Function at 0x4ee5c0
Capabilities:
Check os version
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
push esi
push dword [esp + 0x20]
push dword [esp + 0x20]
push dword [esp + 0x20]
push dword [esp + 0x20]
push dword [esp + 0x20]
push dword [esp + 0x20]
push dword [esp + 0x20]
call 0x56d800
mov esi, eax
add esp, 0x1c
cmp esi, 0xffffffd2
jne 0x4ee659
mov edx, dword [0x730f2c]
mov ecx, dword fs:[0x2c]
push edi
mov edi, dword [ecx + edx*4]
cmp byte [edi + 0x30], 0
jne 0x4ee60b
call fcn.00597754
cmp dword [edi + 0x28], 0
jne 0x4ee656
cmp byte [edi + 0x30], 0
jne 0x4ee622
call fcn.00597754
push 0
push 0x80000
push 0x8000
call fcn.0058b780
mov ecx, dword [edi + 0x28]
add esp, 0xc
mov dword [edi + 0x28], eax
test ecx, ecx
je 0x4ee64f
push ecx
call fcn.0058b8c0
add esp, 4
pop edi
pop esi
jmp 0x56d800
mov eax, esi
pop edi
pop esi
ret
sub esp, 0x168
mov eax, dword [0x72cec4]
xor eax, esp
mov dword [esp + 0x164], eax
push ebx
push ebp
push esi
push edi
mov ecx, dword [esp + 0x17c]
mov edx, dword [esp + 0x194]
mov eax, dword [esp + 0x190]
mov ebx, dword [esp + 0x180]
mov esi, dword [esp + 0x184]
xor ebp, ebp
mov dword [esp + 0x10], ecx
xor ecx, ecx
mov dword [esp + 0x34], edx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ebx
mov dword [esp + 0x28], esi
mov dword [esp + 0x60], 0
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x50], ecx
mov dword [esp + 0x78], ecx
mov dword [esp + 0x38], ecx
mov dword [esp + 0x30], ecx
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x54], ecx
mov edi, dword [esp + 0x188]
mov dword [esp + 0x40], edi
test ebx, ebx
jne 0x56d89e
test esi, esi
mov eax, 0x5e4df1
cmovne eax, ebx
mov ebx, eax
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x1c]
test dword [esp + 0x18c], 0x1fff9fc0
jne 0x56eb99
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x56eb92
test ebx, ebx
je 0x56eb92
test eax, eax
je 0x56eb92
lea eax, [edi + edi]
mov dword [esp + 0x84], eax
add eax, ebx
mov esi, eax
mov dword [esp + 0x8c], eax
lea eax, [esi - 2]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x28]
cmp eax, 0xffffffff
jne 0x56d90d
push ebx
call fcn.00590d40
mov edx, dword [esp + 0x38]
add esp, 4
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x28], eax
mov dword [esp + 0x60], 1
lea eax, [ebx + eax*2]
mov dword [esp + 0x14], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x74], eax
cmp edi, dword [esp + 0x28]
jbe 0x56d92c
mov eax, 0xffffffdf
jmp 0x56eb9e
cmp dword [ecx + 0x38], 0x50435245
je 0x56d93f
mov eax, 0xffffffe1
jmp 0x56eb9e
mov ecx, dword [ecx + 0x48]
mov eax, ecx
and al, 7
cmp al, 2
je 0x56d954
mov eax, 0xffffffe0
jmp 0x56eb9e
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x18c]
shr ecx, 0xe
and ecx, 0xc
or ebx, ecx
mov dword [esp + 0x18c], ebx
cmp dword [eax + 0x10], ebp
je 0x56d982
test ebx, 0xbfffbfc0
jne 0x56d982
mov ebx, 1
jmp 0x56d984
xor ebx, ebx
mov ecx, dword [eax + 0x40]
mov eax, ecx
shr eax, 0x13
and eax, 1
mov dword [esp + 0x24], ecx
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x18c]
test al, 0x20
je 0x56d9a9
mov eax, 2
jmp 0x56d9af
shr eax, 4
and eax, 1
movzx eax, ax
mov word [esp + 0x10c], ax
test ax, ax
je 0x56d9d3
mov eax, ecx
or eax, dword [esp + 0x18c]
test eax, 0x20000000
