Function at 0x54f3d0
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x676ef6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xfc
push ebx
mov ebx, ecx
push esi
push edi
lea ecx, [esp + 0x14]
call fcn.0064dc20
mov eax, dword [ebx + 0x34]
mov ecx, dword [eax + 0x29c]
call fcn.004a8b10
fld qword [ebx + 0x68]
fld qword [ebx + 0x50]
fld qword [ebx + 0x48]
fld qword [ebx + 0x60]
fsub st(1)
lea ecx, [esp + 0x30]
lea edx, [esp + 0x90]
push ecx
push edx
mov dword [esp + 0x48], 0
mov dword [esp + 0x4c], 0
fstp qword [esp + 0x38]
fstp st(0)
fxch st(1)
fsub st(1)
fstp qword [esp + 0x40]
fstp st(0)
call fcn.00655db0
add esp, 8
mov eax, dword [ebp + 0x18]
xor esi, esi
cmp eax, esi
mov dword [esp + 0x110], esi
jne 0x54f6e9
mov edi, dword [ebp + 8]
mov eax, dword [edi + 8]
cmp eax, esi
mov dword [esp + 0xc], eax
jle 0x54f492
mov eax, dword [ebx + 0x34]
mov edx, dword [edi + 4]
push 0
mov ecx, dword [eax + 0x29c]
push ecx
mov ecx, dword [edx + esi*4]
call fcn.004933f0
mov eax, dword [esp + 0xc]
inc esi
cmp esi, eax
jl 0x54f472
mov eax, dword [edi + 8]
xor esi, esi
test eax, eax
jle 0x54f4b4
mov eax, dword [edi + 4]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x54f4ac
mov edx, dword [ecx]
push 1
call dword [edx + 4]
mov eax, dword [edi + 8]
inc esi
cmp esi, eax
jl 0x54f49b
push 0xa
push 0
mov ecx, edi
call fcn.0048b670
mov edi, dword [ebp + 0xc]
xor esi, esi
mov eax, dword [edi + 8]
test eax, eax
mov dword [esp + 0xc], eax
jle 0x54f4ef
mov eax, dword [ebx + 0x34]
mov edx, dword [edi + 4]
push 0
mov ecx, dword [eax + 0x29c]
push ecx
mov ecx, dword [edx + esi*4]
call fcn.004933f0
mov eax, dword [esp + 0xc]
inc esi
cmp esi, eax
jl 0x54f4cf
mov eax, dword [edi + 8]
xor esi, esi
test eax, eax
jle 0x54f511
mov eax, dword [edi + 4]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x54f509
mov edx, dword [ecx]
push 1
call dword [edx + 4]
mov eax, dword [edi + 8]
inc esi
cmp esi, eax
jl 0x54f4f8
push 0xa
push 0
mov ecx, edi
call fcn.0048b670
mov eax, dword [ebp + 0x10]
xor edi, edi
mov eax, dword [eax + 8]
test eax, eax
mov dword [esp + 0xc], eax
jle 0x54f567
mov ecx, dword [ebp + 0x10]
sub esp, 0x78
lea eax, [esp + 0x108]
mov dword [esp + 0xa4], esp
mov edx, dword [ecx + 4]
mov ecx, esp
push eax
mov esi, dword [edx + edi*4]
call fcn.00654cc0
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x2c]
mov eax, dword [esi]
push 0
mov ecx, esi
call dword [eax + 0x48]
mov eax, dword [esp + 0xc]
inc edi
cmp edi, eax
jl 0x54f52c
mov ecx, dword [ebp + 0x14]
xor esi, esi
mov edi, dword [ecx + 8]
test edi, edi
jle 0x54f588
mov edx, dword [ebp + 0x14]
push 0
mov eax, dword [edx + 4]
mov ecx, dword [eax + esi*4]
mov edx, dword [ecx]
call dword [edx + 0x48]
inc esi
cmp esi, edi
jl 0x54f573
lea edi, [ebx + 0x17c]
lea eax, [ebx + 0x48]
push edi
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x48], esp
push eax
call fcn.0064dc70
call fcn.004642e0
mov dword [esp + 0x48], eax
mov eax, dword [ebx + 0x148]
add esp, 0x1c
xor esi, esi
test eax, eax
mov dword [esp + 0xc], eax
jle 0x54f9df
mov eax, dword [ebx + 0x144]
mov ecx, dword [eax + esi*4]
mov eax, dword [ecx + 0x10]
cmp eax, 6
je 0x54f632
cmp eax, 0xd
je 0x54f626
cmp eax, 0x11
jne 0x54f6d0
