Function at 0x55ee00
Capabilities:
Check os version

Disassembly:
push 0xffffffffffffffff
push 0x655788
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x168
push ebx
mov ebx, ecx
push ebp
push esi
mov eax, dword [ebx + 0x34]
xor esi, esi
cmp eax, esi
push edi
mov dword [esp + 0x30], ebx
jne 0x55ee35
xor eax, eax
jmp 0x55fe59
lea eax, [esp + 0x48]
mov ecx, ebx
push eax
call fcn.00569f50
mov ecx, dword [eax]
mov dword [esp + 0x88], ecx
mov edx, dword [eax + 4]
fld dword [esp + 0x88]
mov ecx, dword [eax + 8]
mov dword [esp + 0x8c], edx
fcomp dword [esp + 0x8c]
mov edx, dword [eax + 0xc]
mov dword [esp + 0x90], ecx
mov dword [esp + 0x94], edx
fnstsw ax
test ah, 1
je 0x55ee92
fld dword [esp + 0x90]
fcomp dword [esp + 0x94]
fnstsw ax
test ah, 1
jne 0x55ee99
xor eax, eax
jmp 0x55fe59
mov ecx, ebx
call fcn.0055ecd0
mov ebp, eax
cmp ebp, esi
jne 0x55eead
xor eax, eax
jmp 0x55fe59
mov ecx, ebx
call fcn.0055ecb0
cmp eax, esi
jne 0x55eebf
xor eax, eax
jmp 0x55fe59
mov ecx, ebp
call fcn.004bac70
cmp eax, esi
mov dword [esp + 0x40], eax
jne 0x55ef45
mov eax, dword [ebx + 0xc]
push eax
call fcn.0048beb0
mov edi, eax
add esp, 4
cmp edi, esi
mov dword [esp + 0x40], edi
jne 0x55ef10
push ecx
mov ecx, esp
mov dword [esp + 0x84], esp
push 0xffffffffffffffff
push str.Helvetica
call fcn.00490fb0
mov ecx, dword [ebx + 0xc]
push ecx
call fcn.0048c010
mov edi, eax
add esp, 8
cmp edi, esi
mov dword [esp + 0x40], edi
je 0x55ef45
mov dword [esp + 0x38], esi
mov ecx, dword [ebx + 0x34]
lea edx, [esp + 0x38]
push edx
push edi
mov dword [esp + 0x188], esi
call fcn.0048d520
push edi
mov ecx, ebp
call fcn.004bad40
lea ecx, [esp + 0x38]
mov dword [esp + 0x180], 0xffffffff
call fcn.00490f90
push 0x110
call fcn.006147b3
add esp, 4
mov dword [esp + 0x68], eax
cmp eax, esi
mov dword [esp + 0x180], 1
je 0x55ef70
mov ecx, eax
call fcn.00589200
mov ebx, eax
jmp 0x55ef72
xor ebx, ebx
lea ecx, [esp + 0x14c]
mov dword [esp + 0x180], 0xffffffff
mov dword [esp + 0x108], 0
mov dword [esp + 0x104], 0
mov dword [esp + 0x100], 0
mov dword [esp + 0xfc], 0
mov dword [esp + 0x11c], esi
mov dword [esp + 0x12c], 0
mov dword [esp + 0x128], 0
mov dword [esp + 0x124], 0
mov dword [esp + 0x120], 0
mov dword [esp + 0x138], esi
mov dword [esp + 0x148], 0
mov dword [esp + 0x144], 0
mov dword [esp + 0x140], 0
mov dword [esp + 0x13c], 0
call fcn.0055ff30
mov ecx, 0x1f
xor eax, eax
lea edi, [esp + 0xfc]
mov dword [esp + 0x16c], esi
mov dword [esp + 0x168], esi
mov dword [esp + 0x164], esi
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x30]
lea eax, [esp + 0x48]
push eax
mov dword [esp + 0x134], esi
mov dword [esp + 0x138], 1
mov dword [esp + 0x164], 0x41100000
mov dword [esp + 0x178], esi
call fcn.0055ecf0
mov ecx, dword [eax]
mov dword [esp + 0xfc], ecx
mov edx, dword [eax + 4]
mov dword [esp + 0x100], edx
mov ecx, dword [eax + 8]