jne 0x56eb99
test edx, edx
je 0x56d9ef
cmp dword [edx + 0x24], 0xffffffff
je 0x56d9ef
test ecx, 0x800000
jne 0x56d9ef
mov eax, 0xffffffc8
jmp 0x56eb9e
mov eax, dword [esp + 0x1c]
test byte [eax + 0x2d], 1
je 0x56da1f
push dword [eax + 8]
mov edi, dword [eax + 4]
mov ecx, edi
push dword [eax + 0x10]
call dword [0x5cd3f0]
call edi
mov eax, dword [esp + 0x24]
add esp, 8
mov edi, dword [esp + 0x40]
mov ecx, dword [esp + 0x24]
and byte [eax + 0x2d], 0xfe
mov dword [eax + 0x28], ebp
lea edx, [eax + 0x28]
mov dword [esp + 0x5c], edx
mov edx, 0xdc00
mov dword [eax + 0x10], ebp
mov dword [esp + 0x44], 0xfc00
mov dword [esp + 0x48], edx
test ebx, ebx
je 0x56db7b
cmp dword [esp + 0x18], ebp
je 0x56daf8
test dword [esp + 0x18c], 0x40000000
jne 0x56daf8
test ecx, 0x4000000
jne 0x56daf8
mov ebp, 0xfc00
cmp esi, dword [esp + 0x14]
jae 0x56da86
mov ax, word [esi]
and ax, bp
cmp ax, dx
je 0x56dd26
mov ebx, dword [esp + 0x10]
mov edx, dword [esp + 0x20]
movzx ecx, word [ebx + 0x64]
test ecx, ecx
je 0x56dabd
cmp esi, edx
jbe 0x56dabd
sub esi, 2
cmp esi, edx
jbe 0x56dab8
mov edi, 0xdc00
mov ax, word [esi]
and ax, bp
cmp ax, di
jne 0x56dab8
sub esi, 2
cmp esi, edx
ja 0x56daa6
sub ecx, 1
jne 0x56da96
mov eax, dword [esp + 0x28]
mov edi, esi
mov ebp, dword [esp + 0x5c]
sub edi, edx
sar edi, 1
push ebp
sub eax, edi
push eax
push esi
call fcn.005940e0
mov ecx, dword [esp + 0x28]
add esp, 0xc
mov dword [ecx + 0x30], eax
test eax, eax
je 0x56daeb
add dword [ebp], edi
jmp 0x56eb9e
mov edi, dword [esp + 0x40]
mov ebp, 1
mov eax, ecx
jmp 0x56dafc
mov ebx, dword [esp + 0x10]
push dword [esp + 0x34]
push eax
push dword [esp + 0x194]
push edi
push dword [esp + 0x38]
push dword [esp + 0x34]
push ebx
call fcn.0058b5a0
mov ebx, eax
add esp, 0x1c
cmp ebx, 0xffffffd3
je 0x56db7b
test ebx, ebx
js 0x56db74
test dword [esp + 0x18c], 0x4000
je 0x56db74
mov ecx, dword [esp + 0x60]
mov edi, dword [esp + 0x28]
mov ebp, dword [esp + 0x1c]
lea edi, [edi + ecx]
push dword [ebp + 8]
mov esi, dword [ebp]
add edi, edi
push edi
mov ecx, esi
call dword [0x5cd3f0]
call esi
add esp, 8
mov dword [ebp + 0x10], eax
test eax, eax
je 0x56e033
push edi
push dword [esp + 0x24]
push eax
call fcn.00599570
add esp, 0xc
or byte [ebp + 0x2d], 1
mov eax, ebx
jmp 0x56eb9e
cmp dword [esp + 0x18], 0
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x120], ebx
je 0x56dd50
test ebp, ebp
mov ebp, dword [esp + 0x24]
jne 0x56dd54
test dword [esp + 0x18c], 0x40000000
je 0x56dbb6
test ebp, 0x4000000
je 0x56dd54
mov edx, dword [esp + 0x14]
mov eax, ebp
xor ecx, ecx
and eax, 0x4000000
cmp esi, edx
jae 0x56dbeb
test eax, eax
je 0x56dd0d
nop
mov ax, word [esi]
and ax, word [esp + 0x44]
cmp ax, word [esp + 0x48]
jne 0x56dbeb
add esi, 2
mov ecx, 1
cmp esi, edx
jb 0x56dbd0
mov edx, esi
mov dword [esp + 0x120], edx
test ecx, ecx
jne 0x56dc42
mov eax, dword [esp + 0x10]
movzx ecx, word [eax + 0x64]
test ecx, ecx
je 0x56dc42
cmp edx, ebx
jbe 0x56dc42
sub edx, 2
mov dword [esp + 0x120], edx
cmp edx, ebx
jbe 0x56dc3d
nop word [eax + eax]
mov ax, word [edx]
and ax, word [esp + 0x44]
cmp ax, word [esp + 0x48]
jne 0x56dc3d
sub edx, 2
mov dword [esp + 0x120], edx
cmp edx, ebx
ja 0x56dc20
sub ecx, 1
jne 0x56dc04
