Function at 0x46e4c0
Capabilities:
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x549ce3
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x30
push ebx
push ebp
push esi
xor ebx, ebx
push edi
mov esi, ecx
mov dword [esp + 0x10], ebx
call fcn.00411ee0
mov eax, dword [esp + 0x50]
push eax
lea ecx, [esi + 0x20]
call fcn.0045ff00
mov ecx, dword [0x5bdf94]
mov edx, dword [ecx]
call dword [edx + 0x40]
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x44]
fld dword [0x5bf368]
call fcn.004ed938
imul eax, eax, 0x3e8
mov dword [esp + 0x50], eax
lea eax, [esp + 0x50]
push eax
push 0x56e370
lea ecx, [esp + 0x30]
call fcn.00405170
mov dword [esp + 0x48], ebx
push ecx
lea edx, [esp + 0x54]
mov ecx, esp
mov dword [esp + 0x18], esp
push edx
call fcn.00440040
mov byte [esp + 0x4c], bl
lea eax, [esp + 0x2c]
push eax
call fcn.0046bfc0
mov ecx, eax
call fcn.004e5130
or ebp, 0xffffffff
mov dword [esp + 0x48], ebp
mov eax, dword [esp + 0x28]
cmp eax, ebx
je 0x46e572
push eax
call fcn.004ed9bb
add esp, 4
fld dword [0x5bf36c]
call fcn.004ed938
imul eax, eax, 0x3e8
lea ecx, [esp + 0x50]
push ecx
push 0x56e35c
lea ecx, [esp + 0x30]
mov dword [esp + 0x58], eax
call fcn.00405170
mov dword [esp + 0x48], 3
push ecx
lea edx, [esp + 0x54]
mov ecx, esp
mov dword [esp + 0x18], esp
push edx
call fcn.00440040
mov byte [esp + 0x4c], 3
lea eax, [esp + 0x2c]
push eax
call fcn.0046bfc0
mov ecx, eax
call fcn.004e5130
mov dword [esp + 0x48], ebp
mov eax, dword [esp + 0x28]
cmp eax, ebx
je 0x46e5de
push eax
call fcn.004ed9bb
add esp, 4
lea ecx, [esp + 0x50]
push ecx
push 0x56e34c
lea ecx, [esp + 0x30]
call fcn.00405170
mov dword [esp + 0x48], 6
push ecx
lea edi, [esi + 0x54]
mov ecx, esp
mov dword [esp + 0x54], esp
push edi
call fcn.00440040
mov byte [esp + 0x4c], 6
lea edx, [esp + 0x2c]
push edx
call fcn.0046bfc0
mov ecx, eax
call fcn.004e5130
mov dword [esp + 0x48], ebp
mov eax, dword [esp + 0x28]
cmp eax, ebx
je 0x46e634
push eax
call fcn.004ed9bb
add esp, 4
mov ecx, esi
call fcn.00469a30
lea eax, [esp + 0x50]
push eax
push 0x56e338
lea ecx, [esp + 0x30]
call fcn.00405170
mov dword [esp + 0x48], 9
push ecx
lea edx, [esi + 0x8c]
mov ecx, esp
mov dword [esp + 0x54], esp
push edx
call fcn.00468250
mov byte [esp + 0x4c], 9
lea eax, [esp + 0x2c]
push eax
call fcn.0046bfc0
mov ecx, eax
call fcn.004e5130
mov dword [esp + 0x48], ebp
mov eax, dword [esp + 0x28]
cmp eax, ebx
je 0x46e694
push eax
call fcn.004ed9bb
add esp, 4
lea ecx, [esp + 0x50]
push ecx
push 0x56e320
lea ecx, [esp + 0x30]
call fcn.00405170
mov dword [esp + 0x48], 0xc
push 0x5bf728
lea edx, [esp + 0x2c]
push edx
lea eax, [esp + 0x58]
push eax
call fcn.00464630
