Function at 0x30008c5b
Capabilities:
Check os version

Disassembly:
sub esp, 0x180
push ebx
mov ebx, dword [esp + 0x188]
mov eax, dword [ebx]
push ebp
push esi
push edi
xor edi, edi
cmp eax, 0xc
mov esi, ecx
mov dword [esp + 0x30], edi
ja case.default.0x30008134
jmp dword [eax*4 + 0x30008e68]
movsx ebp, word [ebx + 4]
push edi
lea eax, [esp + 0x18]
push eax
push edi
push 0x68
mov dword [esp + 0x24], edi
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
mov eax, dword [esp + 0x14]
cmp eax, 0xffffffff
je 0x30008160
imul eax, ebp
mov ebp, eax
cmp ebp, edi
je case.0x300087d8.57636
movsx ecx, word [ebx + 0xa]
movsx edx, word [ebx + 8]
push ecx
push edx
push ebp
mov ecx, esi
call fcn.3010e0a0
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
mov eax, dword [ebx + 8]
mov ecx, dword [ebx + 4]
push eax
push ecx
mov ecx, esi
call fcn.30112050
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
mov edx, dword [ebx + 8]
mov eax, dword [ebx + 4]
push edx
push eax
mov ecx, esi
call fcn.301121d0
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
mov ecx, dword [ebx + 8]
mov edx, dword [ebx + 4]
push edi
push ecx
push edx
mov ecx, esi
call fcn.30111d50
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
push 1
mov ecx, esi
call fcn.300fcb70
mov ecx, dword [ebx + 8]
mov eax, dword [ebx + 4]
push ecx
mov dword [esp + 0x54], ecx
push eax
mov ecx, esi
mov dword [esp + 0x54], eax
call fcn.3010e280
mov ecx, dword [ebx + 8]
mov edx, dword [ebx + 4]
push edi
lea eax, [esp + 0x18]
push eax
push ecx
push edx
push edi
mov ecx, esi
mov dword [esp + 0x28], edi
call fcn.30113560
mov ebp, eax
mov eax, dword [esp + 0x14]
cmp eax, edi
je 0x30008238
push eax
mov ecx, esi
call fcn.30101c90
cmp dword [ebp + 4], edi
je 0x3000827b
cmp dword [esi + 0x524], 1
jne 0x30008254
mov eax, dword [esi + 0xf84]
push 0x265
push eax
jmp 0x30008260
mov ecx, dword [esi + 0xf84]
push 0x262
push ecx
push esi
call fcn.30004b90
add esp, 0xc
mov ebp, eax
push 0
push ebp
call dword [sym.imp.USER32.dll_GetSubMenu]
mov edi, eax
jmp 0x3000842c
mov edx, dword [esi + 0xf84]
push 0x25c
push edx
push esi
call fcn.30004b90
add esp, 0xc
push 0
push eax
mov dword [esp + 0x34], eax
call dword [sym.imp.USER32.dll_GetSubMenu]
mov ebx, dword [sym.imp.USER32.dll_CheckMenuItem]
mov edi, eax
lea eax, [ebp + 0x1c]
lea ecx, [ebp + 0x18]
lea edx, [ebp + 0x14]
mov dword [esp + 0x24], 0
mov dword [esp + 0x20], 1
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x10], edx
lea ebx, [ebx]
mov eax, dword [esp + 0x10]
cmp dword [eax], 0
jne 0x30008339
mov ecx, dword [esp + 0x24]
push ecx
push edi
call dword [sym.imp.USER32.dll_GetMenuItemID]
mov edx, dword [esp + 0x24]
push 0x400
push edx
push edi
mov dword [esp + 0x34], eax
call dword [sym.imp.USER32.dll_DeleteMenu]
mov eax, dword [esp + 0x28]
test eax, eax
jge 0x300083f2
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x10]
add edx, 2
mov eax, 0x20
add ecx, eax
mov dword [esp + 0x20], edx
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x18]
add edx, eax
add ecx, eax
mov dword [esp + 0x1c], edx
mov dword [esp + 0x18], ecx
jmp 0x300083f2
mov eax, dword [esp + 0x24]
push eax
push edi
call dword [sym.imp.USER32.dll_GetMenuItemID]
test eax, eax
mov dword [esp + 0x28], eax
jle 0x3000837c
mov edx, dword [esp + 0x1c]
mov eax, dword [edx]
xor ecx, ecx
test eax, eax