mov dword [esp + 0x104], ecx
mov ecx, ebp
mov edx, dword [eax + 0xc]
mov dword [esp + 0x10c], esi
mov dword [esp + 0x108], edx
mov dword [esp + 0x114], esi
call fcn.004ba110
cmp eax, 4
mov dword [esp + 0x80], eax
ja case.0x55f0ba.71
jmp dword [eax*4 + 0x55fe74]
mov edi, 0xc8000001
jmp 0x55f0db
mov edi, 0xc8000004
jmp 0x55f0db
mov edi, 0xc8000002
jmp 0x55f0db
mov edi, 0xc8000008
mov ecx, ebp
call fcn.004ba9e0
dec eax
cmp eax, 5
ja case.default.0x55f0e8
jmp dword [eax*4 + 0x55fe88]
or edi, 0x20
jmp 0x55f11c
or edi, 0x40
jmp 0x55f11c
or edi, 0x80
jmp 0x55f11c
or edi, 0x100
jmp 0x55f11c
or edi, 0x200
jmp 0x55f11c
or edi, 0x400
jmp 0x55f11c
or edi, 0x10
push ecx
mov dword [esp + 0x11c], edi
mov ecx, esp
mov dword [esp + 0x38], esp
push 0xffffffffffffffff
push 0x6e1094
call fcn.00490fb0
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x48]
push eax
push ecx
mov ecx, ebp
call fcn.004ba620
mov eax, dword [esp + 0x44]
cmp eax, esi
jle 0x55f273
fld dword [esp + 0x18]
fcomp dword [0x66419c]
mov dword [esp + 0x48], eax
fnstsw ax
test ah, 0x41
jne 0x55f183
fld dword [esp + 0x18]
fld dword [esp + 0x18]
fcomp dword [0x661224]
fnstsw ax
test ah, 1
je 0x55f18f
fstp dword [esp + 0x4c]
jmp 0x55f199
fld dword [0x66419c]
fstp dword [esp + 0x4c]
jmp 0x55f199
fstp st(0)
mov dword [esp + 0x4c], 0x3f800000
fld dword [esp + 0x1c]
fcomp dword [0x66419c]
fnstsw ax
test ah, 0x41
jne 0x55f1c5
fld dword [esp + 0x1c]
fld dword [esp + 0x1c]
fcomp dword [0x661224]
fnstsw ax
test ah, 1
je 0x55f1d1
fstp dword [esp + 0x50]
jmp 0x55f1db
fld dword [0x66419c]
fstp dword [esp + 0x50]
jmp 0x55f1db
fstp st(0)
mov dword [esp + 0x50], 0x3f800000
fld dword [esp + 0x20]
fcomp dword [0x66419c]
fnstsw ax
test ah, 0x41
jne 0x55f207
fld dword [esp + 0x20]
fld dword [esp + 0x20]
fcomp dword [0x661224]
fnstsw ax
test ah, 1
je 0x55f213
fstp dword [esp + 0x54]
jmp 0x55f21d
fld dword [0x66419c]
fstp dword [esp + 0x54]
jmp 0x55f21d
fstp st(0)
mov dword [esp + 0x54], 0x3f800000
fld dword [esp + 0x24]
fcomp dword [0x66419c]
fnstsw ax
test ah, 0x41
jne 0x55f249
fld dword [esp + 0x24]
fld dword [esp + 0x24]
fcomp dword [0x661224]
fnstsw ax
test ah, 1
je 0x55f255
fstp dword [esp + 0x58]
jmp 0x55f25f
fld dword [0x66419c]
fstp dword [esp + 0x58]
jmp 0x55f25f
fstp st(0)
mov dword [esp + 0x58], 0x3f800000
mov ecx, 5
lea esi, [esp + 0x48]
lea edi, [esp + 0x11c]
rep movsd dword es:[edi], dword [esi]
xor esi, esi
push ecx
mov ecx, esp
mov dword [esp + 0x38], esp
push 0xffffffffffffffff
push 0x6dfb3c
call fcn.00490fb0
lea edx, [esp + 0x1c]
lea eax, [esp + 0x48]
push edx
push eax
mov ecx, ebp
call fcn.004ba620
mov eax, dword [esp + 0x44]
cmp eax, esi
jle 0x55f3c3
fld dword [esp + 0x18]
fcomp dword [0x66419c]
mov dword [esp + 0x48], eax
fnstsw ax
test ah, 0x41
jne 0x55f2d3
fld dword [esp + 0x18]
fld dword [esp + 0x18]
fcomp dword [0x661224]
