Function at 0x4ecc90
Capabilities:
Check os version
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
push esi
push dword [esp + 0x20]
push dword [esp + 0x20]
push dword [esp + 0x20]
push dword [esp + 0x20]
push dword [esp + 0x20]
push dword [esp + 0x20]
push dword [esp + 0x20]
call 0x56be80
mov esi, eax
add esp, 0x1c
cmp esi, 0xffffffd2
jne 0x4ecd29
mov edx, dword [0x72f0ac]
mov ecx, dword fs:[0x2c]
push edi
mov edi, dword [ecx + edx*4]
cmp byte [edi + 0x30], 0
jne 0x4eccdb
call fcn.00595db4
cmp dword [edi + 0x28], 0
jne 0x4ecd26
cmp byte [edi + 0x30], 0
jne 0x4eccf2
call fcn.00595db4
push 0
push 0x80000
push 0x8000
call fcn.00589e00
mov ecx, dword [edi + 0x28]
add esp, 0xc
mov dword [edi + 0x28], eax
test ecx, ecx
je 0x4ecd1f
push ecx
call fcn.00589f40
add esp, 4
pop edi
pop esi
jmp 0x56be80
mov eax, esi
pop edi
pop esi
ret
sub esp, 0x168
mov eax, dword [0x72b01c]
xor eax, esp
mov dword [esp + 0x164], eax
push ebx
push ebp
push esi
push edi
mov ecx, dword [esp + 0x17c]
mov edx, dword [esp + 0x194]
mov eax, dword [esp + 0x190]
mov ebx, dword [esp + 0x180]
mov esi, dword [esp + 0x184]
xor ebp, ebp
mov dword [esp + 0x10], ecx
xor ecx, ecx
mov dword [esp + 0x34], edx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ebx
mov dword [esp + 0x28], esi
mov dword [esp + 0x60], 0
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x50], ecx
mov dword [esp + 0x78], ecx
mov dword [esp + 0x38], ecx
mov dword [esp + 0x30], ecx
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x54], ecx
mov edi, dword [esp + 0x188]
mov dword [esp + 0x40], edi
test ebx, ebx
jne 0x56bf1e
test esi, esi
mov eax, 0x5e0b61
cmovne eax, ebx
mov ebx, eax
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x1c]
test dword [esp + 0x18c], 0x1fff9fc0
jne 0x56d219
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x56d212
test ebx, ebx
je 0x56d212
test eax, eax
je 0x56d212
lea eax, [edi + edi]
mov dword [esp + 0x84], eax
add eax, ebx
mov esi, eax
mov dword [esp + 0x8c], eax
lea eax, [esi - 2]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x28]
cmp eax, 0xffffffff
jne 0x56bf8d
push ebx
call fcn.0058f3c0
mov edx, dword [esp + 0x38]
add esp, 4
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x28], eax
mov dword [esp + 0x60], 1
lea eax, [ebx + eax*2]
mov dword [esp + 0x14], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x74], eax
cmp edi, dword [esp + 0x28]
jbe 0x56bfac
mov eax, 0xffffffdf
jmp 0x56d21e
cmp dword [ecx + 0x38], 0x50435245
je 0x56bfbf
mov eax, 0xffffffe1
jmp 0x56d21e
mov ecx, dword [ecx + 0x48]
mov eax, ecx
and al, 7
cmp al, 2
je 0x56bfd4
mov eax, 0xffffffe0
jmp 0x56d21e
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x18c]
shr ecx, 0xe
and ecx, 0xc
or ebx, ecx
mov dword [esp + 0x18c], ebx
cmp dword [eax + 0x10], ebp
je 0x56c002
test ebx, 0xbfffbfc0
jne 0x56c002
mov ebx, 1
jmp 0x56c004
xor ebx, ebx
mov ecx, dword [eax + 0x40]
mov eax, ecx
shr eax, 0x13
and eax, 1
mov dword [esp + 0x24], ecx
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x18c]
test al, 0x20
je 0x56c029
mov eax, 2
jmp 0x56c02f
shr eax, 4
and eax, 1
movzx eax, ax
mov word [esp + 0x10c], ax
test ax, ax
je 0x56c053
mov eax, ecx
or eax, dword [esp + 0x18c]
test eax, 0x20000000