mov eax, dword [esp + 0x28]
sete cl
push ecx
push eax
push edi
call dword [sym.imp.USER32.dll_EnableMenuItem]
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx]
mov eax, dword [esp + 0x28]
neg edx
sbb edx, edx
and edx, 8
push edx
push eax
jmp 0x300083eb
mov eax, dword [esp + 0x28]
test eax, eax
jge 0x300083ee
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x20]
mov eax, 0x20
add ecx, eax
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x18]
add edx, 2
add ecx, eax
mov dword [esp + 0x18], ecx
mov ecx, dword [ebp + 0x6c]
mov dword [esp + 0x20], edx
mov edx, dword [esp + 0x1c]
add edx, eax
neg ecx
sbb ecx, ecx
and ecx, 8
push ecx
push 0x4e45
push edi
mov dword [esp + 0x28], edx
call ebx
mov edx, dword [ebp + 0x7c]
neg edx
sbb edx, edx
and edx, 8
push edx
push 0x4e44
push edi
call ebx
mov eax, dword [ebp + 0x8c]
neg eax
sbb eax, eax
and eax, 8
push eax
push 0x4e43
push edi
call ebx
inc dword [esp + 0x24]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x20]
mov ecx, 0x10
add edx, ecx
mov dword [esp + 0x10], edx
add dword [esp + 0x1c], ecx
mov edx, dword [esp + 0x18]
inc eax
add edx, ecx
cmp eax, 0x18
mov dword [esp + 0x20], eax
mov dword [esp + 0x18], edx
jl 0x300082d0
mov ebp, dword [esp + 0x2c]
mov ebx, dword [esp + 0x194]
mov ecx, dword [esp + 0x14]
push ecx
push edi
mov ecx, esi
call fcn.30020d30
push edi
mov ecx, esi
call fcn.30004c10
mov edx, dword [ebx + 4]
mov ecx, dword [esi + 0xff8]
mov dword [esi + 0xfd8], edx
mov eax, dword [ebx + 8]
mov dword [esi + 0xfdc], eax
mov eax, dword [esi + 0xf80]
push eax
call dword [ecx + 0x20]
add esp, 4
lea edx, [esp + 0x4c]
mov esi, eax
push edx
push esi
call dword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x4c]
push 0
push esi
push 0
push eax
push ecx
push 2
push edi
call dword [sym.imp.USER32.dll_TrackPopupMenu]
push ebp
call dword [sym.imp.USER32.dll_DestroyMenu]
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
mov ebx, dword [ebx + 4]
cmp ebx, 0x4e56
jg 0x30008660
je 0x30008642
sub ebx, 0x4e39
cmp ebx, 0x15
ja case.0x300087d8.57636
movzx edx, byte [ebx + 0x30008ed0]
jmp dword [edx*4 + 0x30008e9c]
mov ecx, dword [esi + 0x570]
test byte [ecx + 0x28], 2
jne 0x300084fa
push 1
call fcn.300f2e40
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
call fcn.300ea940
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
push edi
mov ecx, esi
call fcn.3010b740
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
push 1
mov ecx, esi
call fcn.3010b740
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
push 2
mov ecx, esi
call fcn.3010b740
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
mov eax, dword [esi + 0x570]
xor ecx, ecx
mov cx, word [eax + 0x28]
not ecx
and ecx, 1
push ecx
mov ecx, esi
call fcn.300010c0
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
lea edx, [esi + 0xfd8]
push edx
push 0x8000
mov ecx, esi
call fcn.3010c140
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
mov ecx, esi
call fcn.3010bda0
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
push edi
push 0x20000
mov ecx, esi
call fcn.3010c140
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
mov ecx, esi
call fcn.3010be50
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
mov ecx, esi
call fcn.300048c0
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
mov ecx, esi
call fcn.300048e0