mov ecx, dword [esp + 0x5c]
add ecx, 0x1c
push ecx
call fcn.0043fec0
add esp, 0x10
mov dword [esp + 0x50], eax
mov dword [esp + 0x48], ebp
mov eax, dword [esp + 0x28]
cmp eax, ebx
je 0x46e6ec
push eax
call fcn.004ed9bb
add esp, 4
fild dword [edi]
fimul dword [esp + 0x50]
fmul dword [0x56c814]
call fcn.004ed938
mov dword [esi + 0x88], eax
mov edx, dword [0x5be22c]
mov dword [esp + 0x14], eax
mov eax, dword [edx + 0x7c4]
inc eax
mov dword [esp + 0x50], eax
fild dword [esp + 0x50]
fmul dword [0x56e31c]
fadd dword [0x56933c]
fimul dword [esp + 0x14]
call fcn.004ed938
lea ebp, [esi + 0x64]
mov dword [esi + 0x88], eax
mov eax, dword [ebp + 4]
mov ecx, dword [ebp]
push eax
push ecx
mov ecx, ebp
call fcn.00469cf0
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x48], 0xf
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov byte [esp + 0x48], 0x11
push 0xc
call fcn.004ed9ad
add esp, 4
mov dword [esp + 0x50], eax
mov cl, 0x12
mov byte [esp + 0x48], cl
cmp eax, ebx
je 0x46e78c
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
mov byte [esp + 0x48], cl
jmp 0x46e78e
xor eax, eax
mov byte [esp + 0x48], 0x11
push eax
lea ecx, [esp + 0x1c]
call fcn.0046c2c0
lea eax, [esp + 0x50]
push eax
push 0x56e30c
lea ecx, [esp + 0x30]
call fcn.00405170
mov byte [esp + 0x48], 0x15
push ebx
push 0x5ad008
push 0x5acfd0
push ebx
lea ecx, [esp + 0x38]
push ecx
mov ecx, esi
call fcn.0041c000
push eax
call fcn.004ef35e
add esp, 0x14
mov dword [esp + 0x50], eax
mov byte [esp + 0x48], 0x11
mov eax, dword [esp + 0x28]
cmp eax, ebx
je 0x46e7f0
push eax
call fcn.004ed9bb
add esp, 4
push 0xa4
call fcn.004ed9ad
mov edi, eax
add esp, 4
mov dword [esp + 0x14], edi
mov byte [esp + 0x48], 0x17
test edi, edi
je 0x46e857
lea edx, [esp + 0x50]
push edx
push 0x56e2e0
lea ecx, [esp + 0x30]
mov dword [esp + 0x18], 1
call fcn.00405170
mov byte [esp + 0x48], 0x18
mov eax, dword [esp + 0x50]
push eax
lea ecx, [esp + 0x2c]
push ecx
mov ebx, 3
lea ecx, [esi + 0x70]
mov dword [esp + 0x18], ebx
call fcn.0046d900
mov edx, dword [esi + 0x4c]
push eax
push edx
push 0
mov ecx, edi
call fcn.0046c380
jmp 0x46e859
xor eax, eax
mov dword [esp + 0x48], 0x19
push eax
lea ecx, [esp + 0x24]
call fcn.0046b9e0
mov dword [esp + 0x48], 0x11
test bl, 2
je 0x46e895
and ebx, 0xfffffffd
mov dword [esp + 0x10], ebx
mov byte [esp + 0x48], 0x11
mov eax, dword [esp + 0x28]
test eax, eax
je 0x46e895
push eax
call fcn.004ed9bb
add esp, 4
test bl, 1
je 0x46e8a1
and ebx, 0xfffffffe
mov dword [esp + 0x10], ebx
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx]
push 1
call dword [eax + 8]
sub esp, 8
lea edx, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x58], esp