jne 0x56d219
test edx, edx
je 0x56c06f
cmp dword [edx + 0x24], 0xffffffff
je 0x56c06f
test ecx, 0x800000
jne 0x56c06f
mov eax, 0xffffffc8
jmp 0x56d21e
mov eax, dword [esp + 0x1c]
test byte [eax + 0x2d], 1
je 0x56c09f
push dword [eax + 8]
mov edi, dword [eax + 4]
mov ecx, edi
push dword [eax + 0x10]
call dword [0x5cb3f0]
call edi
mov eax, dword [esp + 0x24]
add esp, 8
mov edi, dword [esp + 0x40]
mov ecx, dword [esp + 0x24]
and byte [eax + 0x2d], 0xfe
mov dword [eax + 0x28], ebp
lea edx, [eax + 0x28]
mov dword [esp + 0x5c], edx
mov edx, 0xdc00
mov dword [eax + 0x10], ebp
mov dword [esp + 0x44], 0xfc00
mov dword [esp + 0x48], edx
test ebx, ebx
je 0x56c1fb
cmp dword [esp + 0x18], ebp
je 0x56c178
test dword [esp + 0x18c], 0x40000000
jne 0x56c178
test ecx, 0x4000000
jne 0x56c178
mov ebp, 0xfc00
cmp esi, dword [esp + 0x14]
jae 0x56c106
mov ax, word [esi]
and ax, bp
cmp ax, dx
je 0x56c3a6
mov ebx, dword [esp + 0x10]
mov edx, dword [esp + 0x20]
movzx ecx, word [ebx + 0x64]
test ecx, ecx
je 0x56c13d
cmp esi, edx
jbe 0x56c13d
sub esi, 2
cmp esi, edx
jbe 0x56c138
mov edi, 0xdc00
mov ax, word [esi]
and ax, bp
cmp ax, di
jne 0x56c138
sub esi, 2
cmp esi, edx
ja 0x56c126
sub ecx, 1
jne 0x56c116
mov eax, dword [esp + 0x28]
mov edi, esi
mov ebp, dword [esp + 0x5c]
sub edi, edx
sar edi, 1
push ebp
sub eax, edi
push eax
push esi
call fcn.00592760
mov ecx, dword [esp + 0x28]
add esp, 0xc
mov dword [ecx + 0x30], eax
test eax, eax
je 0x56c16b
add dword [ebp], edi
jmp 0x56d21e
mov edi, dword [esp + 0x40]
mov ebp, 1
mov eax, ecx
jmp 0x56c17c
mov ebx, dword [esp + 0x10]
push dword [esp + 0x34]
push eax
push dword [esp + 0x194]
push edi
push dword [esp + 0x38]
push dword [esp + 0x34]
push ebx
call fcn.00589c20
mov ebx, eax
add esp, 0x1c
cmp ebx, 0xffffffd3
je 0x56c1fb
test ebx, ebx
js 0x56c1f4
test dword [esp + 0x18c], 0x4000
je 0x56c1f4
mov ecx, dword [esp + 0x60]
mov edi, dword [esp + 0x28]
mov ebp, dword [esp + 0x1c]
lea edi, [edi + ecx]
push dword [ebp + 8]
mov esi, dword [ebp]
add edi, edi
push edi
mov ecx, esi
call dword [0x5cb3f0]
call esi
add esp, 8
mov dword [ebp + 0x10], eax
test eax, eax
je 0x56c6b3
push edi
push dword [esp + 0x24]
push eax
call fcn.00597bd0
add esp, 0xc
or byte [ebp + 0x2d], 1
mov eax, ebx
jmp 0x56d21e
cmp dword [esp + 0x18], 0
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x120], ebx
je 0x56c3d0
test ebp, ebp
mov ebp, dword [esp + 0x24]
jne 0x56c3d4
test dword [esp + 0x18c], 0x40000000
je 0x56c236
test ebp, 0x4000000
je 0x56c3d4
mov edx, dword [esp + 0x14]
mov eax, ebp
xor ecx, ecx
and eax, 0x4000000
cmp esi, edx
jae 0x56c26b
test eax, eax
je 0x56c38d
nop
mov ax, word [esi]
and ax, word [esp + 0x44]
cmp ax, word [esp + 0x48]
jne 0x56c26b
add esi, 2
mov ecx, 1
cmp esi, edx
jb 0x56c250
mov edx, esi
mov dword [esp + 0x120], edx
test ecx, ecx
jne 0x56c2c2
mov eax, dword [esp + 0x10]
movzx ecx, word [eax + 0x64]
test ecx, ecx
je 0x56c2c2
cmp edx, ebx
jbe 0x56c2c2
sub edx, 2
mov dword [esp + 0x120], edx
cmp edx, ebx
jbe 0x56c2bd
nop word [eax + eax]
mov ax, word [edx]
and ax, word [esp + 0x44]
cmp ax, word [esp + 0x48]
jne 0x56c2bd
sub edx, 2
mov dword [esp + 0x120], edx
cmp edx, ebx
ja 0x56c2a0
sub ecx, 1
jne 0x56c284