push dword [esp + 0x5c]
mov eax, dword [esp + 0x2c]
mov ecx, edx
sub ecx, ebx
sar ecx, 1
sub eax, ecx
push eax
push edx
call fcn.005940e0
mov edx, dword [esp + 0x28]
add esp, 0xc
mov dword [edx + 0x30], eax
test eax, eax
je 0x56dd03
nop dword [eax + eax]
mov ecx, dword [esp + 0x120]
mov eax, dword [edx + 0x28]
sub ecx, ebx
sar ecx, 1
add eax, ecx
lea ecx, [edx + 0x28]
mov dword [ecx], eax
test ebp, 0x4000000
je 0x56dd48
cmp dword [edx + 0x30], 0
jg 0x56dd48
lea edx, [ebx + eax*2]
mov dword [esp + 0x14], edx
cmp edx, esi
jae 0x56dd3e
add edx, 2
mov dword [esp + 0x120], edx
cmp edx, esi
jae 0x56dcdd
nop dword [eax + eax]
mov ax, word [edx]
and ax, word [esp + 0x44]
cmp ax, word [esp + 0x48]
jne 0x56dcdd
add edx, 2
mov dword [esp + 0x120], edx
cmp edx, esi
jb 0x56dcc0
mov eax, dword [esp + 0x28]
push ecx
mov ecx, edx
sub ecx, ebx
sar ecx, 1
sub eax, ecx
push eax
push edx
call fcn.005940e0
mov edx, dword [esp + 0x28]
add esp, 0xc
mov dword [edx + 0x30], eax
test eax, eax
jne 0x56dc70
mov edx, dword [esp + 0x58]
mov dword [esp + 0x14], edx
jmp 0x56dd58
mov ax, word [esi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x56dbeb
test edi, edi
je 0x56dd34
mov eax, 0xffffffdc
jmp 0x56eb9e
mov eax, 0xffffffe6
jmp 0x56eb9e
mov dword [esp + 0x54], 2
jmp 0x56dd58
mov eax, dword [edx + 0x30]
jmp 0x56eb9e
mov ebp, dword [esp + 0x24]
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x34]
test ecx, ecx
jne 0x56dd6d
mov eax, dword [esp + 0x10]
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
jmp 0x56dd74
movq xmm0, qword [ecx]
mov eax, dword [ecx + 8]
mov dword [esp + 0xd8], eax
test ecx, ecx
mov eax, dword [esp + 0x10]
mov ebx, 0x69bf7c
cmovne ebx, ecx
movq qword [esp + 0xd0], xmm0
mov ecx, dword [eax + 0x40]
mov eax, ecx
or eax, dword [esp + 0x18c]
shr eax, 0x1f
mov dword [esp + 0x40], eax
mov eax, ecx
shr eax, 8
and eax, 1
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 0x48]
mov dword [esp + 0x34], eax
mov eax, dword [ebx + 0x24]
cmp eax, 0xffffffff
jne 0x56ddca
mov eax, dword [esp + 0x74]
jmp 0x56ddd9
mov ebp, dword [esp + 0x24]
lea eax, [eax*2]
add eax, dword [esp + 0x20]
mov dword [esp + 0x6c], eax
lea eax, [esp + 0x90]
mov dword [esp + 0x168], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0xa8], eax
mov eax, edx
sub eax, dword [esp + 0x20]
sar eax, 1
mov dword [esp + 0xac], eax
mov eax, dword [ebx + 0x14]
mov dword [esp + 0x170], eax
mov eax, dword [ebx + 0x18]
mov dword [esp + 0x16c], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x11c], eax
mov dword [esp + 0x124], edx
mov edx, dword [esp + 0x34]
mov eax, edx
shr eax, 0xc
and eax, 1
mov dword [esp + 0x90], 2
mov dword [esp + 0xf0], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0xcc], 0
mov dword [esp + 0x104], edi
cmp word [eax + 0x64], 0
ja 0x56de72
test edx, 0x2000
jne 0x56de72
xor eax, eax
jmp 0x56de77
mov eax, 1
mov dword [esp + 0xf4], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x14c], ecx
mov dword [esp + 0x154], 0
mov dword [esp + 0x138], 0
movzx edx, word [eax + 0x6e]
lea edi, [eax + 0x70]
movzx eax, word [eax + 0x6c]
mov word [esp + 0x112], ax
imul eax, edx
mov dword [esp + 0x114], edi
mov dword [esp + 0x134], 0
mov word [esp + 0x110], dx