push edx
call fcn.00467350
mov byte [esp + 0x50], 0x1b
mov ecx, dword [esp + 0x20]
mov byte [esp + 0x50], 0x11
call fcn.0046b090
mov ecx, dword [ebp + 8]
mov eax, dword [ebp + 4]
cmp eax, ecx
lea ecx, [esp + 0x18]
je 0x46e8f5
push ecx
push eax
call fcn.004682c0
mov eax, dword [ebp + 4]
add esp, 8
add eax, 8
mov dword [ebp + 4], eax
jmp 0x46e907
push 1
push 1
lea edx, [esp + 0x58]
push edx
push ecx
push eax
mov ecx, ebp
call fcn.0046a630
push 0xc
call fcn.004ed9ad
add esp, 4
mov dword [esp + 0x50], eax
mov cl, 0x1c
mov byte [esp + 0x48], cl
xor edi, edi
cmp eax, edi
je 0x46e92f
mov dword [eax], edi
mov dword [eax + 4], edi
mov dword [eax + 8], edi
mov byte [esp + 0x48], cl
jmp 0x46e931
xor eax, eax
mov byte [esp + 0x48], 0x11
push eax
lea ecx, [esp + 0x1c]
call fcn.0046c2c0
lea edx, [esp + 0x50]
push edx
push 0x56e34c
lea ecx, [esp + 0x30]
call fcn.00405170
mov byte [esp + 0x48], 0x1f
push edi
push 0x5ad008
push 0x5acfd0
push edi
lea eax, [esp + 0x38]
push eax
mov ecx, esi
call fcn.0041c000
push eax
call fcn.004ef35e
add esp, 0x14
mov dword [esp + 0x50], eax
mov byte [esp + 0x48], 0x11
mov eax, dword [esp + 0x28]
cmp eax, edi
je 0x46e993
push eax
call fcn.004ed9bb
add esp, 4
push 0xa4
call fcn.004ed9ad
mov edi, eax
add esp, 4
mov dword [esp + 0x14], edi
mov byte [esp + 0x48], 0x21
test edi, edi
je 0x46e9f7
lea ecx, [esp + 0x50]
push ecx
or ebx, 4
push 0x56e2a8
lea ecx, [esp + 0x30]
mov dword [esp + 0x18], ebx
call fcn.00405170
mov byte [esp + 0x48], 0x22
mov edx, dword [esp + 0x50]
push edx
lea eax, [esp + 0x2c]
or ebx, 8
push eax
lea ecx, [esi + 0x70]
mov dword [esp + 0x18], ebx
call fcn.0046d900
mov ecx, dword [esi + 0x54]
push eax
push ecx
push 0
mov ecx, edi
call fcn.0046c380
jmp 0x46e9f9
xor eax, eax
mov dword [esp + 0x48], 0x23
push eax
lea ecx, [esp + 0x24]
call fcn.0046b9e0
mov dword [esp + 0x48], 0x11
test bl, 8
je 0x46ea35
and ebx, 0xfffffff7
mov dword [esp + 0x10], ebx
mov byte [esp + 0x48], 0x11
mov eax, dword [esp + 0x28]
test eax, eax
je 0x46ea35
push eax
call fcn.004ed9bb
add esp, 4
test bl, 4
je 0x46ea41
and ebx, 0xfffffffb
mov dword [esp + 0x10], ebx
sub esp, 8
lea edx, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x58], esp
push edx
call fcn.00467350
mov byte [esp + 0x50], 0x25
mov ecx, dword [esp + 0x20]
mov byte [esp + 0x50], 0x11
call fcn.0046b090
mov ecx, dword [ebp + 8]
mov eax, dword [ebp + 4]
cmp eax, ecx
lea ecx, [esp + 0x18]
je 0x46ea8a
push ecx
push eax
call fcn.004682c0
mov eax, dword [ebp + 4]
add esp, 8
add eax, 8
mov dword [ebp + 4], eax
jmp 0x46ea9c
push 1
push 1
lea edx, [esp + 0x58]
push edx
push ecx
push eax
mov ecx, ebp
call fcn.0046a630