push dword [esp + 0x5c]
mov eax, dword [esp + 0x2c]
mov ecx, edx
sub ecx, ebx
sar ecx, 1
sub eax, ecx
push eax
push edx
call fcn.00592760
mov edx, dword [esp + 0x28]
add esp, 0xc
mov dword [edx + 0x30], eax
test eax, eax
je 0x56c383
nop dword [eax + eax]
mov ecx, dword [esp + 0x120]
mov eax, dword [edx + 0x28]
sub ecx, ebx
sar ecx, 1
add eax, ecx
lea ecx, [edx + 0x28]
mov dword [ecx], eax
test ebp, 0x4000000
je 0x56c3c8
cmp dword [edx + 0x30], 0
jg 0x56c3c8
lea edx, [ebx + eax*2]
mov dword [esp + 0x14], edx
cmp edx, esi
jae 0x56c3be
add edx, 2
mov dword [esp + 0x120], edx
cmp edx, esi
jae 0x56c35d
nop dword [eax + eax]
mov ax, word [edx]
and ax, word [esp + 0x44]
cmp ax, word [esp + 0x48]
jne 0x56c35d
add edx, 2
mov dword [esp + 0x120], edx
cmp edx, esi
jb 0x56c340
mov eax, dword [esp + 0x28]
push ecx
mov ecx, edx
sub ecx, ebx
sar ecx, 1
sub eax, ecx
push eax
push edx
call fcn.00592760
mov edx, dword [esp + 0x28]
add esp, 0xc
mov dword [edx + 0x30], eax
test eax, eax
jne 0x56c2f0
mov edx, dword [esp + 0x58]
mov dword [esp + 0x14], edx
jmp 0x56c3d8
mov ax, word [esi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x56c26b
test edi, edi
je 0x56c3b4
mov eax, 0xffffffdc
jmp 0x56d21e
mov eax, 0xffffffe6
jmp 0x56d21e
mov dword [esp + 0x54], 2
jmp 0x56c3d8
mov eax, dword [edx + 0x30]
jmp 0x56d21e
mov ebp, dword [esp + 0x24]
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x34]
test ecx, ecx
jne 0x56c3ed
mov eax, dword [esp + 0x10]
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
jmp 0x56c3f4
movq xmm0, qword [ecx]
mov eax, dword [ecx + 8]
mov dword [esp + 0xd8], eax
test ecx, ecx
mov eax, dword [esp + 0x10]
mov ebx, 0x697cec
cmovne ebx, ecx
movq qword [esp + 0xd0], xmm0
mov ecx, dword [eax + 0x40]
mov eax, ecx
or eax, dword [esp + 0x18c]
shr eax, 0x1f
mov dword [esp + 0x40], eax
mov eax, ecx
shr eax, 8
and eax, 1
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 0x48]
mov dword [esp + 0x34], eax
mov eax, dword [ebx + 0x24]
cmp eax, 0xffffffff
jne 0x56c44a
mov eax, dword [esp + 0x74]
jmp 0x56c459
mov ebp, dword [esp + 0x24]
lea eax, [eax*2]
add eax, dword [esp + 0x20]
mov dword [esp + 0x6c], eax
lea eax, [esp + 0x90]
mov dword [esp + 0x168], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0xa8], eax
mov eax, edx
sub eax, dword [esp + 0x20]
sar eax, 1
mov dword [esp + 0xac], eax
mov eax, dword [ebx + 0x14]
mov dword [esp + 0x170], eax
mov eax, dword [ebx + 0x18]
mov dword [esp + 0x16c], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x11c], eax
mov dword [esp + 0x124], edx
mov edx, dword [esp + 0x34]
mov eax, edx
shr eax, 0xc
and eax, 1
mov dword [esp + 0x90], 2
mov dword [esp + 0xf0], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0xcc], 0
mov dword [esp + 0x104], edi
cmp word [eax + 0x64], 0
ja 0x56c4f2
test edx, 0x2000
jne 0x56c4f2
xor eax, eax
jmp 0x56c4f7
mov eax, 1
mov dword [esp + 0xf4], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x14c], ecx
mov dword [esp + 0x154], 0
mov dword [esp + 0x138], 0
movzx edx, word [eax + 0x6e]
lea edi, [eax + 0x70]
movzx eax, word [eax + 0x6c]
mov word [esp + 0x112], ax
imul eax, edx
mov dword [esp + 0x114], edi
mov dword [esp + 0x134], 0
mov word [esp + 0x110], dx