fnstsw ax
test ah, 1
je 0x55f2df
fstp dword [esp + 0x4c]
jmp 0x55f2e9
fld dword [0x66419c]
fstp dword [esp + 0x4c]
jmp 0x55f2e9
fstp st(0)
mov dword [esp + 0x4c], 0x3f800000
fld dword [esp + 0x1c]
fcomp dword [0x66419c]
fnstsw ax
test ah, 0x41
jne 0x55f315
fld dword [esp + 0x1c]
fld dword [esp + 0x1c]
fcomp dword [0x661224]
fnstsw ax
test ah, 1
je 0x55f321
fstp dword [esp + 0x50]
jmp 0x55f32b
fld dword [0x66419c]
fstp dword [esp + 0x50]
jmp 0x55f32b
fstp st(0)
mov dword [esp + 0x50], 0x3f800000
fld dword [esp + 0x20]
fcomp dword [0x66419c]
fnstsw ax
test ah, 0x41
jne 0x55f357
fld dword [esp + 0x20]
fld dword [esp + 0x20]
fcomp dword [0x661224]
fnstsw ax
test ah, 1
je 0x55f363
fstp dword [esp + 0x54]
jmp 0x55f36d
fld dword [0x66419c]
fstp dword [esp + 0x54]
jmp 0x55f36d
fstp st(0)
mov dword [esp + 0x54], 0x3f800000
fld dword [esp + 0x24]
fcomp dword [0x66419c]
fnstsw ax
test ah, 0x41
jne 0x55f399
fld dword [esp + 0x24]
fld dword [esp + 0x24]
fcomp dword [0x661224]
fnstsw ax
test ah, 1
je 0x55f3a5
fstp dword [esp + 0x58]
jmp 0x55f3af
fld dword [0x66419c]
fstp dword [esp + 0x58]
jmp 0x55f3af
fstp st(0)
mov dword [esp + 0x58], 0x3f800000
mov ecx, 5
lea esi, [esp + 0x48]
lea edi, [esp + 0x138]
rep movsd dword es:[edi], dword [esi]
xor esi, esi
mov edi, dword [esp + 0x30]
mov ecx, edi
call fcn.0056abd0
mov ecx, edi
mov dword [esp + 0x134], eax
call fcn.0056b9a0
dec eax
mov ecx, 3
cmp eax, ecx
ja case.default.0x55f3e6
jmp dword [eax*4 + 0x55fea0]
mov eax, ecx
mov dword [esp + 0x130], 1
mov dword [esp + 0x164], eax
mov dword [esp + 0x168], ecx
mov dword [esp + 0x16c], esi
jmp 0x55f45d
mov ecx, dword [esp + 0x134]
mov dword [esp + 0x130], 2
lea edx, [ecx + ecx]
mov dword [esp + 0x134], edx
jmp 0x55f45d
mov eax, dword [esp + 0x134]
mov dword [esp + 0x130], ecx
lea ecx, [eax + eax]
mov dword [esp + 0x134], ecx
jmp 0x55f45d
mov dword [esp + 0x130], 4
jmp 0x55f45d
mov dword [esp + 0x130], esi
lea edx, [esp + 0x3c]
mov ecx, ebp
push edx
call fcn.004baaf0
push esi
lea ecx, [esp + 0x40]
mov dword [esp + 0x184], 2
call fcn.004b5a20
test eax, eax
je 0x55f5c2
lea eax, [esp + 0x18]
push esi
lea ecx, [esp + 0x48]
push eax
push ecx
lea ecx, [esp + 0x48]
call fcn.004b5f40
fld dword [esp + 0x18]
fcomp dword [0x66419c]
mov edx, dword [esp + 0x44]
mov dword [esp + 0x48], edx
fnstsw ax
test ah, 0x41
jne 0x55f4ce
fld dword [esp + 0x18]
fld dword [esp + 0x18]
fcomp dword [0x661224]
fnstsw ax
test ah, 1
je 0x55f4da
fstp dword [esp + 0x4c]
jmp 0x55f4e4
fld dword [0x66419c]
fstp dword [esp + 0x4c]
jmp 0x55f4e4
fstp st(0)
mov dword [esp + 0x4c], 0x3f800000
fld dword [esp + 0x1c]
fcomp dword [0x66419c]
fnstsw ax
test ah, 0x41
jne 0x55f510
fld dword [esp + 0x1c]
fld dword [esp + 0x1c]
fcomp dword [0x661224]
fnstsw ax
test ah, 1
je 0x55f51c
fstp dword [esp + 0x50]
jmp 0x55f526
fld dword [0x66419c]
