
mov byte [esp + 0xb6], 0x64
jmp 0x4fd177
cmp dword [edi + 0x18], 0x10
mov eax, dword [esi + 0xa7a8]
mov ecx, dword [eax + 0x1c]
jb 0x4fd150
mov edx, dword [edi + 4]
mov dword [esp + 0x1c], edx
jmp 0x4fd157
lea eax, [edi + 4]
mov dword [esp + 0x1c], eax
mov edx, dword [ecx]
push ebx
lea eax, [esi + 8]
push eax
mov eax, dword [esp + 0x24]
push eax
push ecx
mov ecx, dword [edx + 0x58]
call ecx
imul eax, eax, 0x64
xor edx, edx
div ebp
mov byte [esp + 0xb6], al
cmp dword [esi + 0xa344], 0
mov edx, dword [esp + 0x14]
mov al, byte [esp + 0x27]
mov dword [esp + 0xb8], edx
mov byte [esp + 0xbc], al
mov byte [esp + 0x1a], 0
je 0x4fd1a9
cmp dword [esi + 0xa348], 0
jne 0x4fd1a9
mov byte [esp + 0x1a], 1
mov eax, 1
add word [0x6818a124], ax
mov word [esp + 0xcc], 0xde
mov dword [esp + 0xc4], 0xab4130
jne 0x4fd1d2
mov word [0x6818a124], ax
mov cx, word [0x6818a124]
push 0x45a
lea edx, [esp + 0xd2]
push 0
push edx
mov word [esp + 0xd6], cx
call fcn.0051f6e0
add esp, 0xc
lea eax, [esp + 0x528]
push eax
mov dword [esp + 0xc4], 0xe
mov word [esp + 0xcc], 0x29
call dword [0x6817a064]
push 0x40
lea ecx, [esp + 0x544]
push 0x6817c934
push ecx
mov byte [esp + 0x59c], 0xc
mov word [esp + 0xd4], 0x44
call fcn.0051f890
mov eax, dword [esi + 0xa7a8]
mov word [esp + 0x58c], 0x1f40
mov edx, dword [eax + 0x50]
mov ecx, dword [edx + 0xcec]
mov dword [esp + 0xe0], ecx
mov edx, dword [eax + 0x50]
mov ax, word [edx + 0xcf0]
mov ebp, 0x10
add esp, 0xc
cmp dword [edi + 0x18], ebp
mov word [esp + 0x124], ax
jb 0x4fd285
mov eax, dword [edi + 4]
jmp 0x4fd288
lea eax, [edi + 4]
push 0x40
push eax
lea ecx, [esp + 0xea]
push ecx
call fcn.0051f890
mov edx, dword [esi + 0xa7a8]
mov eax, dword [edx + 0x1c]
add esp, 0xc
cmp dword [edi + 0x18], ebp
jb 0x4fd2ae
mov edx, dword [edi + 4]
jmp 0x4fd2b1
lea edx, [edi + 4]
mov ebp, dword [eax]
push ebx
lea ecx, [esi + 8]
push ecx
push edx
push eax
mov eax, dword [ebp + 0x68]
call eax
mov ebp, dword [0x6817a06c]
lea ecx, [esp + 0x528]
push ecx
mov dword [esp + 0xdc], eax
call ebp
lea edx, [esp + 0x38]
test edx, edx
je 0x4fd37f
mov bx, word [esp + 0xd2]
cmp bx, 0x375
jae 0x4fd37f
push 0x1f1
lea ecx, [esp + 0xc4]
call fcn.004f4610
test eax, eax
je 0x4fd32c
mov cl, byte [eax + 2]
cmp cl, 0x88
jb 0x4fd32c
jne 0x4fd37f
push 0x88
lea ecx, [esp + 0x3c]
push ecx
add eax, 3
push eax
call fcn.0051ed60
add esp, 0xc
jmp 0x4fd37f
movzx eax, bx
lea eax, [esp + eax + 0x128]
push 0x88
lea edx, [esp + 0x3c]
mov word [eax], 0x1f1
mov byte [eax + 2], 0x88
push edx
add eax, 3
push eax
call fcn.0051ed60
mov ax, word [esp + 0xde]
add ax, 0x8b
mov word [esp + 0xde], ax
movzx eax, ax
add eax, 0x68
add esp, 0xc
add word [esp + 0xe0], 1
mov dword [esp + 0xc0], eax
lea ecx, [esp + 0x528]
push ecx
call dword [0x6817a070]
lea edx, [esp + 0x528]
push edx
lea ebx, [esi + 0xa6ec]
call ebp
test ebx, ebx
je 0x4fd42d
mov bp, word [esp + 0xd2]
cmp bp, 0x3bd
jae 0x4fd42d
push 0x61
lea ecx, [esp + 0xc4]
call fcn.004f4610
test eax, eax
je 0x4fd3e1
mov cl, byte [eax + 2]
cmp cl, 0x40
jb 0x4fd3e1
jne 0x4fd42d
push 0x40
add eax, 3
push ebx
push eax
call fcn.0051ed60
add esp, 0xc
jmp 0x4fd42d
movzx eax, bp
lea eax, [esp + eax + 0x128]
push 0x40
mov word [eax], 0x61
mov byte [eax + 2], 0x40
add eax, 3
push ebx
push eax
call fcn.0051ed60
mov ax, word [esp + 0xde]
add ax, 0x43
mov word [esp + 0xde], ax
movzx eax, ax
add eax, 0x68
add esp, 0xc
add word [esp + 0xe0], 1
mov dword [esp + 0xc0], eax
mov ebp, dword [0x6817a070]
lea ecx, [esp + 0x528]
push ecx
call ebp
lea edx, [esp + 0x528]
push edx
call dword [0x6817a06c]
lea eax, [esp + 0x1a]