mov dword [esp + 0x158], 0
lea eax, [edi + eax*2]
mov edi, dword [esp + 0x10]
mov dword [esp + 0x118], eax
mov ax, word [edi + 0x60]
mov word [esp + 0x10e], ax
movzx eax, word [edi + 0x62]
dec eax
cmp eax, 5
ja case.default.0x56c582
jmp dword [eax*4 + 0x56d238]
mov eax, 0xd
mov dword [esp + 0x15c], 1
mov word [esp + 0x160], ax
jmp 0x56c604
mov eax, 0xa
mov dword [esp + 0x15c], 1
mov word [esp + 0x160], ax
jmp 0x56c604
xor eax, eax
mov dword [esp + 0x15c], 1
mov word [esp + 0x160], ax
jmp 0x56c604
mov dword [esp + 0x15c], 2
mov dword [esp + 0x160], 0xa000d
jmp 0x56c604
mov dword [esp + 0x158], 1
jmp 0x56c604
mov dword [esp + 0x158], 2
movzx eax, word [edi + 0x68]
mov edx, dword [ebx + 0x28]
mov ecx, dword [ebx + 0x2c]
lea eax, [eax*8 + 0x57]
and eax, 0xfffffffc
cmp edx, dword [edi + 0x4c]
mov dword [esp + 0x64], eax
cmovae edx, dword [edi + 0x4c]
shl edx, 0xa
cmp ecx, dword [edi + 0x50]
mov dword [esp + 0xdc], edx
cmovae ecx, dword [edi + 0x50]
mov dword [esp + 0xe0], ecx
mov ecx, dword [ebx + 0x30]
lea ebx, [eax + eax*4]
cmp ecx, dword [edi + 0x54]
cmovae ecx, dword [edi + 0x54]
add ebx, ebx
mov dword [esp + 0xe4], ecx
mov ecx, 0x5000
cmp ebx, ecx
cmovb ebx, ecx
cmp ebx, edx
jbe 0x56c66f
cmp eax, edx
jbe 0x56c66d
mov eax, 0xffffffc1
jmp 0x56d21e
mov ebx, edx
mov ecx, dword [esp + 0x1c]
cmp dword [ecx + 0x1c], ebx
jae 0x56c6c8
push dword [ecx + 8]
mov edi, dword [ecx + 4]
push dword [ecx + 0x18]
mov ecx, edi
call dword [0x5cb3f0]
call edi
mov eax, dword [esp + 0x24]
add esp, 8
push dword [eax + 8]
mov edi, dword [eax]
mov ecx, edi
push ebx
call dword [0x5cb3f0]
call edi
mov ecx, dword [esp + 0x24]
add esp, 8
mov dword [ecx + 0x18], eax
test eax, eax
jne 0x56c6bd
mov dword [ecx + 0x1c], eax
mov eax, 0xffffffd0
jmp 0x56d21e
mov edi, dword [esp + 0x10]
mov eax, dword [esp + 0x64]
mov dword [ecx + 0x1c], ebx
add eax, 0xffffffac
push eax
mov eax, dword [ecx + 0x18]
add eax, 0x54
push 0xff
push eax
call fcn.00598150
mov eax, dword [edi + 0xc]
add esp, 0xc
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xf8], eax
lea edi, [eax + 0x100]
add eax, 0x340
mov edx, dword [ecx + 0x48]
mov dword [esp + 0xfc], edi
mov dword [esp + 0x100], eax
test dl, 0x10
je 0x56c793
movzx ebx, word [ecx + 0x58]
mov dword [esp + 0x30], ebx
movzx eax, bx
movzx ebx, bx
mov dword [esp + 0x50], 1
mov dword [esp + 0x38], ebx
test dl, 0x20
je 0x56c7af
mov ecx, eax
mov eax, 0xff
cmp word [esp + 0x30], ax
ja 0x56c74d
movzx eax, byte [ecx + edi]
mov dword [esp + 0x30], eax
cmp ebx, 0x7f
jbe 0x56c7b5
mov ebx, dword [esp + 0x18]
test ebx, ebx
jne 0x56c75d
test ebp, 0x20000
je 0x56c7b9
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, word [eax*2 + 0x69d208]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x6a1608]
lea eax, [eax + eax*2]
mov ax, word [eax*4 + 0x698ffc]
add ax, word [esp + 0x38]
movzx ecx, ax
mov dword [esp + 0x30], ecx
jmp 0x56c7b9
test dword [esp + 0x34], 0x200
jne 0x56c7af
mov ebx, dword [esp + 0x18]
test dl, 0x40
je 0x56c7bd
add ecx, 0x14
mov dword [esp + 0x4c], ecx
jmp 0x56c7b9
mov ebx, dword [esp + 0x18]
jmp 0x56c7bd
mov ebx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x30]
movzx ebp, ax
mov eax, dword [esp + 0x38]
movzx eax, ax