fstp dword [esp + 0x50]
jmp 0x55f526
fstp st(0)
mov dword [esp + 0x50], 0x3f800000
fld dword [esp + 0x20]
fcomp dword [0x66419c]
fnstsw ax
test ah, 0x41
jne 0x55f552
fld dword [esp + 0x20]
fld dword [esp + 0x20]
fcomp dword [0x661224]
fnstsw ax
test ah, 1
je 0x55f55e
fstp dword [esp + 0x54]
jmp 0x55f568
fld dword [0x66419c]
fstp dword [esp + 0x54]
jmp 0x55f568
fstp st(0)
mov dword [esp + 0x54], 0x3f800000
fld dword [esp + 0x24]
fcomp dword [0x66419c]
fnstsw ax
test ah, 0x41
jne 0x55f594
fld dword [esp + 0x24]
fld dword [esp + 0x24]
fcomp dword [0x661224]
fnstsw ax
test ah, 1
je 0x55f5a0
fstp dword [esp + 0x58]
jmp 0x55f5aa
fld dword [0x66419c]
fstp dword [esp + 0x58]
jmp 0x55f5aa
fstp st(0)
mov dword [esp + 0x58], 0x3f800000
mov ecx, 5
lea esi, [esp + 0x48]
lea edi, [esp + 0x14c]
rep movsd dword es:[edi], dword [esi]
mov edi, dword [esp + 0x30]
xor esi, esi
mov dword [esp + 0x78], esi
lea ecx, [esp + 0x3c]
mov byte [esp + 0x180], 3
call fcn.004b5600
test eax, eax
je 0x55f5f9
lea eax, [esp + 0x34]
lea ecx, [esp + 0x78]
push eax
push ecx
lea ecx, [esp + 0x44]
call fcn.004b5660
mov edx, dword [esp + 0x34]
mov dword [esp + 0x160], edx
fld dword [esp + 0x160]
fcomp dword [0x66419c]
fnstsw ax
test ah, 0x41
je 0x55f618
or dword [esp + 0x118], 0x400000
mov ecx, dword [edi + 0x34]
call fcn.0048d670
mov dword [esp + 0x7c], esi
cmp eax, esi
mov byte [esp + 0x180], 4
je 0x55f63e
lea ecx, [esp + 0x7c]
push ecx
mov ecx, dword [edi + 0x34]
push eax
call fcn.0048d500
push 0x28
call fcn.006147b3
add esp, 4
mov dword [esp + 0x68], eax
cmp eax, esi
mov byte [esp + 0x180], 5
je 0x55f664
push edi
mov ecx, eax
call fcn.00589cc0
mov edi, eax
jmp 0x55f666
xor edi, edi
mov eax, dword [esp + 0x40]
mov edx, dword [edi]
push eax
mov ecx, edi
mov dword [esp + 0x38], edi
mov byte [esp + 0x184], 4
call dword [edx + 0x14]
mov edx, dword [edi]
lea eax, [esp + 0x78]
push eax
mov ecx, edi
call dword [edx + 0x18]
mov dword [esp + 0x110], edi
mov edx, dword [ebx]
lea eax, [esp + 0xfc]
mov ecx, ebx
push eax
call dword [edx + 8]
test eax, eax
je 0x55fe05
mov dword [esp + 0x68], esi
mov dword [esp + 0x6c], esi
mov dword [esp + 0x60], esi
mov dword [esp + 0x74], esi
push ecx
mov byte [esp + 0x184], 9
mov ecx, esp
mov dword [esp + 0x88], esp
push 0xffffffffffffffff
push 0x710ec0
call fcn.00490fb0
mov ecx, ebp
call fcn.004ba220
cmp eax, esi
je 0x55f71e
lea ecx, [esp + 0x10]
push ecx
mov ecx, ebp
call fcn.00550d00
push eax
lea ecx, [esp + 0x70]
mov byte [esp + 0x184], 0xa
call fcn.0049a330
lea ecx, [esp + 0x10]
mov byte [esp + 0x180], 9
call fcn.00490f90
lea edx, [esp + 0x6c]
mov ecx, ebx
push edx
push 1
call fcn.005896c0
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0xffffffffffffffff
push 0x71102c
call fcn.00490fb0
mov ecx, ebp
call fcn.004ba220
cmp eax, esi
je 0x55f779
lea eax, [esp + 0x10]
mov ecx, ebp
push eax