test eax, eax
je 0x4fd4ce
mov bx, word [esp + 0xd2]
cmp bx, 0x3fc
jae 0x4fd4ce
push 0x1f8
lea ecx, [esp + 0xc4]
call fcn.004f4610
test eax, eax
je 0x4fd48a
mov cl, byte [eax + 2]
cmp cl, 1
jb 0x4fd48a
jne 0x4fd4ce
mov cl, byte [esp + 0x1a]
mov byte [eax + 3], cl
jmp 0x4fd4ce
mov dl, byte [esp + 0x1a]
movzx eax, bx
lea eax, [esp + eax + 0x128]
mov word [eax], 0x1f8
mov byte [eax + 2], 1
mov byte [eax + 3], dl
mov ax, word [esp + 0xd2]
add ax, 4
mov word [esp + 0xd2], ax
movzx eax, ax
add eax, 0x68
add word [esp + 0xe0], 1
mov dword [esp + 0xc0], eax
lea ecx, [esp + 0x528]
push ecx
call ebp
mov eax, dword [esi + 0xa7a8]
test eax, eax
je 0x4fd4fc
mov eax, dword [eax + 0x50]
test eax, eax
je 0x4fd4fc
mov edx, dword [eax + 0x118]
push edx
lea ecx, [esp + 0xc4]
call fcn.004f4700
lea eax, [esp + 0x528]
push eax
call dword [0x6817a068]
cmp dword [esi + 0xa880], 0x10
jb 0x4fd522
mov eax, dword [esi + 0xa86c]
push eax
call fcn.0051ed44
add esp, 4
mov ebp, 0xf
mov dword [esi + 0xa880], ebp
mov dword [esi + 0xa87c], 0
mov byte [esi + 0xa86c], 0
cmp dword [edi + 0x18], 0x10
jb 0x4fd550
mov eax, dword [edi + 4]
push eax
call fcn.0051ed44
add esp, 4
xor ebx, ebx
lea ecx, [esi + 0xa738]
mov dword [edi + 0x18], ebp
mov dword [edi + 0x14], ebx
push ecx
mov byte [edi + 4], bl
call dword [0x6817a068]
mov ecx, dword [esi + 0xa730]
mov eax, dword [ecx]
mov dword [ecx], ecx
mov ecx, dword [esi + 0xa730]
mov dword [ecx + 4], ecx
cmp eax, dword [esi + 0xa730]
mov dword [esi + 0xa734], ebx
je 0x4fd5a5
lea esp, [esp]
mov edi, dword [eax]
push eax
call fcn.0051ed44
add esp, 4
cmp edi, dword [esi + 0xa730]
mov eax, edi
jne 0x4fd590
mov eax, dword [esi + 0xa730]
push eax
call fcn.0051ed44
mov dword [esi + 0xa730], ebx
mov ecx, dword [esi + 0xa6e4]
mov eax, dword [ecx]
mov dword [ecx], ecx
mov ecx, dword [esi + 0xa6e4]
mov dword [ecx + 4], ecx
add esp, 4
cmp eax, dword [esi + 0xa6e4]
mov dword [esi + 0xa6e8], ebx
je 0x4fd5f5
jmp 0x4fd5e0
mov edi, dword [eax]
push eax
call fcn.0051ed44
add esp, 4
cmp edi, dword [esi + 0xa6e4]
mov eax, edi
jne 0x4fd5e0
mov eax, dword [esi + 0xa6e4]
push eax
call fcn.0051ed44
lea edi, [esi + 0xa684]
mov dword [esi + 0xa6e4], ebx
mov eax, dword [edi + 4]
add esp, 4
cmp eax, ebx
je 0x4fd633
mov edx, dword [esp + 0x2c]
mov ecx, dword [edi + 8]
push edx
push edi
push ecx
push eax
call fcn.004f7800
mov eax, dword [edi + 4]
push eax
call fcn.0051ed44
add esp, 0x14
mov dword [edi + 4], ebx
mov dword [edi + 8], ebx
mov dword [edi + 0xc], ebx
mov eax, dword [esi + 0xa314]
cmp eax, ebx
lea edi, [esi + 0xa310]
je 0x4fd668
mov edx, dword [esp + 0x2c]
mov ecx, dword [edi + 8]
push edx
push edi
push ecx
push eax
call fcn.004f7800
mov eax, dword [edi + 4]
push eax
call fcn.0051ed44
add esp, 0x14
mov dword [edi + 4], ebx
mov dword [edi + 8], ebx
mov dword [edi + 0xc], ebx
mov edi, 0x10
cmp dword [esi + 0xa2e8], edi
jb 0x4fd68d
mov eax, dword [esi + 0xa2d4]
push eax
call fcn.0051ed44
add esp, 4
mov dword [esi + 0xa2e8], ebp
mov dword [esi + 0xa2e4], ebx
mov byte [esi + 0xa2d4], 0
cmp dword [esi + 0xa294], edi
jb 0x4fd6b7
mov eax, dword [esi + 0xa280]
push eax
call fcn.0051ed44
add esp, 4
mov dword [esi + 0xa294], ebp
mov dword [esi + 0xa290], ebx
lea ecx, [esi + 0xa268]
mov byte [esi + 0xa280], 0
mov byte [esp + 0x590], 1
call fcn.0051e3f0
push 0x68138d20
push 5
push 0x1fd4
lea eax, [esi + 0x2c]
push eax
mov byte [esp + 0x5a0], 0
call fcn.0051f827
mov dword [esi], 0x6817c928
mov ecx, dword [esp + 0x588]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x570]
xor ecx, esp
call fcn.0051f4e2
add esp, 0x580
ret