push 0xc
call fcn.004ed9ad
add esp, 4
mov dword [esp + 0x50], eax
mov cl, 0x26
mov byte [esp + 0x48], cl
xor edi, edi
cmp eax, edi
je 0x46eac4
mov dword [eax], edi
mov dword [eax + 4], edi
mov dword [eax + 8], edi
mov byte [esp + 0x48], cl
jmp 0x46eac6
xor eax, eax
mov byte [esp + 0x48], 0x11
push eax
lea ecx, [esp + 0x1c]
call fcn.0046c2c0
lea edx, [esp + 0x50]
push edx
push 0x56e2fc
lea ecx, [esp + 0x30]
call fcn.00405170
mov byte [esp + 0x48], 0x29
push edi
push 0x5ad008
push 0x5acfd0
push edi
lea eax, [esp + 0x38]
push eax
mov ecx, esi
call fcn.0041c000
push eax
call fcn.004ef35e
add esp, 0x14
mov dword [esp + 0x50], eax
mov byte [esp + 0x48], 0x11
mov eax, dword [esp + 0x28]
cmp eax, edi
je 0x46eb28
push eax
call fcn.004ed9bb
add esp, 4
push 0xa4
call fcn.004ed9ad
mov ebp, eax
add esp, 4
mov dword [esp + 0x14], ebp
mov byte [esp + 0x48], 0x2b
test ebp, ebp
je 0x46eb8b
lea ecx, [esp + 0x50]
push ecx
or ebx, 0x10
push 0x56e2d0
lea ecx, [esp + 0x30]
mov dword [esp + 0x18], ebx
call fcn.00405170
mov byte [esp + 0x48], 0x2c
mov edx, dword [esp + 0x50]
mov edi, dword [esi + 0x50]
push edx
lea eax, [esp + 0x2c]
or ebx, 0x20
push eax
lea ecx, [esi + 0x70]
mov dword [esp + 0x18], ebx
call fcn.0046d900
push eax
push edi
push edi
mov ecx, ebp
call fcn.0046c380
jmp 0x46eb8d
xor eax, eax
mov dword [esp + 0x48], 0x2d
push eax
lea ecx, [esp + 0x24]
call fcn.0046b9e0
mov ebp, 0x11
mov dword [esp + 0x48], ebp
test bl, 0x20
je 0x46ebca
and ebx, 0xffffffdf
mov dword [esp + 0x10], ebx
mov byte [esp + 0x48], 0x11
mov eax, dword [esp + 0x28]
test eax, eax
je 0x46ebca
push eax
call fcn.004ed9bb
add esp, 4
test bl, 0x10
je 0x46ebd6
and ebx, 0xffffffef
mov dword [esp + 0x10], ebx
sub esp, 8
lea edx, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x58], esp
push edx
call fcn.00467350
mov byte [esp + 0x50], 0x2f
mov ecx, dword [esp + 0x20]
mov byte [esp + 0x50], 0x11
call fcn.0046b090
push 0x64
call fcn.004ed9ad
mov edi, eax
add esp, 4
mov dword [esp + 0x50], edi
mov byte [esp + 0x48], 0x30
test edi, edi
je 0x46ec5b
lea eax, [esp + 0x50]
push eax
or ebx, 0x40
push 0x56e2bc
lea ecx, [esp + 0x30]
mov dword [esp + 0x18], ebx
call fcn.00405170
mov byte [esp + 0x48], 0x31
push 0
lea ecx, [esp + 0x2c]
push ecx
or ebx, 0x80
lea ecx, [esi + 0x70]
mov dword [esp + 0x18], ebx
call fcn.0046d900
push eax
lea edx, [esi + 0x34]
push edx
mov ecx, edi
call fcn.0046be30
jmp 0x46ec5d
xor eax, eax
mov dword [esp + 0x48], 0x32
push eax
lea ecx, [esp + 0x24]
call fcn.0046b640
mov dword [esp + 0x48], ebp
test bl, bl
jns 0x46ec97
and ebx, 0xffffff7f
mov dword [esp + 0x10], ebx
mov byte [esp + 0x48], 0x11
mov eax, dword [esp + 0x28]