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
push edi
mov ecx, esi
call fcn.300f5fc0
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
mov eax, dword [esi]
push 2
push edi
mov ecx, esi
call dword [eax + 0xbc]
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
cmp ebx, 0xe122
jg 0x300087c2
je 0x30008791
cmp ebx, 0x4e78
jg 0x30008713
cmp ebx, 0x4e5b
jge 0x300086f4
sub ebx, 0x4e57
je 0x300086b5
sub ebx, 3
jne case.0x300087d8.57636
mov ecx, dword [esi + 0xbac]
push 0xffffffffffffffff
call fcn.3013c310
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
add esi, 0x28
mov ecx, esi
call fcn.3017e1e0
test eax, eax
mov ecx, esi
push edi
je 0x300086dc
call fcn.30098b30
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
push 1
call fcn.3009e270
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
add ebx, 0xffffb1a5
push ebx
mov ecx, esi
call fcn.300244d0
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
cmp ebx, 0x4e86
je 0x30008758
cmp ebx, 0xe120
jne case.0x300087d8.57636
push edi
push edi
push 1
push edi
push edi
push edi
push edi
push 1
push 7
lea ecx, [esp + 0xd8]
call fcn.3007c570
push eax
mov ecx, esi
call fcn.30110920
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
cmp dword [esi + 0xc38], edi
mov ecx, esi
je 0x30008779
push edi
call fcn.300f8f30
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
push 1
call fcn.300f8f30
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
push edi
push edi
push 1
push edi
push edi
push edi
push edi
push 1
push 0xa
lea ecx, [esp + 0xa8]
call fcn.3007c570
push eax
mov ecx, esi
call fcn.30110920
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
sub ebx, 0xe123
cmp ebx, 0xc
ja case.0x300087d8.57636
movzx ecx, byte [ebx + 0x30008f00]
jmp dword [ecx*4 + 0x30008ee8]
push edi
push edi
push 1
push edi
push edi
push edi
push edi
push 1
push 9
lea ecx, [esp + 0x108]
call fcn.3007c570
push eax
mov ecx, esi
call fcn.30110920
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
push edi
push edi
push 1
push edi
push edi
push edi
push edi
push 1
push 0xb
lea ecx, [esp + 0x78]
call fcn.3007c570
push eax
mov ecx, esi
call fcn.30110920
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
push edi
push edi
push 1
push edi
push edi
push edi
push edi
push 1
push 0xc
lea ecx, [esp + 0x90]
call fcn.3007c570
push eax
mov ecx, esi
call fcn.30110920
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
mov edx, dword [esi + 0x7f4]
mov eax, dword [esi + 0x7e8]
push 1
push edx
push eax
mov ecx, esi
call fcn.30106030
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
mov edi, dword [esi + 0x7e8]
mov ebx, dword [esi + 0x1c]
mov ecx, esi
call fcn.300f88b0
mov ecx, dword [ebx]
push eax
push edi
call fcn.30034e10
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
mov ecx, dword [ebx + 4]
push 1
push ecx
lea ecx, [esp + 0x3c]
call fcn.3002cfd0
lea edx, [esp + 0x34]
push edx
mov ecx, esi
call fcn.3010e6f0
mov ebx, dword [ebx + 4]
xor eax, eax
movzx ecx, byte [eax + 0x30300058]
cmp ebx, ecx
je 0x30008903
inc eax
cmp eax, 0x13
jb 0x300088e1
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
mov al, byte [esi + 0xffd]
test al, al
je 0x3000894c
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x38]
push eax
mov ecx, esi
mov dword [esp + 0x1c], edi
call fcn.30110920
cmp dword [esp + 0x14], edi
je case.0x300087d8.57636
mov ecx, esi