mov dword [esp + 0x158], 0
lea eax, [edi + eax*2]
mov edi, dword [esp + 0x10]
mov dword [esp + 0x118], eax
mov ax, word [edi + 0x60]
mov word [esp + 0x10e], ax
movzx eax, word [edi + 0x62]
dec eax
cmp eax, 5
ja case.default.0x56df02
jmp dword [eax*4 + 0x56ebb8]
mov eax, 0xd
mov dword [esp + 0x15c], 1
mov word [esp + 0x160], ax
jmp 0x56df84
mov eax, 0xa
mov dword [esp + 0x15c], 1
mov word [esp + 0x160], ax
jmp 0x56df84
xor eax, eax
mov dword [esp + 0x15c], 1
mov word [esp + 0x160], ax
jmp 0x56df84
mov dword [esp + 0x15c], 2
mov dword [esp + 0x160], 0xa000d
jmp 0x56df84
mov dword [esp + 0x158], 1
jmp 0x56df84
mov dword [esp + 0x158], 2
movzx eax, word [edi + 0x68]
mov edx, dword [ebx + 0x28]
mov ecx, dword [ebx + 0x2c]
lea eax, [eax*8 + 0x57]
and eax, 0xfffffffc
cmp edx, dword [edi + 0x4c]
mov dword [esp + 0x64], eax
cmovae edx, dword [edi + 0x4c]
shl edx, 0xa
cmp ecx, dword [edi + 0x50]
mov dword [esp + 0xdc], edx
cmovae ecx, dword [edi + 0x50]
mov dword [esp + 0xe0], ecx
mov ecx, dword [ebx + 0x30]
lea ebx, [eax + eax*4]
cmp ecx, dword [edi + 0x54]
cmovae ecx, dword [edi + 0x54]
add ebx, ebx
mov dword [esp + 0xe4], ecx
mov ecx, 0x5000
cmp ebx, ecx
cmovb ebx, ecx
cmp ebx, edx
jbe 0x56dfef
cmp eax, edx
jbe 0x56dfed
mov eax, 0xffffffc1
jmp 0x56eb9e
mov ebx, edx
mov ecx, dword [esp + 0x1c]
cmp dword [ecx + 0x1c], ebx
jae 0x56e048
push dword [ecx + 8]
mov edi, dword [ecx + 4]
push dword [ecx + 0x18]
mov ecx, edi
call dword [0x5cd3f0]
call edi
mov eax, dword [esp + 0x24]
add esp, 8
push dword [eax + 8]
mov edi, dword [eax]
mov ecx, edi
push ebx
call dword [0x5cd3f0]
call edi
mov ecx, dword [esp + 0x24]
add esp, 8
mov dword [ecx + 0x18], eax
test eax, eax
jne 0x56e03d
mov dword [ecx + 0x1c], eax
mov eax, 0xffffffd0
jmp 0x56eb9e
mov edi, dword [esp + 0x10]
mov eax, dword [esp + 0x64]
mov dword [ecx + 0x1c], ebx
add eax, 0xffffffac
push eax
mov eax, dword [ecx + 0x18]
add eax, 0x54
push 0xff
push eax
call fcn.00599af0
mov eax, dword [edi + 0xc]
add esp, 0xc
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xf8], eax
lea edi, [eax + 0x100]
add eax, 0x340
mov edx, dword [ecx + 0x48]
mov dword [esp + 0xfc], edi
mov dword [esp + 0x100], eax
test dl, 0x10
je 0x56e113
movzx ebx, word [ecx + 0x58]
mov dword [esp + 0x30], ebx
movzx eax, bx
movzx ebx, bx
mov dword [esp + 0x50], 1
mov dword [esp + 0x38], ebx
test dl, 0x20
je 0x56e12f
mov ecx, eax
mov eax, 0xff
cmp word [esp + 0x30], ax
ja 0x56e0cd
movzx eax, byte [ecx + edi]
mov dword [esp + 0x30], eax
cmp ebx, 0x7f
jbe 0x56e135
mov ebx, dword [esp + 0x18]
test ebx, ebx
jne 0x56e0dd
test ebp, 0x20000
je 0x56e139
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, word [eax*2 + 0x6a1498]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x6a5898]
lea eax, [eax + eax*2]
mov ax, word [eax*4 + 0x69d28c]
add ax, word [esp + 0x38]
movzx ecx, ax
mov dword [esp + 0x30], ecx
jmp 0x56e139
test dword [esp + 0x34], 0x200
jne 0x56e12f
mov ebx, dword [esp + 0x18]
test dl, 0x40
je 0x56e13d
add ecx, 0x14
mov dword [esp + 0x4c], ecx
jmp 0x56e139
mov ebx, dword [esp + 0x18]
jmp 0x56e13d
mov ebx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x30]
movzx ebp, ax
mov eax, dword [esp + 0x38]
movzx eax, ax