test eax, eax
je 0x46ec97
push eax
call fcn.004ed9bb
add esp, 4
test bl, 0x40
je 0x46eca3
and ebx, 0xffffffbf
mov dword [esp + 0x10], ebx
sub esp, 8
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
call fcn.00467350
mov byte [esp + 0x50], 0x34
mov ecx, dword [esp + 0x20]
mov byte [esp + 0x50], 0x11
call fcn.0046b090
mov ecx, dword [esi + 0x6c]
mov eax, dword [esi + 0x68]
lea edi, [esi + 0x64]
cmp eax, ecx
lea ecx, [esp + 0x18]
je 0x46ecef
push ecx
push eax
call fcn.004682c0
mov eax, dword [edi + 4]
add esp, 8
add eax, 8
mov dword [edi + 4], eax
jmp 0x46ed01
push 1
push 1
lea edx, [esp + 0x58]
push edx
push ecx
push eax
mov ecx, edi
call fcn.0046a630
push 0xc
call fcn.004ed9ad
add esp, 4
mov dword [esp + 0x50], eax
mov dl, 0x35
mov byte [esp + 0x48], dl
xor ecx, ecx
cmp eax, ecx
je 0x46ed29
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
mov byte [esp + 0x48], dl
jmp 0x46ed2b
xor eax, eax
mov byte [esp + 0x48], 0x11
push eax
lea ecx, [esp + 0x1c]
call fcn.0046c2c0
push 0xa4
call fcn.004ed9ad
mov edi, eax
add esp, 4
mov dword [esp + 0x50], edi
mov byte [esp + 0x48], 0x38
test edi, edi
je 0x46eda1
lea edx, [esp + 0x50]
push edx
or ebx, 0x100
push 0x56e27c
lea ecx, [esp + 0x30]
mov dword [esp + 0x18], ebx
call fcn.00405170
mov byte [esp + 0x48], 0x39
push 0
lea eax, [esp + 0x2c]
or ebx, 0x200
push eax
lea ecx, [esi + 0x70]
mov dword [esp + 0x18], ebx
call fcn.0046d900
mov ecx, dword [esi + 0x58]
push eax
push ecx
push 0
mov ecx, edi
call fcn.0046cff0
jmp 0x46eda3
xor eax, eax
mov dword [esp + 0x48], 0x3a
push eax
lea ecx, [esp + 0x24]
call fcn.0046ba60
mov dword [esp + 0x48], 0x11
test bh, 2
je 0x46ede2
and ebx, 0xfffffdff
mov dword [esp + 0x10], ebx
mov byte [esp + 0x48], 0x11
mov eax, dword [esp + 0x28]
test eax, eax
je 0x46ede2
push eax
call fcn.004ed9bb
add esp, 4
test bh, 1
je 0x46edf1
and ebx, 0xfffffeff
mov dword [esp + 0x10], ebx
mov ecx, dword [esp + 0x20]
mov edx, dword [ecx]
push 1
call dword [edx + 0x18]
sub esp, 8
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
call fcn.00467350
mov byte [esp + 0x50], 0x3c
mov ecx, dword [esp + 0x20]
mov byte [esp + 0x50], 0x11
call fcn.0046b090
mov ecx, dword [esi + 0x6c]
mov eax, dword [esi + 0x68]
lea ebp, [esi + 0x64]
cmp eax, ecx
lea ecx, [esp + 0x18]
je 0x46ee48
push ecx
push eax
call fcn.004682c0
mov eax, dword [ebp + 4]
add esp, 8
add eax, 8
mov dword [ebp + 4], eax
jmp 0x46ee5a
push 1
push 1
lea edx, [esp + 0x58]
push edx
push ecx
push eax
mov ecx, ebp
call fcn.0046a630
push 0xc
call fcn.004ed9ad
add esp, 4
mov dword [esp + 0x50], eax
mov dl, 0x3d
mov byte [esp + 0x48], dl
xor ecx, ecx
cmp eax, ecx
je 0x46ee82