mov dword [esp + 0x30], 0xa
call fcn.30006250
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
push edi
lea ecx, [esp + 0x38]
push ecx
mov ecx, esi
call fcn.30110920
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
mov edx, dword [ebx + 4]
push 1
push edx
lea ecx, [esp + 0x3c]
call fcn.3002cfd0
lea eax, [esp + 0x34]
push eax
mov ecx, esi
call fcn.3010e8b0
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
call fcn.3000da90
sub eax, 0x3b5
neg eax
pop edi
sbb eax, eax
pop esi
and eax, 5
pop ebp
inc eax
pop ebx
add esp, 0x180
ret 4
call fcn.3000da90
mov ebx, dword [ebx + 8]
test bl, 8
mov ebp, eax
mov dword [esp + 0x2c], ebp
je 0x30008b31
cmp ebp, 0x3b5
jne 0x30008b1f
push 0
push esi
mov ecx, esi
call fcn.30007ff0
push eax
call fcn.3000e300
mov edi, eax
add esp, 0xc
test edi, edi
je case.0x300087d8.57636
mov al, byte [esi + 0xfe4]
test al, al
je 0x30008a48
mov eax, dword [esi + 0x6e4]
test eax, eax
je 0x30008a48
push 1
push 8
lea ecx, [esp + 0x3c]
call fcn.3002cfd0
mov ecx, dword [esi + 0x6e4]
mov edx, dword [ecx + 4]
mov ecx, dword [edx + 0x18]
mov eax, dword [ecx + 0x18]
test eax, eax
je 0x30008a3e
cmp byte [eax], 0
je 0x30008a3e
push 0
lea eax, [esp + 0x38]
push eax
mov ecx, esi
call fcn.30110920
jmp 0x30008a48
lea edx, [esp + 0x34]
push edx
call fcn.3006b7e0
cmp word [edi], 0
push 0
je 0x30008af7
push 0
push 3
lea eax, [esp + 0x1c]
push eax
push 1
push edi
push 0
push 0x3b5
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov byte [esp + eax + 0x10], 0
lea eax, [esp + 0x10]
xor ebx, ebx
lea edx, [eax + 1]
jmp 0x30008a80
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x30008a80
sub eax, edx
mov ebp, eax
je 0x30008ae2
lea ecx, [ecx]
mov eax, dword [esi + 0x6e4]
test eax, eax
je 0x30008add
movzx ecx, byte [esp + ebx + 0x10]
push 0
push ecx
lea ecx, [esp + 0x3c]
call fcn.3002cfd0
mov edx, dword [esi + 0x6e4]
mov eax, dword [edx + 4]
mov ecx, dword [eax + 0x18]
mov eax, dword [ecx + 0x18]
test eax, eax
je 0x30008ad3
cmp byte [eax], 0
je 0x30008ad3
push 0
lea ecx, [esp + 0x38]
push ecx
mov ecx, esi
call fcn.30110920
jmp 0x30008add
lea edx, [esp + 0x34]
push edx
call fcn.3006b7e0
inc ebx
cmp ebx, ebp
jb 0x30008a90
mov al, byte [esi + 0xfe4]
test al, al
jne 0x30008b05
mov byte [esi + 0xfe4], 1
push 1
jmp 0x30008afe
mov byte [esi + 0xfe4], 0
mov ecx, esi
call fcn.300fb880
push edi
call fcn.30208320
mov eax, dword [esp + 0x34]
add esp, 4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
pop edi
pop esi
pop ebp
mov eax, 6
pop ebx
add esp, 0x180
ret 4
test bh, 8
je case.0x300087d8.57636
push 1
push esi
mov ecx, esi
call fcn.30007ff0
push eax
call fcn.3000e300
add esp, 0xc
cmp eax, edi
mov dword [esp + 0x14], eax
je case.0x300087d8.57636
cmp ebp, 0x3b5
jne 0x30008bc0
mov al, byte [esi + 0xfe4]
test al, al
je 0x30008bc0
push edi
mov ecx, esi
mov byte [esi + 0xfe4], 0
call fcn.300fb880
cmp dword [esi + 0x6e4], edi
je 0x30008bc0
push 1
push 8
lea ecx, [esp + 0x3c]
call fcn.3002cfd0
mov eax, dword [esi + 0x6e4]
mov ecx, dword [eax + 4]
mov ecx, dword [ecx + 0x18]
mov eax, dword [ecx + 0x18]
cmp eax, edi
je 0x30008bb6
cmp byte [eax], 0
je 0x30008bb6
push edi
lea edx, [esp + 0x38]
push edx
mov ecx, esi
call fcn.30110920
jmp 0x30008bc0
lea eax, [esp + 0x34]
push eax
call fcn.3006b7e0
mov edi, dword [esp + 0x14]
cmp word [edi], 0
je 0x30008c3d