mov dword [esp + 0x80], ebp
mov ebp, dword [esp + 0x24]
mov dword [esp + 0x7c], eax
test dl, dl
jns 0x56c864
movzx ecx, word [ecx + 0x5c]
mov dword [esp + 0x2c], ecx
movzx eax, cx
movzx ecx, cx
mov dword [esp + 0x78], 1
mov dword [esp + 0x3c], ecx
test edx, 0x100
je 0x56c866
mov edx, dword [esp + 0x3c]
mov ecx, eax
mov eax, 0xff
cmp word [esp + 0x2c], ax
ja 0x56c824
movzx eax, byte [edi + ecx]
mov dword [esp + 0x2c], eax
cmp dx, 0x7f
jbe 0x56c866
test ebx, ebx
jne 0x56c830
test ebp, 0x20000
je 0x56c866
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, word [eax*2 + 0x69d208]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x6a1608]
lea eax, [eax + eax*2]
mov ax, word [eax*4 + 0x698ffc]
add ax, dx
movzx eax, ax
mov dword [esp + 0x2c], eax
jmp 0x56c866
xor eax, eax
mov eax, dword [esp + 0x3c]
mov edi, dword [esp + 0x14]
movzx eax, ax
mov dword [esp + 0x88], eax
nop dword [eax + eax]
mov ebp, dword [esp + 0x15c]
xor ecx, ecx
mov edx, dword [esp + 0x158]
mov dword [esp + 0x58], ecx
mov dword [esp + 0x24], ecx
mov dword [esp + 0xec], ecx
mov ecx, dword [esp + 0x10]
test dword [ecx + 0x40], 0x10000
jne 0x56ce3f
cmp dword [esp + 0x70], 0
mov ebx, dword [esp + 0x124]
je 0x56c9e5
mov edi, esi
cmp esi, dword [esp + 0x14]
jae 0x56c9e1
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x56c990
nop word [eax + eax]
test edx, edx
je 0x56c952
mov eax, dword [esp + 0x124]
cmp edi, eax
jae 0x56c983
push ecx
lea ecx, [esp + 0x160]
push ecx
push eax
push edx
push edi
call fcn.00590e50
mov ebp, dword [esp + 0x170]
add esp, 0x14
mov edx, dword [esp + 0x158]
mov ebx, dword [esp + 0x124]
test eax, eax
jne 0x56c9e1
mov ecx, dword [esp + 0x18]
add edi, 2
cmp edi, dword [esp + 0x14]
jae 0x56c9e1
mov ax, word [edi]
and ax, word [esp + 0x44]
cmp ax, word [esp + 0x48]
jne 0x56c8e0
add edi, 2
cmp edi, dword [esp + 0x14]
jb 0x56c8e0
jmp 0x56c9e1
lea eax, [ebp*2]
mov ecx, ebx
sub ecx, eax
cmp edi, ecx
ja 0x56c924
mov ax, word [edi]
cmp ax, word [esp + 0x160]
jne 0x56c924
cmp ebp, 1
je 0x56c9e1
mov ax, word [edi + 2]
cmp ax, word [esp + 0x162]
je 0x56c9e1
jmp 0x56c924
mov ebx, dword [esp + 0x124]
jmp 0x56c928
test edx, edx
je 0x56cad5
mov eax, dword [esp + 0x124]
cmp edi, eax
jae 0x56cb19
push ecx
lea ecx, [esp + 0x160]
push ecx
push eax
push edx
push edi
call fcn.00590e50
mov ebp, dword [esp + 0x170]
add esp, 0x14
mov edx, dword [esp + 0x158]
mov ebx, dword [esp + 0x124]
test eax, eax
jne 0x56c9e1
mov ecx, dword [esp + 0x18]
add edi, 2
cmp edi, dword [esp + 0x14]
jb 0x56c990
mov dword [esp + 0x14], edi
cmp dword [esp + 0x40], 0
je 0x56cb25
mov ecx, dword [esp + 0x50]
mov ebp, dword [esp + 0x4c]
test ecx, ecx
jne 0x56ca04
test ebp, ebp
je 0x56cd7d
cmp esi, edi
sbb eax, eax
neg eax
cmp esi, edi
jae 0x56ca57
movzx eax, word [esi]
test ecx, ecx
je 0x56ca2b
cmp ax, word [esp + 0x38]
je 0x56cd7d
cmp ax, word [esp + 0x30]
je 0x56cd7d
test ebp, ebp
je case.0x56cf01.997
mov ecx, 0xff
cmp ax, cx
cmova eax, ecx
movzx edx, ax
mov eax, 1
mov ecx, edx
shr edx, 3
and ecx, 7
shl eax, cl
test byte [edx + ebp], al
mov eax, 0
setne al
test eax, eax
jne 0x56cd7d
mov ecx, dword [esp + 0x10]
xor ebx, ebx
cmp dword [esp + 0x18], 0
je 0x56d0e8
mov ebp, dword [esp + 0x74]
cmp edi, ebp