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
mov byte [esp + 0x48], dl
jmp 0x46ee84
xor eax, eax
mov byte [esp + 0x48], 0x11
push eax
lea ecx, [esp + 0x1c]
call fcn.0046c2c0
push 0xa4
call fcn.004ed9ad
mov edi, eax
add esp, 4
mov dword [esp + 0x50], edi
mov byte [esp + 0x48], 0x40
test edi, edi
je 0x46eefa
lea edx, [esp + 0x50]
push edx
or ebx, 0x400
push 0x56e264
lea ecx, [esp + 0x30]
mov dword [esp + 0x18], ebx
call fcn.00405170
mov byte [esp + 0x48], 0x41
push 0
lea eax, [esp + 0x2c]
or ebx, 0x800
push eax
lea ecx, [esi + 0x70]
mov dword [esp + 0x18], ebx
call fcn.0046d900
mov ecx, dword [esi + 0x5c]
push eax
push ecx
push 0
mov ecx, edi
call fcn.0046cff0
jmp 0x46eefc
xor eax, eax
mov dword [esp + 0x48], 0x42
push eax
lea ecx, [esp + 0x24]
call fcn.0046ba60
mov dword [esp + 0x48], 0x11
test bh, 8
je 0x46ef3b
and ebx, 0xfffff7ff
mov dword [esp + 0x10], ebx
mov byte [esp + 0x48], 0x11
mov eax, dword [esp + 0x28]
test eax, eax
je 0x46ef3b
push eax
call fcn.004ed9bb
add esp, 4
test bh, 4
je 0x46ef4a
and ebx, 0xfffffbff
mov dword [esp + 0x10], ebx
mov ecx, dword [esp + 0x20]
mov edx, dword [ecx]
push 1
call dword [edx + 0x18]
sub esp, 8
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
call fcn.00467350
mov byte [esp + 0x50], 0x44
mov ecx, dword [esp + 0x20]
mov byte [esp + 0x50], 0x11
call fcn.0046b090
mov ecx, dword [ebp + 8]
mov eax, dword [ebp + 4]
cmp eax, ecx
lea ecx, [esp + 0x18]
je 0x46ef9e
push ecx
push eax
call fcn.004682c0
mov eax, dword [ebp + 4]
add esp, 8
add eax, 8
mov dword [ebp + 4], eax
jmp 0x46efb0
push 1
push 1
lea edx, [esp + 0x58]
push edx
push ecx
push eax
mov ecx, ebp
call fcn.0046a630
push 0xc
call fcn.004ed9ad
add esp, 4
mov dword [esp + 0x50], eax
mov cl, 0x45
mov byte [esp + 0x48], cl
xor edx, edx
cmp eax, edx
je 0x46efd8
mov dword [eax], edx
mov dword [eax + 4], edx
mov dword [eax + 8], edx
mov byte [esp + 0x48], cl
jmp 0x46efda
xor eax, eax
mov byte [esp + 0x48], 0x11
push eax
lea ecx, [esp + 0x1c]
call fcn.0046c2c0
push 0xa4
call fcn.004ed9ad
mov edi, eax
add esp, 4
mov dword [esp + 0x50], edi
mov byte [esp + 0x48], 0x48
test edi, edi
je 0x46f050
lea edx, [esp + 0x50]
push edx
or ebx, 0x1000
push 0x56e250
lea ecx, [esp + 0x30]
mov dword [esp + 0x18], ebx
call fcn.00405170
mov byte [esp + 0x48], 0x49
push 0
lea eax, [esp + 0x2c]
or ebx, 0x2000
push eax
lea ecx, [esi + 0x70]
mov dword [esp + 0x18], ebx
call fcn.0046d900
mov ecx, dword [esi + 0x60]
push eax
push ecx
push 0
mov ecx, edi
call fcn.0046cff0
jmp 0x46f052
xor eax, eax
mov dword [esp + 0x48], 0x4a
push eax
lea ecx, [esp + 0x24]
call fcn.0046ba60
mov dword [esp + 0x48], 0x11
test bh, 0x20