mov dword [esp + 0x80], ebp
mov ebp, dword [esp + 0x24]
mov dword [esp + 0x7c], eax
test dl, dl
jns 0x56e1e4
movzx ecx, word [ecx + 0x5c]
mov dword [esp + 0x2c], ecx
movzx eax, cx
movzx ecx, cx
mov dword [esp + 0x78], 1
mov dword [esp + 0x3c], ecx
test edx, 0x100
je 0x56e1e6
mov edx, dword [esp + 0x3c]
mov ecx, eax
mov eax, 0xff
cmp word [esp + 0x2c], ax
ja 0x56e1a4
movzx eax, byte [edi + ecx]
mov dword [esp + 0x2c], eax
cmp dx, 0x7f
jbe 0x56e1e6
test ebx, ebx
jne 0x56e1b0
test ebp, 0x20000
je 0x56e1e6
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, word [eax*2 + 0x6a1498]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x6a5898]
lea eax, [eax + eax*2]
mov ax, word [eax*4 + 0x69d28c]
add ax, dx
movzx eax, ax
mov dword [esp + 0x2c], eax
jmp 0x56e1e6
xor eax, eax
mov eax, dword [esp + 0x3c]
mov edi, dword [esp + 0x14]
movzx eax, ax
mov dword [esp + 0x88], eax
nop dword [eax + eax]
mov ebp, dword [esp + 0x15c]
xor ecx, ecx
mov edx, dword [esp + 0x158]
mov dword [esp + 0x58], ecx
mov dword [esp + 0x24], ecx
mov dword [esp + 0xec], ecx
mov ecx, dword [esp + 0x10]
test dword [ecx + 0x40], 0x10000
jne 0x56e7bf
cmp dword [esp + 0x70], 0
mov ebx, dword [esp + 0x124]
je 0x56e365
mov edi, esi
cmp esi, dword [esp + 0x14]
jae 0x56e361
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x56e310
nop word [eax + eax]
test edx, edx
je 0x56e2d2
mov eax, dword [esp + 0x124]
cmp edi, eax
jae 0x56e303
push ecx
lea ecx, [esp + 0x160]
push ecx
push eax
push edx
push edi
call fcn.005927d0
mov ebp, dword [esp + 0x170]
add esp, 0x14
mov edx, dword [esp + 0x158]
mov ebx, dword [esp + 0x124]
test eax, eax
jne 0x56e361
mov ecx, dword [esp + 0x18]
add edi, 2
cmp edi, dword [esp + 0x14]
jae 0x56e361
mov ax, word [edi]
and ax, word [esp + 0x44]
cmp ax, word [esp + 0x48]
jne 0x56e260
add edi, 2
cmp edi, dword [esp + 0x14]
jb 0x56e260
jmp 0x56e361
lea eax, [ebp*2]
mov ecx, ebx
sub ecx, eax
cmp edi, ecx
ja 0x56e2a4
mov ax, word [edi]
cmp ax, word [esp + 0x160]
jne 0x56e2a4
cmp ebp, 1
je 0x56e361
mov ax, word [edi + 2]
cmp ax, word [esp + 0x162]
je 0x56e361
jmp 0x56e2a4
mov ebx, dword [esp + 0x124]
jmp 0x56e2a8
test edx, edx
je 0x56e455
mov eax, dword [esp + 0x124]
cmp edi, eax
jae 0x56e499
push ecx
lea ecx, [esp + 0x160]
push ecx
push eax
push edx
push edi
call fcn.005927d0
mov ebp, dword [esp + 0x170]
add esp, 0x14
mov edx, dword [esp + 0x158]
mov ebx, dword [esp + 0x124]
test eax, eax
jne 0x56e361
mov ecx, dword [esp + 0x18]
add edi, 2
cmp edi, dword [esp + 0x14]
jb 0x56e310
mov dword [esp + 0x14], edi
cmp dword [esp + 0x40], 0
je 0x56e4a5
mov ecx, dword [esp + 0x50]
mov ebp, dword [esp + 0x4c]
test ecx, ecx
jne 0x56e384
test ebp, ebp
je 0x56e6fd
cmp esi, edi
sbb eax, eax
neg eax
cmp esi, edi
jae 0x56e3d7
movzx eax, word [esi]
test ecx, ecx
je 0x56e3ab
cmp ax, word [esp + 0x38]
je 0x56e6fd
cmp ax, word [esp + 0x30]
je 0x56e6fd
test ebp, ebp
je case.0x56e881.997
mov ecx, 0xff
cmp ax, cx
cmova eax, ecx
movzx edx, ax
mov eax, 1
mov ecx, edx
shr edx, 3
and ecx, 7
shl eax, cl
test byte [edx + ebp], al
mov eax, 0
setne al
test eax, eax
jne 0x56e6fd
mov ecx, dword [esp + 0x10]
xor ebx, ebx
cmp dword [esp + 0x18], 0
je 0x56ea68
mov ebp, dword [esp + 0x74]
cmp edi, ebp