call fcn.0055feb0
push eax
lea ecx, [esp + 0x64]
mov byte [esp + 0x184], 0xb
call fcn.0049a330
lea ecx, [esp + 0x10]
mov byte [esp + 0x180], 9
call fcn.00490f90
lea ecx, [esp + 0x60]
push ecx
push 2
mov ecx, ebx
call fcn.005896c0
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0xffffffffffffffff
push 0x711028
call fcn.00490fb0
mov ecx, ebp
call fcn.004ba220
cmp eax, esi
je 0x55f7d4
lea edx, [esp + 0x10]
mov ecx, ebp
push edx
call fcn.0055fef0
push eax
lea ecx, [esp + 0x78]
mov byte [esp + 0x184], 0xc
call fcn.0049a330
lea ecx, [esp + 0x10]
mov byte [esp + 0x180], 9
call fcn.00490f90
lea eax, [esp + 0x74]
mov ecx, ebx
push eax
push 3
call fcn.005896c0
push ecx
mov dword [esp + 0x74], esi
mov ecx, esp
mov dword [esp + 0x30], esp
push 0xffffffffffffffff
push 0x6df830
mov dword [esp + 0x70], esi
mov dword [esp + 0x1c], esi
call fcn.00490fb0
mov ecx, ebp
call fcn.004ba220
cmp eax, esi
je 0x55f826
push ecx
mov ecx, esp
mov dword [esp + 0x74], esp
push 0xffffffffffffffff
push 0x6df830
call fcn.00490fb0
mov ecx, ebp
call fcn.004ba870
push eax
push 1
mov ecx, ebx
mov dword [esp + 0x78], eax
call fcn.00589720
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 0xffffffffffffffff
push 0x711024
call fcn.00490fb0
mov ecx, ebp
call fcn.004ba220
cmp eax, esi
je 0x55f86c
push ecx
mov ecx, esp
mov dword [esp + 0x68], esp
push 0xffffffffffffffff
push 0x711024
call fcn.00490fb0
mov ecx, ebp
call fcn.004ba870
push eax
push 2
mov ecx, ebx
mov dword [esp + 0x6c], eax
call fcn.00589720
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 0xffffffffffffffff
push 0x711020
call fcn.00490fb0
mov ecx, ebp
call fcn.004ba220
cmp eax, esi
je 0x55f8b2
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0xffffffffffffffff
push 0x711020
call fcn.00490fb0
mov ecx, ebp
call fcn.004ba870
push eax
push 3
mov ecx, ebx
mov dword [esp + 0x18], eax
call fcn.00589720
lea ecx, [esp + 0x2c]
push ecx
mov ecx, ebp
call fcn.004ba960
mov edx, dword [eax]
lea eax, [esp + 0x84]
push eax
mov ecx, ebx
mov dword [esp + 0x88], edx
call fcn.00589770
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa0], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0xac], esi
push 4
lea ecx, [esp + 0xb4]
mov byte [esp + 0x184], 0xd
call fcn.00492640
mov ecx, dword [0x69fc14]
mov dword [esp + 0xdc], 0
mov edx, ecx
mov dword [esp + 0xd4], ecx
mov dword [esp + 0xc8], edx
mov dword [esp + 0xd8], 0
mov dword [esp + 0xd0], 0
mov dword [esp + 0xcc], 0
mov dword [esp + 0xe4], esi
mov dword [esp + 0xec], esi
push 0x711030
lea ecx, [esp + 0xb0]
mov byte [esp + 0x184], 0x10
mov dword [esp + 0xac], 0x3f800000
call fcn.00491140
push 0xffffffffffffffff
push 0x6d33d0
lea ecx, [esp + 0x40]
call fcn.00490fb0
mov eax, dword [esp + 0xb4]
push 1
push eax
lea ecx, [esp + 0xb8]
mov byte [esp + 0x188], 0x11
call fcn.00492830
mov dword [esp + 0x2c], eax