je 0x56d0e8
test ebx, ebx
je 0x56ca89
cmp ebx, 0xfffffffe
jne 0x56d0e8
mov ebx, dword [esp + 0x5c]
nop dword [eax]
lea esi, [edi + 2]
cmp esi, ebp
jae 0x56cab7
mov ecx, 0xfc00
mov edx, 0xdc00
mov ax, word [esi]
and ax, cx
cmp ax, dx
jne 0x56d07f
add esi, 2
cmp esi, ebp
jb 0x56caa1
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x10]
mov dword [ebp + 0xc], eax
mov eax, dword [esp + 0x138]
mov byte [ebp + 0x2c], 0
mov dword [ebp + 0x14], eax
jmp 0x56d1c7
lea eax, [ebp*2]
mov ecx, ebx
sub ecx, eax
cmp edi, ecx
ja 0x56c9d4
mov ax, word [edi]
cmp ax, word [esp + 0x160]
jne 0x56c9d4
cmp ebp, 1
je 0x56c9e1
mov ax, word [edi + 2]
cmp ax, word [esp + 0x162]
je 0x56c9e1
jmp 0x56c9d4
mov ebx, dword [esp + 0x124]
jmp 0x56c9d8
cmp dword [esp + 0x50], 0
je 0x56cb8a
cmp esi, edi
jae 0x56cd6a
mov eax, dword [esp + 0x7c]
cmp ax, word [esp + 0x80]
je 0x56cb71
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x30]
nop word [eax + eax]
movzx eax, word [esi]
cmp ax, cx
je 0x56cd6a
cmp ax, dx
je 0x56cd6a
add esi, 2
cmp esi, edi
jb 0x56cb50
jmp 0x56cd6a
mov eax, dword [esp + 0x38]
cmp word [esi], ax
je 0x56cd6a
add esi, 2
cmp esi, edi
jb 0x56cb75
jmp 0x56cd6a
test dword [esp + 0x34], 0x200
je 0x56cd2a
mov eax, dword [esp + 0x84]
mov edi, dword [esp + 0x11c]
add eax, edi
cmp esi, eax
jbe 0x56cd7d
cmp esi, dword [esp + 0x14]
jae 0x56cd08
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x158]
mov edx, dword [esp + 0x14]
test eax, eax
je 0x56cc82
test ebx, ebx
je 0x56cc0c
cmp esi, edi
jbe 0x56cc4a
push eax
lea eax, [esp + 0x160]
push eax
push edi
push ebx
push esi
call fcn.00590f10
add esp, 0x14
test eax, eax
jne 0x56ccfa
mov ebp, dword [esp + 0x15c]
mov edi, dword [esp + 0x11c]
mov ebx, dword [esp + 0x158]
jmp 0x56cc46
lea edx, [ebp*2]
lea eax, [edi + edx]
cmp esi, eax
jb 0x56cc46
mov ecx, esi
sub ecx, edx
mov ax, word [ecx]
cmp ax, word [esp + 0x160]
jne 0x56cc46
cmp ebp, 1
je 0x56ccfa
mov ax, word [ecx + 2]
cmp ax, word [esp + 0x162]
je 0x56ccfa
mov edx, dword [esp + 0x14]
add esi, 2
cmp esi, edx
jae 0x56ccfa
mov ax, word [esi]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
mov eax, dword [esp + 0x18]
jne 0x56cbd1
add esi, 2
cmp esi, edx
jae 0x56ccfa
jmp 0x56cbd1
test ebx, ebx
je 0x56ccb9
cmp esi, edi
jbe 0x56ccf3
push eax
lea eax, [esp + 0x160]
push eax
push edi
push ebx
push esi
call fcn.00590f10
add esp, 0x14
test eax, eax
jne 0x56ccfa
mov ebp, dword [esp + 0x15c]
mov edi, dword [esp + 0x11c]
mov ebx, dword [esp + 0x158]
jmp 0x56cceb
lea edx, [ebp*2]
lea eax, [edi + edx]
cmp esi, eax
jb 0x56cceb
mov ecx, esi
sub ecx, edx
mov ax, word [ecx]
cmp ax, word [esp + 0x160]
jne 0x56cceb
cmp ebp, 1
je 0x56ccfa
mov ax, word [ecx + 2]
cmp ax, word [esp + 0x162]
je 0x56ccfa
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
add esi, 2
cmp esi, edx
jb 0x56cc82
mov edx, dword [esp + 0x158]
mov ebx, dword [esp + 0x124]
cmp word [esi - 2], 0xd
jne 0x56cd7d
cmp edx, 1
je 0x56cd19
cmp edx, 2
jne 0x56cd7d
cmp esi, dword [esp + 0x14]
jae 0x56cd7d
cmp word [esi], 0xa
jne 0x56cd7d
add esi, 2
jmp 0x56cd7d
mov ebp, dword [esp + 0x4c]
test ebp, ebp
je 0x56cd7d
cmp esi, edi
jae 0x56cd6a
mov ebx, 0xff
nop dword [eax + eax]
movzx edx, word [esi]
mov eax, 1