je 0x46f091
and ebx, 0xffffdfff
mov dword [esp + 0x10], ebx
mov byte [esp + 0x48], 0x11
mov eax, dword [esp + 0x28]
test eax, eax
je 0x46f091
push eax
call fcn.004ed9bb
add esp, 4
test bh, 0x10
je 0x46f0a0
and ebx, 0xffffefff
mov dword [esp + 0x10], ebx
mov ecx, dword [esp + 0x20]
mov edx, dword [ecx]
push 1
call dword [edx + 0x18]
sub esp, 8
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
call fcn.00467350
mov byte [esp + 0x50], 0x4c
mov ecx, dword [esp + 0x20]
mov byte [esp + 0x50], 0x11
call fcn.0046b090
mov ecx, dword [ebp + 8]
mov eax, dword [ebp + 4]
cmp eax, ecx
lea ecx, [esp + 0x18]
je 0x46f0f4
push ecx
push eax
call fcn.004682c0
mov eax, dword [ebp + 4]
add esp, 8
add eax, 8
mov dword [ebp + 4], eax
jmp 0x46f106
push 1
push 1
lea edx, [esp + 0x58]
push edx
push ecx
push eax
mov ecx, ebp
call fcn.0046a630
push 0xc
call fcn.004ed9ad
add esp, 4
mov dword [esp + 0x50], eax
mov cl, 0x4d
mov byte [esp + 0x48], cl
xor edx, edx
cmp eax, edx
je 0x46f12e
mov dword [eax], edx
mov dword [eax + 4], edx
mov dword [eax + 8], edx
mov byte [esp + 0x48], cl
jmp 0x46f130
xor eax, eax
mov byte [esp + 0x48], 0x11
push eax
lea ecx, [esp + 0x1c]
call fcn.0046c2c0
push 0x6c
call fcn.004ed9ad
mov edi, eax
add esp, 4
mov dword [esp + 0x50], edi
mov byte [esp + 0x48], 0x50
test edi, edi
je 0x46f1dd
lea edx, [esp + 0x50]
push edx
or ebx, 0x4000
push 0x56e34c
lea ecx, [esp + 0x3c]
mov dword [esp + 0x18], ebx
call fcn.00405170
mov byte [esp + 0x48], 0x51
lea eax, [esp + 0x50]
push eax
or ebx, 0x18000
push 0x56e2f0
lea ecx, [esp + 0x30]
mov dword [esp + 0x18], ebx
call fcn.00405170
mov ebp, 0x52
mov dword [esp + 0x48], ebp
mov eax, dword [esi + 0x7c]
sub esp, 8
mov ecx, esp
mov dword [esp + 0x1c], esp
or ebx, 0x20000
push eax
mov dword [esp + 0x1c], ebx
call fcn.00467130
mov dword [esp + 0x50], ebp
mov eax, dword [esi + 0x54]
lea ecx, [esp + 0x3c]
push ecx
lea edx, [esp + 0x34]
push edx
push 0
push eax
mov ecx, edi
call fcn.0046c5c0
jmp 0x46f1df
xor eax, eax
mov dword [esp + 0x48], 0x55
push eax
lea ecx, [esp + 0x24]
call fcn.0046bae0
mov eax, 0x54
mov dword [esp + 0x48], eax
test ebx, 0x20000
je 0x46f221
and ebx, 0xfffdffff
mov dword [esp + 0x10], ebx
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x28]
test eax, eax
je 0x46f221
push eax
call fcn.004ed9bb
add esp, 4
test ebx, 0x10000
je 0x46f233
and ebx, 0xfffeffff
mov dword [esp + 0x10], ebx
mov ebp, 0x11
mov dword [esp + 0x48], ebp
test bh, bh
jns 0x46f260
and ebx, 0xffff7fff
mov dword [esp + 0x10], ebx
mov byte [esp + 0x48], 0x11
mov eax, dword [esp + 0x34]
test eax, eax
je 0x46f260
push eax
call fcn.004ed9bb
add esp, 4
test bh, 0x40
je 0x46f26f