mov dword [esp + 0xf8], eax
cmp eax, esi
mov byte [esp + 0x180], 0x12
je 0x55f9e4
lea ecx, [esp + 0x38]
push ecx
mov ecx, eax
call fcn.00491060
lea ecx, [esp + 0x38]
mov byte [esp + 0x180], 0x10
call fcn.00490f90
mov dword [esp + 0xc4], esi
mov dword [esp + 0xe0], esi
mov dword [esp + 0xe8], esi
mov dword [esp + 0xf0], esi
mov dword [esp + 0xf4], esi
mov dword [esp + 0x14], esi
push 0xffffffffffffffff
push str.Text
lea ecx, [esp + 0x34]
mov byte [esp + 0x188], 0x14
call fcn.00490fb0
mov edx, dword [esp + 0xb4]
push 1
push edx
lea ecx, [esp + 0xb8]
mov byte [esp + 0x188], 0x15
call fcn.00492830
mov dword [esp + 0xf8], eax
mov dword [esp + 0x28], eax
cmp eax, esi
mov byte [esp + 0x180], 0x16
je 0x55fa75
lea ecx, [esp + 0x2c]
push ecx
mov ecx, eax
call fcn.00491060
lea ecx, [esp + 0x2c]
mov byte [esp + 0x180], 0x14
call fcn.00490f90
mov ecx, dword [esp + 0x30]
lea edx, [esp + 0x48]
push edx
mov dword [esp + 0xc8], 1
call fcn.0055eaf0
mov ecx, 6
mov esi, eax
lea edi, [esp + 0xc8]
lea eax, [esp + 0x88]
rep movsd dword es:[edi], dword [esi]
mov esi, dword [esp + 0x30]
push eax
mov ecx, esi
call fcn.0055ecf0
mov ecx, dword [eax]
mov dword [esp + 0x98], ecx
mov edx, dword [eax + 4]
mov dword [esp + 0x9c], edx
mov ecx, dword [eax + 8]
mov dword [esp + 0xa0], ecx
mov ecx, dword [esp + 0x40]
mov edx, dword [eax + 0xc]
lea eax, [esp + 0xe4]
push eax
push ecx
mov ecx, dword [esi + 0x34]
mov dword [esp + 0xac], edx
mov dword [esp + 0xe8], 1
call fcn.0048d500
test eax, eax
jne 0x55fb1e
push str.ZiTi
lea ecx, [esp + 0xe8]
call fcn.00491140
mov edx, dword [esp + 0x40]
mov eax, dword [ebx]
push 0
push 1
mov ecx, ebx
mov dword [esp + 0xf0], edx
call dword [eax + 0xb4]
mov edx, dword [ebx]
lea eax, [esp + 0x14]
push eax
mov ecx, ebx
call dword [edx + 0x18]
mov eax, dword [esp + 0x14]
test eax, eax
lea edi, [eax + 0xc]
jne 0x55fb53
mov edi, 0x730500
mov ecx, dword [esp + 0x70]
push ecx
mov dword [esp + 0xf8], ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0xffffffffffffffff
push 0x730500
call fcn.00490fb0
mov edx, dword [esp + 0x34]
lea eax, [esp + 0x9c]
push 0
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x18c], 0x14
lea esi, [edx + 0x10]
call fcn.00605fa0
push eax
push edi
mov ecx, esi
call fcn.0056f220
mov eax, dword [esp + 0x80]
cmp eax, 3
je 0x55fbea
cmp eax, 4
je 0x55fbea
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0xffffffffffffffff
push 0x730500
call fcn.00490fb0
push 1
mov ecx, esi
call fcn.0056fde0
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0xffffffffffffffff
push 0x730500
call fcn.00490fb0
push 2
mov ecx, esi
call fcn.0056fde0
jmp 0x55fd06
mov eax, dword [esp + 0x60]
test eax, eax
jne 0x55fc2e
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0xffffffffffffffff
push 0x711024
call fcn.00490fb0
mov ecx, ebp
call fcn.004ba220
test eax, eax
jne 0x55fc2e