je 0x56ea68
test ebx, ebx
je 0x56e409
cmp ebx, 0xfffffffe
jne 0x56ea68
mov ebx, dword [esp + 0x5c]
nop dword [eax]
lea esi, [edi + 2]
cmp esi, ebp
jae 0x56e437
mov ecx, 0xfc00
mov edx, 0xdc00
mov ax, word [esi]
and ax, cx
cmp ax, dx
jne 0x56e9ff
add esi, 2
cmp esi, ebp
jb 0x56e421
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x10]
mov dword [ebp + 0xc], eax
mov eax, dword [esp + 0x138]
mov byte [ebp + 0x2c], 0
mov dword [ebp + 0x14], eax
jmp 0x56eb47
lea eax, [ebp*2]
mov ecx, ebx
sub ecx, eax
cmp edi, ecx
ja 0x56e354
mov ax, word [edi]
cmp ax, word [esp + 0x160]
jne 0x56e354
cmp ebp, 1
je 0x56e361
mov ax, word [edi + 2]
cmp ax, word [esp + 0x162]
je 0x56e361
jmp 0x56e354
mov ebx, dword [esp + 0x124]
jmp 0x56e358
cmp dword [esp + 0x50], 0
je 0x56e50a
cmp esi, edi
jae 0x56e6ea
mov eax, dword [esp + 0x7c]
cmp ax, word [esp + 0x80]
je 0x56e4f1
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x30]
nop word [eax + eax]
movzx eax, word [esi]
cmp ax, cx
je 0x56e6ea
cmp ax, dx
je 0x56e6ea
add esi, 2
cmp esi, edi
jb 0x56e4d0
jmp 0x56e6ea
mov eax, dword [esp + 0x38]
cmp word [esi], ax
je 0x56e6ea
add esi, 2
cmp esi, edi
jb 0x56e4f5
jmp 0x56e6ea
test dword [esp + 0x34], 0x200
je 0x56e6aa
mov eax, dword [esp + 0x84]
mov edi, dword [esp + 0x11c]
add eax, edi
cmp esi, eax
jbe 0x56e6fd
cmp esi, dword [esp + 0x14]
jae 0x56e688
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x158]
mov edx, dword [esp + 0x14]
test eax, eax
je 0x56e602
test ebx, ebx
je 0x56e58c
cmp esi, edi
jbe 0x56e5ca
push eax
lea eax, [esp + 0x160]
push eax
push edi
push ebx
push esi
call fcn.00592890
add esp, 0x14
test eax, eax
jne 0x56e67a
mov ebp, dword [esp + 0x15c]
mov edi, dword [esp + 0x11c]
mov ebx, dword [esp + 0x158]
jmp 0x56e5c6
lea edx, [ebp*2]
lea eax, [edi + edx]
cmp esi, eax
jb 0x56e5c6
mov ecx, esi
sub ecx, edx
mov ax, word [ecx]
cmp ax, word [esp + 0x160]
jne 0x56e5c6
cmp ebp, 1
je 0x56e67a
mov ax, word [ecx + 2]
cmp ax, word [esp + 0x162]
je 0x56e67a
mov edx, dword [esp + 0x14]
add esi, 2
cmp esi, edx
jae 0x56e67a
mov ax, word [esi]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
mov eax, dword [esp + 0x18]
jne 0x56e551
add esi, 2
cmp esi, edx
jae 0x56e67a
jmp 0x56e551
test ebx, ebx
je 0x56e639
cmp esi, edi
jbe 0x56e673
push eax
lea eax, [esp + 0x160]
push eax
push edi
push ebx
push esi
call fcn.00592890
add esp, 0x14
test eax, eax
jne 0x56e67a
mov ebp, dword [esp + 0x15c]
mov edi, dword [esp + 0x11c]
mov ebx, dword [esp + 0x158]
jmp 0x56e66b
lea edx, [ebp*2]
lea eax, [edi + edx]
cmp esi, eax
jb 0x56e66b
mov ecx, esi
sub ecx, edx
mov ax, word [ecx]
cmp ax, word [esp + 0x160]
jne 0x56e66b
cmp ebp, 1
je 0x56e67a
mov ax, word [ecx + 2]
cmp ax, word [esp + 0x162]
je 0x56e67a
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
add esi, 2
cmp esi, edx
jb 0x56e602
mov edx, dword [esp + 0x158]
mov ebx, dword [esp + 0x124]
cmp word [esi - 2], 0xd
jne 0x56e6fd
cmp edx, 1
je 0x56e699
cmp edx, 2
jne 0x56e6fd
cmp esi, dword [esp + 0x14]
jae 0x56e6fd
cmp word [esi], 0xa
jne 0x56e6fd
add esi, 2
jmp 0x56e6fd
mov ebp, dword [esp + 0x4c]
test ebp, ebp
je 0x56e6fd
cmp esi, edi
jae 0x56e6ea
mov ebx, 0xff
nop dword [eax + eax]
movzx edx, word [esi]
mov eax, 1