cmp edx, ebx
cmova edx, ebx
mov ecx, edx
shr edx, 3
and ecx, 7
shl eax, cl
test byte [edx + ebp], al
jne 0x56cd63
add esi, 2
cmp esi, edi
jb 0x56cd40
mov ebx, dword [esp + 0x124]
cmp word [esp + 0x10c], 0
jne 0x56cd7d
cmp esi, ebx
jae case.0x56cf01.997
cmp word [esp + 0x10c], 0
mov edi, ebx
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x14], edi
jne 0x56ce3f
movzx eax, word [ecx + 0x66]
mov edx, edi
sub edx, esi
sar edx, 1
cmp edx, eax
jl 0x56ca63
cmp dword [esp + 0x78], 0
mov eax, dword [esp + 0x50]
lea ecx, [esi + eax*2]
je 0x56ce3b
cmp ecx, dword [esp + 0x68]
jbe 0x56ce3b
cmp edx, 0x7d0
jb 0x56cddb
cmp dword [esp + 0x40], 0
jne 0x56ce3b
cmp edx, 0x1e8480
jae 0x56ce3b
mov edx, dword [esp + 0x124]
cmp ecx, edx
jae case.0x56cf01.997
mov ebx, dword [esp + 0x2c]
movzx eax, bx
cmp word [esp + 0x88], ax
je 0x56cf08
mov ebp, dword [esp + 0x3c]
mov ebx, edx
movzx eax, word [ecx]
mov edi, ecx
add ecx, 2
mov edx, eax
cmp ax, bp
je 0x56ce28
cmp dx, word [esp + 0x2c]
je 0x56ce28
cmp ecx, ebx
jb 0x56ce05
mov edi, dword [esp + 0x14]
jmp case.0x56cf01.997
mov edx, dword [esp + 0x124]
cmp edi, edx
jae 0x56ce1f
mov dword [esp + 0x68], edi
mov edi, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
cmp esi, dword [esp + 0x6c]
ja case.0x56cf01.997
or dword [esp + 0xcc], 1
mov eax, esi
sub eax, dword [esp + 0x20]
sar eax, 1
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0x54]
or eax, dword [esp + 0x18c]
mov dword [esp + 0x148], eax
lea eax, [esp + 0xd0]
push eax
push dword [esp + 0x20]
movzx eax, word [ecx + 0x68]
push dword [esp + 0x6c]
mov dword [esp + 0x138], esi
push eax
push dword [esp + 0x128]
mov dword [esp + 0x144], esi
push esi
mov dword [esp + 0x100], 0
mov dword [esp + 0x120], 0
mov dword [esp + 0x168], 0
call fcn.00560b70
add esp, 0x18
mov ebx, eax
cmp dword [esp + 0xec], 0
je 0x56cee8
cmp dword [esp + 0x24], 0
jne 0x56cee8
mov eax, dword [esp + 0x12c]
mov dword [esp + 0x24], eax
mov dword [esp + 0x58], esi
test ebx, ebx
jg case.default.0x56cf01
je case.0x56cf01.996
lea eax, [ebx + 0x3e5]
cmp eax, 4
ja case.default.0x56cf01
jmp dword [eax*4 + 0x56d250]
mov ebx, dword [esp + 0x3c]
nop dword [eax]
movzx eax, word [ecx]
mov edi, ecx
add ecx, 2
cmp ax, bx
je 0x56ce2f
cmp ecx, edx
jb 0x56cf10
mov edi, dword [esp + 0x14]
jmp case.0x56cf01.997
mov eax, dword [esp + 0x150]
mov edi, esi
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x154], eax
jmp 0x56cf89
mov edi, dword [esp + 0x140]
cmp edi, esi
jbe case.0x56cf01.996
mov ecx, dword [esp + 0x18]
jmp 0x56cf89
mov ecx, dword [esp + 0x18]
lea edi, [esi + 2]
mov dword [esp + 0x154], 0
test ecx, ecx
je 0x56cf89
cmp edi, dword [esp + 0x14]
jae 0x56cf89
mov ax, word [edi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x56cf89
add edi, 2
mov edx, dword [esp + 0x158]
xor ebx, ebx
cmp dword [esp + 0x70], ebx
je 0x56cfce
mov eax, dword [esp + 0x124]
test edx, edx
je 0x56d036
cmp esi, eax
jae 0x56cfce
push ecx
lea ecx, [esp + 0x160]
push ecx
push eax
push edx
push esi
call fcn.00590e50
add esp, 0x14
test eax, eax
jne case.default.0x56cf01
mov edx, dword [esp + 0x158]
mov ebp, dword [esp + 0x15c]
mov esi, edi
cmp dword [esp + 0x40], ebx
jne case.default.0x56cf01
mov eax, dword [esp + 0x14]