call fcn.0049e3a0
mov edx, dword [eax]
push 0x3fe00000
lea ecx, [esp + 0x7c]
push 0
push ecx
mov ecx, eax
call dword [edx + 0x90]
mov edx, dword [eax]
mov ecx, dword [eax + 4]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], ecx
mov edx, dword [eax + 8]
mov ecx, dword [eax + 0xc]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ecx
mov edx, dword [eax + 0x10]
mov eax, dword [eax + 0x14]
mov dword [esp + 0x24], edx
mov dword [esp + 0x28], eax
jmp 0x54f665
lea edx, [esp + 0x48]
push edx
call fcn.004ac900
jmp 0x54f63c
lea eax, [esp + 0x60]
push eax
call fcn.004ac900
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edx
mov ecx, dword [eax + 8]
mov edx, dword [eax + 0xc]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edx
mov ecx, dword [eax + 0x10]
mov edx, dword [eax + 0x14]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], edx
push edi
lea eax, [esp + 0x18]
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.0064dc70
call fcn.004642e0
mov ecx, dword [esp + 0x48]
add esp, 0x1c
cmp eax, ecx
jne 0x54f6c7
sub esp, 0x78
lea edx, [esp + 0x108]
mov ecx, esp
mov dword [esp + 0x88], esp
push edx
call fcn.00654cc0
push esi
lea ecx, [ebx + 0x140]
mov byte [esp + 0x18c], 1
call fcn.004ea1e0
mov eax, dword [eax]
mov byte [esp + 0x188], 0
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x2c]
mov eax, dword [ebx + 0x144]
mov ecx, dword [eax + esi*4]
mov edx, dword [ecx]
push 0
call dword [edx + 0x48]
mov eax, dword [esp + 0xc]
inc esi
cmp esi, eax
jl 0x54f5c1
jmp 0x54f9df
mov eax, dword [ebp + 0x10]
xor edi, edi
mov eax, dword [eax + 8]
cmp eax, esi
mov dword [esp + 0xc], eax
jle 0x54f734
mov ecx, dword [ebp + 0x10]
push 0
mov edx, dword [ecx + 4]
mov esi, dword [edx + edi*4]
mov ecx, esi
mov eax, dword [esi]
call dword [eax + 0x48]
sub esp, 0x78
lea edx, [esp + 0x108]
mov ecx, esp
mov dword [esp + 0x88], esp
push edx
call fcn.00654cc0
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2c]
mov eax, dword [esp + 0xc]
inc edi
cmp edi, eax
jl 0x54f6f9
mov edi, dword [ebp + 0x14]
mov eax, dword [edi + 8]
test eax, eax
mov dword [esp + 0xc], eax
je 0x54f795
xor esi, esi
test eax, eax
jle 0x54f768
mov ecx, dword [ebx + 0x34]
mov eax, dword [edi + 4]
push 0
mov edx, dword [ecx + 0x29c]
mov ecx, dword [eax + esi*4]
push edx
call fcn.004933f0
mov eax, dword [esp + 0xc]
inc esi
cmp esi, eax
jl 0x54f748
mov eax, dword [edi + 8]
xor esi, esi
test eax, eax
jle 0x54f78a
mov ecx, dword [edi + 4]
mov ecx, dword [ecx + esi*4]
test ecx, ecx
je 0x54f782
mov edx, dword [ecx]
push 1
call dword [edx + 4]
mov eax, dword [edi + 8]
inc esi
cmp esi, eax
jl 0x54f771
push 0xa
push 0
mov ecx, edi
call fcn.0048b670
mov eax, dword [ebp + 8]
xor esi, esi
mov edi, dword [eax + 8]
test edi, edi
jle 0x54f7b6
mov ecx, dword [ebp + 8]
push 0
mov edx, dword [ecx + 4]
mov ecx, dword [edx + esi*4]
mov eax, dword [ecx]
call dword [eax + 0x48]
inc esi
cmp esi, edi
jl 0x54f7a1
mov ecx, dword [ebp + 0xc]
xor esi, esi
mov edi, dword [ecx + 8]
test edi, edi
jle 0x54f7d7
mov edx, dword [ebp + 0xc]
push 0
mov eax, dword [edx + 4]
mov ecx, dword [eax + esi*4]
mov edx, dword [ecx]
call dword [edx + 0x48]
inc esi
cmp esi, edi
jl 0x54f7c2
lea eax, [ebx + 0x17c]