cmp edx, ebx
cmova edx, ebx
mov ecx, edx
shr edx, 3
and ecx, 7
shl eax, cl
test byte [edx + ebp], al
jne 0x56e6e3
add esi, 2
cmp esi, edi
jb 0x56e6c0
mov ebx, dword [esp + 0x124]
cmp word [esp + 0x10c], 0
jne 0x56e6fd
cmp esi, ebx
jae case.0x56e881.997
cmp word [esp + 0x10c], 0
mov edi, ebx
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x14], edi
jne 0x56e7bf
movzx eax, word [ecx + 0x66]
mov edx, edi
sub edx, esi
sar edx, 1
cmp edx, eax
jl 0x56e3e3
cmp dword [esp + 0x78], 0
mov eax, dword [esp + 0x50]
lea ecx, [esi + eax*2]
je 0x56e7bb
cmp ecx, dword [esp + 0x68]
jbe 0x56e7bb
cmp edx, 0x7d0
jb 0x56e75b
cmp dword [esp + 0x40], 0
jne 0x56e7bb
cmp edx, 0x1e8480
jae 0x56e7bb
mov edx, dword [esp + 0x124]
cmp ecx, edx
jae case.0x56e881.997
mov ebx, dword [esp + 0x2c]
movzx eax, bx
cmp word [esp + 0x88], ax
je 0x56e888
mov ebp, dword [esp + 0x3c]
mov ebx, edx
movzx eax, word [ecx]
mov edi, ecx
add ecx, 2
mov edx, eax
cmp ax, bp
je 0x56e7a8
cmp dx, word [esp + 0x2c]
je 0x56e7a8
cmp ecx, ebx
jb 0x56e785
mov edi, dword [esp + 0x14]
jmp case.0x56e881.997
mov edx, dword [esp + 0x124]
cmp edi, edx
jae 0x56e79f
mov dword [esp + 0x68], edi
mov edi, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
cmp esi, dword [esp + 0x6c]
ja case.0x56e881.997
or dword [esp + 0xcc], 1
mov eax, esi
sub eax, dword [esp + 0x20]
sar eax, 1
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0x54]
or eax, dword [esp + 0x18c]
mov dword [esp + 0x148], eax
lea eax, [esp + 0xd0]
push eax
push dword [esp + 0x20]
movzx eax, word [ecx + 0x68]
push dword [esp + 0x6c]
mov dword [esp + 0x138], esi
push eax
push dword [esp + 0x128]
mov dword [esp + 0x144], esi
push esi
mov dword [esp + 0x100], 0
mov dword [esp + 0x120], 0
mov dword [esp + 0x168], 0
call fcn.005624f0
add esp, 0x18
mov ebx, eax
cmp dword [esp + 0xec], 0
je 0x56e868
cmp dword [esp + 0x24], 0
jne 0x56e868
mov eax, dword [esp + 0x12c]
mov dword [esp + 0x24], eax
mov dword [esp + 0x58], esi
test ebx, ebx
jg case.default.0x56e881
je case.0x56e881.996
lea eax, [ebx + 0x3e5]
cmp eax, 4
ja case.default.0x56e881
jmp dword [eax*4 + 0x56ebd0]
mov ebx, dword [esp + 0x3c]
nop dword [eax]
movzx eax, word [ecx]
mov edi, ecx
add ecx, 2
cmp ax, bx
je 0x56e7af
cmp ecx, edx
jb 0x56e890
mov edi, dword [esp + 0x14]
jmp case.0x56e881.997
mov eax, dword [esp + 0x150]
mov edi, esi
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x154], eax
jmp 0x56e909
mov edi, dword [esp + 0x140]
cmp edi, esi
jbe case.0x56e881.996
mov ecx, dword [esp + 0x18]
jmp 0x56e909
mov ecx, dword [esp + 0x18]
lea edi, [esi + 2]
mov dword [esp + 0x154], 0
test ecx, ecx
je 0x56e909
cmp edi, dword [esp + 0x14]
jae 0x56e909
mov ax, word [edi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x56e909
add edi, 2
mov edx, dword [esp + 0x158]
xor ebx, ebx
cmp dword [esp + 0x70], ebx
je 0x56e94e
mov eax, dword [esp + 0x124]
test edx, edx
je 0x56e9b6
cmp esi, eax
jae 0x56e94e
push ecx
lea ecx, [esp + 0x160]
push ecx
push eax
push edx
push esi
call fcn.005927d0
add esp, 0x14
test eax, eax
jne case.default.0x56e881
mov edx, dword [esp + 0x158]
mov ebp, dword [esp + 0x15c]
mov esi, edi
cmp dword [esp + 0x40], ebx
jne case.default.0x56e881
mov eax, dword [esp + 0x14]