lea ebx, [ebx]
mov edx, dword [esp + 0x2c]
push 0
push 0
push 3
lea ecx, [esp + 0x1c]
push ecx
push 1
push edi
push 0
push edx
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov byte [esp + eax + 0x10], 0
lea eax, [esp + 0x10]
xor ebx, ebx
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x30008c00
sub eax, edx
mov ebp, eax
je 0x30008c34
lea ecx, [ecx]
movzx eax, byte [esp + ebx + 0x10]
push 0
push eax
lea ecx, [esp + 0x3c]
call fcn.3002cfd0
push 0
lea ecx, [esp + 0x38]
push ecx
mov ecx, esi
call fcn.30110920
inc ebx
cmp ebx, ebp
jb 0x30008c10
add edi, 2
cmp word [edi], 0
jne 0x30008bd0
mov edx, dword [esp + 0x14]
push edx
call fcn.30208320
mov eax, dword [esp + 0x34]
add esp, 4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
mov eax, dword [ebx + 4]
cmp eax, 9
je case.0x300087d8.57636
cmp eax, 0xd
je case.0x300087d8.57636
cmp eax, 8
je case.0x300087d8.57636
cmp eax, 0x1b
je case.0x300087d8.57636
xor eax, eax
mov ecx, 0x25
lea edi, [esp + 0xfc]
rep stosd dword es:[edi], eax
lea eax, [esp + 0xfc]
push eax
mov dword [esp + 0x100], 0x94
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
cmp dword [esp + 0x100], 5
jae 0x30008ce3
mov ecx, dword [ebx + 4]
push 0
push ecx
lea ecx, [esp + 0x3c]
call fcn.3002cfd0
push 0
lea edx, [esp + 0x38]
push edx
mov ecx, esi
call fcn.30110920
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
call fcn.3000da90
push 0
xor ecx, ecx
mov cx, word [ebx + 4]
push 0
push 3
lea edx, [esp + 0x1c]
push edx
push 1
mov dword [esp + 0x40], ecx
lea ecx, [esp + 0x40]
push ecx
push 0
push eax
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov byte [esp + eax + 0x10], 0
lea eax, [esp + 0x10]
xor edi, edi
lea edx, [eax + 1]
jmp 0x30008d20
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x30008d20
sub eax, edx
mov ebx, eax
je case.0x300087d8.57636
movzx edx, byte [esp + edi + 0x10]
push 0
push edx
lea ecx, [esp + 0x3c]
call fcn.3002cfd0
push 0
lea eax, [esp + 0x38]
push eax
mov ecx, esi
call fcn.30110920
inc edi
cmp edi, ebx
jb 0x30008d31
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
mov ecx, dword [ebx + 4]
push edi
push 1
push edi
push edi
push edi
push edi
push 1
push ecx
lea ecx, [esp + 0x54]
call fcn.3007c570
push edi
lea edx, [esp + 0x38]
push edx
mov ecx, esi
call fcn.30110920
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
mov eax, dword [ebx + 4]
cmp eax, dword [esi + 0xfe8]
je case.0x300087d8.57636
cmp eax, 1
jne 0x30008e1d
mov al, byte [esi + 0xffd]
test al, al
je 0x30008e1d
mov eax, dword [ebx + 8]
cmp eax, 0x20
mov dword [esp + 0x14], edi
je 0x30008ddf
cmp eax, 0x30
jne 0x30008e1d
lea eax, [esp + 0x14]
push eax
push edi
push 1
push edi
push edi
push edi
push 1
lea ecx, [esp + 0xb8]
jmp 0x30008df2
lea ecx, [esp + 0x14]
push ecx
push edi
push 1
push edi
push edi
push edi
push edi
lea ecx, [esp + 0xe8]
push edi
push 0x12
mov dword [esi + 0x918], edi
call fcn.3007c570
mov ecx, esi
push eax
call fcn.30110920
cmp dword [esp + 0x14], edi
je 0x30008e1d
mov ecx, esi
mov dword [esp + 0x30], 0xa
call fcn.30006250
mov edx, dword [ebx + 4]
mov dword [esi + 0xfe8], edx
mov edx, dword [ebx + 4]
xor eax, eax
cmp edx, 1
sete al
push 1
mov ecx, esi
push eax
call fcn.3010f080
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4
mov dword [esp + 0x30], 6
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x180
ret 4