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0xffffffffffffffff
push 0x730500
call fcn.00490fb0
push 1
mov ecx, esi
call fcn.0056fde0
jmp 0x55fc9a
mov edx, dword [ebx]
push 0
push 2
mov ecx, ebx
call dword [edx + 0xb4]
mov eax, dword [ebx]
lea ecx, [esp + 0x14]
push ecx
mov ecx, ebx
call dword [eax + 0x18]
mov eax, dword [esp + 0x14]
test eax, eax
lea edi, [eax + 0xc]
jne 0x55fc58
mov edi, 0x730500
mov edx, dword [esp + 0x64]
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0xffffffffffffffff
push 0x730500
mov dword [esp + 0x100], edx
call fcn.00490fb0
lea eax, [esp + 0x9c]
push 1
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x18c], 0x14
call fcn.00605fa0
push eax
push edi
mov ecx, esi
call fcn.0056f220
mov edx, dword [ebx]
push 0
push 3
mov ecx, ebx
call dword [edx + 0xb4]
mov eax, dword [ebx]
lea ecx, [esp + 0x14]
push ecx
mov ecx, ebx
call dword [eax + 0x18]
mov eax, dword [esp + 0x14]
test eax, eax
lea edi, [eax + 0xc]
jne 0x55fcc4
mov edi, 0x730500
mov edx, dword [esp + 0x10]
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0xffffffffffffffff
push 0x730500
mov dword [esp + 0x100], edx
call fcn.00490fb0
lea eax, [esp + 0x9c]
push 2
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x18c], 0x14
call fcn.00605fa0
push eax
push edi
mov ecx, esi
call fcn.0056f220
lea ecx, [esp + 0x14]
mov byte [esp + 0x180], 0x13
call fcn.00490f90
lea ecx, [esp + 0xec]
mov byte [esp + 0x180], 0x1c
call fcn.00490f90
lea ecx, [esp + 0xe4]
mov byte [esp + 0x180], 0x1b
call fcn.00490f90
lea ecx, [esp + 0xb0]
mov dword [esp + 0x28], ecx
mov eax, dword [esp + 0xb4]
xor esi, esi
test eax, eax
mov byte [esp + 0x180], 0x1d
jle 0x55fd83
mov ecx, esi
mov edx, dword [esp + 0xb0]
imul ecx, dword [esp + 0xc0]
add ecx, edx
call fcn.00490f90
mov eax, dword [esp + 0xb4]
inc esi
cmp esi, eax
jl 0x55fd5f
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0xb8]
call fcn.00492670
lea ecx, [esp + 0xb0]
mov byte [esp + 0x180], 0x1a
call fcn.00492660
lea ecx, [esp + 0xac]
mov byte [esp + 0x180], 9
call fcn.00490f90
lea ecx, [esp + 0x74]
mov byte [esp + 0x180], 8
call fcn.00490f90
lea ecx, [esp + 0x60]
mov byte [esp + 0x180], 7
call fcn.00490f90
lea ecx, [esp + 0x6c]
mov byte [esp + 0x180], 6
call fcn.00490f90
lea ecx, [esp + 0x68]
mov byte [esp + 0x180], 4
call fcn.00490f90
mov edi, dword [esp + 0x34]
xor esi, esi
cmp ebx, esi
je 0x55fe11
mov edx, dword [ebx]
push 1
mov ecx, ebx
call dword [edx]
cmp edi, esi
je 0x55fe1e
mov eax, dword [edi]
push 1
mov ecx, edi
call dword [eax + 0x40]
lea ecx, [esp + 0x7c]
mov byte [esp + 0x180], 3
call fcn.00490f90
lea ecx, [esp + 0x78]
mov byte [esp + 0x180], 2
call fcn.00490f90
lea ecx, [esp + 0x3c]
mov dword [esp + 0x180], 0xffffffff
call fcn.00490f90
mov eax, 1
mov ecx, dword [esp + 0x178]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x174
ret