cmp edi, eax
ja case.default.0x56e881
mov ecx, dword [esp + 0x10]
cmp edi, dword [esp + 0x8c]
jbe 0x56e9a6
cmp word [edi - 2], 0xd
jne 0x56e9a6
cmp edi, eax
jae 0x56e9a6
cmp word [edi], 0xa
jne 0x56e9a6
test dword [ecx + 0x48], 0x800
jne 0x56e9a6
cmp edx, 1
je 0x56e9a3
cmp edx, 2
je 0x56e9a3
cmp ebp, 2
jne 0x56e9a6
lea esi, [edi + 2]
mov edi, dword [esp + 0x14]
mov dword [esp + 0x134], ebx
jmp 0x56e223
mov ebp, dword [esp + 0x15c]
lea ecx, [ebp*2]
sub eax, ecx
cmp esi, eax
ja 0x56e955
mov ax, word [esi]
cmp ax, word [esp + 0x160]
jne 0x56e955
cmp ebp, 1
je case.default.0x56e881
mov ax, word [esi + 2]
cmp ax, word [esp + 0x162]
jne 0x56e955
mov edi, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
jmp 0x56e3e5
mov eax, dword [esp + 0x28]
mov ecx, esi
sub ecx, dword [esp + 0x20]
sar ecx, 1
push ebx
sub eax, ecx
mov dword [esp + 0x124], esi
push eax
push esi
call fcn.005940e0
add esp, 0xc
test eax, eax
je 0x56ea4e
jns 0x56e410
mov eax, dword [ebx]
lea edi, [esi + eax*2]
mov dword [esp + 0x14], edi
mov dword [esp + 0x124], edi
cmp edi, esi
jbe 0x56e410
mov dword [esp + 0x54], 3
jmp 0x56e200
mov edi, ebp
mov dword [esp + 0x124], ebp
mov dword [esp + 0x14], edi
mov dword [esp + 0x54], 1
jmp 0x56e200
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x134]
mov dword [ebp + 0xc], ecx
mov dword [ebp + 0x14], eax
mov byte [ebp + 0x2c], 0
cmp ebx, 1
jne 0x56eb34
movzx eax, word [ebp + 0x2e]
mov ecx, dword [esp + 0x108]
add eax, eax
cmp ecx, eax
jl 0x56ea9b
xor edx, edx
jmp 0x56eaa5
mov eax, ecx
cdq
sub eax, edx
mov edx, eax
sar edx, 1
inc edx
mov ebx, dword [esp + 0x20]
sub esi, ebx
mov eax, dword [esp + 0x12c]
mov ecx, dword [esp + 0x128]
sub eax, ebx
sar esi, 1
sar eax, 1
cmp dword [esp + 0x130], ecx
mov dword [ebp + 0x30], edx
cmova ecx, dword [esp + 0x130]
sub ecx, ebx
mov dword [ebp + 0x28], esi
sar ecx, 1
test dword [esp + 0x18c], 0x4000
mov dword [ebp + 0x20], eax
mov dword [ebp + 0x24], ecx
je 0x56eb2d
mov ecx, dword [esp + 0x60]
mov edi, dword [esp + 0x28]
push dword [ebp + 8]
mov esi, dword [ebp]
lea edi, [edi + ecx]
mov ecx, esi
add edi, edi
push edi
call dword [0x5cd3f0]
call esi
add esp, 8
mov dword [ebp + 0x10], eax
test eax, eax
je 0x56e033
push edi
push ebx
push eax
call fcn.00599570
mov edx, dword [ebp + 0x30]
add esp, 0xc
or byte [ebp + 0x2d], 1
mov eax, edx
jmp 0x56eb9e
mov dword [ebp + 0x10], ebx
mov eax, edx
jmp 0x56eb9e
mov eax, dword [esp + 0x138]
mov dword [ebp + 0x14], eax
test ebx, ebx
je 0x56eb47
cmp ebx, 0xfffffffe
jne 0x56eb84
mov ecx, dword [esp + 0x58]
test ecx, ecx
je 0x56eb81
mov eax, dword [esp + 0x20]
mov ebx, 0xfffffffe
sub ecx, eax
mov dword [ebp + 0x10], eax
sar ecx, 1
sub edi, eax
mov dword [ebp + 0x34], ecx
mov dword [ebp + 0x28], ecx
mov ecx, dword [esp + 0x24]
sar edi, 1
sub ecx, eax
sar ecx, 1
mov eax, ebx
mov dword [ebp + 0x38], edi
mov dword [ebp + 0x20], ecx
mov dword [ebp + 0x24], edi
mov dword [ebp + 0x30], ebx
jmp 0x56eb9e
or ebx, 0xffffffff
mov dword [ebp + 0x30], ebx
mov eax, ebx
jmp 0x56eb9e
mov eax, 0xffffffd4
jmp 0x56eb9e
mov eax, 0xffffffcd
jmp 0x56eb9e
mov eax, 0xffffffde
mov ecx, dword [esp + 0x174]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00596709
add esp, 0x168
ret