push eax
lea eax, [ebx + 0x48]
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.0064dc70
call fcn.004642e0
mov dword [esp + 0x48], eax
mov eax, dword [ebx + 0x148]
add esp, 0x1c
xor edi, edi
test eax, eax
mov dword [esp + 0xc], eax
jle 0x54f9df
mov eax, dword [ebx + 0x144]
mov ecx, dword [eax + edi*4]
mov eax, dword [ecx + 0x10]
cmp eax, 6
je 0x54f889
cmp eax, 0xd
je 0x54f87d
cmp eax, 0x11
je 0x54f837
mov edx, dword [ecx]
push 0
call dword [edx + 0x48]
jmp 0x54f9d2
call fcn.0049e3a0
mov edx, dword [eax]
push 0x3fe00000
lea ecx, [esp + 0x64]
push 0
push ecx
mov ecx, eax
call dword [edx + 0x90]
mov edx, dword [eax]
mov ecx, dword [eax + 4]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], ecx
mov edx, dword [eax + 8]
mov ecx, dword [eax + 0xc]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ecx
mov edx, dword [eax + 0x10]
mov eax, dword [eax + 0x14]
mov dword [esp + 0x24], edx
mov dword [esp + 0x28], eax
jmp 0x54f8bc
lea edx, [esp + 0x48]
push edx
call fcn.004ac900
jmp 0x54f893
lea eax, [esp + 0x78]
push eax
call fcn.004ac900
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edx
mov ecx, dword [eax + 8]
mov edx, dword [eax + 0xc]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edx
mov ecx, dword [eax + 0x10]
mov edx, dword [eax + 0x14]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], edx
lea eax, [ebx + 0x17c]
push eax
lea eax, [esp + 0x18]
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.0064dc70
call fcn.004642e0
mov ecx, dword [esp + 0x48]
add esp, 0x1c
cmp eax, ecx
jne 0x54f9d2
mov ecx, dword [ebx + 0x144]
mov ecx, dword [ecx + edi*4]
mov eax, dword [ecx + 0x10]
cmp eax, 6
je 0x54f991
cmp eax, 0xd
je 0x54f94e
cmp eax, 0x11
jne 0x54f9d2
mov edx, dword [ebx + 0x34]
push 0
mov eax, dword [edx + 0x29c]
push eax
call fcn.00533180
sub esp, 0x78
lea edx, [esp + 0x108]
mov ecx, esp
mov dword [esp + 0x88], esp
push edx
mov esi, eax
call fcn.00654cc0
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2c]
mov edx, dword [esi]
push 0
mov ecx, esi
call dword [edx + 0x48]
jmp 0x54f9d2
mov eax, dword [ecx]
push 0
call dword [eax + 0x68]
sub esp, 0x78
lea edx, [esp + 0x108]
mov ecx, esp
mov dword [esp + 0x88], esp
push edx
mov esi, eax
call fcn.00654cc0
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2c]
mov edx, dword [esi]
push 0
mov ecx, esi
call dword [edx + 0x48]
mov eax, dword [ebx + 0x34]
push esi
mov ecx, dword [eax + 0x29c]
call fcn.0049f430
jmp 0x54f9d2
mov edx, dword [ecx]
push 0
call dword [edx + 0x68]
mov esi, eax
sub esp, 0x78
lea eax, [esp + 0x108]
mov ecx, esp
mov dword [esp + 0x88], esp
push eax
call fcn.00654cc0
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x2c]
mov eax, dword [esi]
push 0
mov ecx, esi
call dword [eax + 0x48]
mov ecx, dword [ebx + 0x34]
push esi
mov ecx, dword [ecx + 0x29c]
call fcn.0049d780
mov eax, dword [esp + 0xc]
inc edi
cmp edi, eax
jl 0x54f810
mov edx, dword [ebx + 0x34]
mov ecx, dword [edx + 0x29c]
call fcn.004a8b10
mov ecx, dword [ebx + 0x34]
push 1
mov eax, dword [ecx]
call dword [eax + 0x64]
lea ecx, [esp + 0x90]
mov dword [esp + 0x110], 0xffffffff
call fcn.00456760
mov ecx, dword [esp + 0x108]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0x14