and ebx, 0xffffbfff
mov dword [esp + 0x10], ebx
mov ecx, dword [esp + 0x20]
mov edx, dword [ecx]
push 1
call dword [edx + 0x18]
sub esp, 8
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
call fcn.00467350
mov byte [esp + 0x50], 0x58
mov ecx, dword [esp + 0x20]
mov byte [esp + 0x50], 0x11
call fcn.0046b090
push 0x18
call fcn.004ed9ad
mov edi, eax
add esp, 4
mov dword [esp + 0x50], edi
mov byte [esp + 0x48], 0x59
test edi, edi
je 0x46f2dc
mov eax, dword [esi + 0x7c]
sub esp, 8
add eax, 8
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00467130
mov byte [esp + 0x50], 0x59
mov ecx, edi
call fcn.00467190
jmp 0x46f2de
xor eax, eax
mov byte [esp + 0x48], 0x11
push eax
lea ecx, [esp + 0x24]
call fcn.00469e40
mov ecx, dword [esp + 0x20]
mov edx, dword [ecx]
push 1
call dword [edx + 0x18]
sub esp, 8
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
call fcn.00467350
mov byte [esp + 0x50], 0x5b
mov ecx, dword [esp + 0x20]
mov byte [esp + 0x50], 0x11
call fcn.0046b090
push 0xa4
call fcn.004ed9ad
mov edi, eax
add esp, 4
mov dword [esp + 0x50], edi
mov byte [esp + 0x48], 0x5c
test edi, edi
je 0x46f388
lea ecx, [esp + 0x50]
push ecx
or ebx, 0x40000
push 0x56e294
lea ecx, [esp + 0x3c]
mov dword [esp + 0x18], ebx
call fcn.00405170
mov byte [esp + 0x48], 0x5d
push 0
lea edx, [esp + 0x38]
or ebx, 0x80000
push edx
lea ecx, [esi + 0x70]
mov dword [esp + 0x18], ebx
call fcn.0046d900
push eax
mov eax, dword [esi + 0x88]
push eax
push 0
mov ecx, edi
call fcn.0046cff0
jmp 0x46f38a
xor eax, eax
mov dword [esp + 0x48], 0x5e
push eax
lea ecx, [esp + 0x24]
call fcn.0046ba60
mov dword [esp + 0x48], ebp
test ebx, 0x80000
je 0x46f3be
mov byte [esp + 0x48], 0x11
mov eax, dword [esp + 0x34]
test eax, eax
je 0x46f3be
push eax
call fcn.004ed9bb
add esp, 4
mov ecx, dword [esp + 0x20]
mov edx, dword [ecx]
push 1
call dword [edx + 0x18]
sub esp, 8
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
call fcn.00467350
mov byte [esp + 0x50], 0x60
mov ecx, dword [esp + 0x20]
mov byte [esp + 0x50], 0x11
call fcn.0046b090
mov ecx, dword [esi + 0x6c]
mov eax, dword [esi + 0x68]
lea edi, [esi + 0x64]
cmp eax, ecx
lea ecx, [esp + 0x18]
je 0x46f415
push ecx
push eax
call fcn.004682c0
mov eax, dword [edi + 4]
add esp, 8
add eax, 8
mov dword [edi + 4], eax
jmp 0x46f427
push 1
push 1
lea edx, [esp + 0x58]
push edx
push ecx
push eax
mov ecx, edi
call fcn.0046a630
push 1
mov ecx, esi
call fcn.0046cab0
mov byte [esp + 0x48], 0xf
lea ecx, [esp + 0x20]
call fcn.00467260
mov dword [esp + 0x48], 0xffffffff
lea ecx, [esp + 0x18]
call fcn.00464ef0
mov ecx, dword [esp + 0x40]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x3c
ret 4