cmp edi, eax
ja case.default.0x56cf01
mov ecx, dword [esp + 0x10]
cmp edi, dword [esp + 0x8c]
jbe 0x56d026
cmp word [edi - 2], 0xd
jne 0x56d026
cmp edi, eax
jae 0x56d026
cmp word [edi], 0xa
jne 0x56d026
test dword [ecx + 0x48], 0x800
jne 0x56d026
cmp edx, 1
je 0x56d023
cmp edx, 2
je 0x56d023
cmp ebp, 2
jne 0x56d026
lea esi, [edi + 2]
mov edi, dword [esp + 0x14]
mov dword [esp + 0x134], ebx
jmp 0x56c8a3
mov ebp, dword [esp + 0x15c]
lea ecx, [ebp*2]
sub eax, ecx
cmp esi, eax
ja 0x56cfd5
mov ax, word [esi]
cmp ax, word [esp + 0x160]
jne 0x56cfd5
cmp ebp, 1
je case.default.0x56cf01
mov ax, word [esi + 2]
cmp ax, word [esp + 0x162]
jne 0x56cfd5
mov edi, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
jmp 0x56ca65
mov eax, dword [esp + 0x28]
mov ecx, esi
sub ecx, dword [esp + 0x20]
sar ecx, 1
push ebx
sub eax, ecx
mov dword [esp + 0x124], esi
push eax
push esi
call fcn.00592760
add esp, 0xc
test eax, eax
je 0x56d0ce
jns 0x56ca90
mov eax, dword [ebx]
lea edi, [esi + eax*2]
mov dword [esp + 0x14], edi
mov dword [esp + 0x124], edi
cmp edi, esi
jbe 0x56ca90
mov dword [esp + 0x54], 3
jmp 0x56c880
mov edi, ebp
mov dword [esp + 0x124], ebp
mov dword [esp + 0x14], edi
mov dword [esp + 0x54], 1
jmp 0x56c880
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x134]
mov dword [ebp + 0xc], ecx
mov dword [ebp + 0x14], eax
mov byte [ebp + 0x2c], 0
cmp ebx, 1
jne 0x56d1b4
movzx eax, word [ebp + 0x2e]
mov ecx, dword [esp + 0x108]
add eax, eax
cmp ecx, eax
jl 0x56d11b
xor edx, edx
jmp 0x56d125
mov eax, ecx
cdq
sub eax, edx
mov edx, eax
sar edx, 1
inc edx
mov ebx, dword [esp + 0x20]
sub esi, ebx
mov eax, dword [esp + 0x12c]
mov ecx, dword [esp + 0x128]
sub eax, ebx
sar esi, 1
sar eax, 1
cmp dword [esp + 0x130], ecx
mov dword [ebp + 0x30], edx
cmova ecx, dword [esp + 0x130]
sub ecx, ebx
mov dword [ebp + 0x28], esi
sar ecx, 1
test dword [esp + 0x18c], 0x4000
mov dword [ebp + 0x20], eax
mov dword [ebp + 0x24], ecx
je 0x56d1ad
mov ecx, dword [esp + 0x60]
mov edi, dword [esp + 0x28]
push dword [ebp + 8]
mov esi, dword [ebp]
lea edi, [edi + ecx]
mov ecx, esi
add edi, edi
push edi
call dword [0x5cb3f0]
call esi
add esp, 8
mov dword [ebp + 0x10], eax
test eax, eax
je 0x56c6b3
push edi
push ebx
push eax
call fcn.00597bd0
mov edx, dword [ebp + 0x30]
add esp, 0xc
or byte [ebp + 0x2d], 1
mov eax, edx
jmp 0x56d21e
mov dword [ebp + 0x10], ebx
mov eax, edx
jmp 0x56d21e
mov eax, dword [esp + 0x138]
mov dword [ebp + 0x14], eax
test ebx, ebx
je 0x56d1c7
cmp ebx, 0xfffffffe
jne 0x56d204
mov ecx, dword [esp + 0x58]
test ecx, ecx
je 0x56d201
mov eax, dword [esp + 0x20]
mov ebx, 0xfffffffe
sub ecx, eax
mov dword [ebp + 0x10], eax
sar ecx, 1
sub edi, eax
mov dword [ebp + 0x34], ecx
mov dword [ebp + 0x28], ecx
mov ecx, dword [esp + 0x24]
sar edi, 1
sub ecx, eax
sar ecx, 1
mov eax, ebx
mov dword [ebp + 0x38], edi
mov dword [ebp + 0x20], ecx
mov dword [ebp + 0x24], edi
mov dword [ebp + 0x30], ebx
jmp 0x56d21e
or ebx, 0xffffffff
mov dword [ebp + 0x30], ebx
mov eax, ebx
jmp 0x56d21e
mov eax, 0xffffffd4
jmp 0x56d21e
mov eax, 0xffffffcd
jmp 0x56d21e
mov eax, 0xffffffde
mov ecx, dword [esp + 0x174]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00594d69
add esp, 0x168
ret