Function at 0x4e6600
Capabilities:
Check os version
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
push esi
push dword [esp + 0x20]
push dword [esp + 0x20]
push dword [esp + 0x20]
push dword [esp + 0x20]
push dword [esp + 0x20]
push dword [esp + 0x20]
push dword [esp + 0x20]
call 0x565800
mov esi, eax
add esp, 0x1c
cmp esi, 0xffffffd2
jne 0x4e6699
mov edx, dword [0x7205ec]
mov ecx, dword fs:[0x2c]
push edi
mov edi, dword [ecx + edx*4]
cmp byte [edi + 0x30], 0
jne 0x4e664b
call fcn.0058f754
cmp dword [edi + 0x28], 0
jne 0x4e6696
cmp byte [edi + 0x30], 0
jne 0x4e6662
call fcn.0058f754
push 0
push 0x80000
push 0x8000
call fcn.00583780
mov ecx, dword [edi + 0x28]
add esp, 0xc
mov dword [edi + 0x28], eax
test ecx, ecx
je 0x4e668f
push ecx
call fcn.005838c0
add esp, 4
pop edi
pop esi
jmp 0x565800
mov eax, esi
pop edi
pop esi
ret
sub esp, 0x168
mov eax, dword [0x71c56c]
xor eax, esp
mov dword [esp + 0x164], eax
push ebx
push ebp
push esi
push edi
mov ecx, dword [esp + 0x17c]
mov edx, dword [esp + 0x194]
mov eax, dword [esp + 0x190]
mov ebx, dword [esp + 0x180]
mov esi, dword [esp + 0x184]
xor ebp, ebp
mov dword [esp + 0x10], ecx
xor ecx, ecx
mov dword [esp + 0x34], edx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ebx
mov dword [esp + 0x28], esi
mov dword [esp + 0x60], 0
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x50], ecx
mov dword [esp + 0x78], ecx
mov dword [esp + 0x38], ecx
mov dword [esp + 0x30], ecx
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x54], ecx
mov edi, dword [esp + 0x188]
mov dword [esp + 0x40], edi
test ebx, ebx
jne 0x56589e
test esi, esi
mov eax, 0x5cec1d
cmovne eax, ebx
mov ebx, eax
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x1c]
test dword [esp + 0x18c], 0x1fff9fc0
jne 0x566b99
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x566b92
test ebx, ebx
je 0x566b92
test eax, eax
je 0x566b92
lea eax, [edi + edi]
mov dword [esp + 0x84], eax
add eax, ebx
mov esi, eax
mov dword [esp + 0x8c], eax
lea eax, [esi - 2]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x28]
cmp eax, 0xffffffff
jne 0x56590d
push ebx
call fcn.00588d40
mov edx, dword [esp + 0x38]
add esp, 4
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x28], eax
mov dword [esp + 0x60], 1
lea eax, [ebx + eax*2]
mov dword [esp + 0x14], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x74], eax
cmp edi, dword [esp + 0x28]
jbe 0x56592c
mov eax, 0xffffffdf
jmp 0x566b9e
cmp dword [ecx + 0x38], 0x50435245
je 0x56593f
mov eax, 0xffffffe1
jmp 0x566b9e
mov ecx, dword [ecx + 0x48]
mov eax, ecx
and al, 7
cmp al, 2
je 0x565954
mov eax, 0xffffffe0
jmp 0x566b9e
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x18c]
shr ecx, 0xe
and ecx, 0xc
or ebx, ecx
mov dword [esp + 0x18c], ebx
cmp dword [eax + 0x10], ebp
je 0x565982
test ebx, 0xbfffbfc0
jne 0x565982
mov ebx, 1
jmp 0x565984
xor ebx, ebx
mov ecx, dword [eax + 0x40]
mov eax, ecx
shr eax, 0x13
and eax, 1
mov dword [esp + 0x24], ecx
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x18c]
test al, 0x20
je 0x5659a9
mov eax, 2
jmp 0x5659af
shr eax, 4
and eax, 1
movzx eax, ax
mov word [esp + 0x10c], ax
test ax, ax
je 0x5659d3
mov eax, ecx
or eax, dword [esp + 0x18c]
test eax, 0x20000000
jne 0x566b99
test edx, edx
je 0x5659ef
cmp dword [edx + 0x24], 0xffffffff
je 0x5659ef
test ecx, 0x800000
jne 0x5659ef
mov eax, 0xffffffc8
jmp 0x566b9e
mov eax, dword [esp + 0x1c]
test byte [eax + 0x2d], 1
je 0x565a1f
push dword [eax + 8]
mov edi, dword [eax + 4]
mov ecx, edi
push dword [eax + 0x10]
call dword [0x5c53f0]
call edi
mov eax, dword [esp + 0x24]
add esp, 8
mov edi, dword [esp + 0x40]
mov ecx, dword [esp + 0x24]
and byte [eax + 0x2d], 0xfe
mov dword [eax + 0x28], ebp
lea edx, [eax + 0x28]
mov dword [esp + 0x5c], edx
mov edx, 0xdc00
mov dword [eax + 0x10], ebp
mov dword [esp + 0x44], 0xfc00
mov dword [esp + 0x48], edx
test ebx, ebx
je 0x565b7b
cmp dword [esp + 0x18], ebp
je 0x565af8
test dword [esp + 0x18c], 0x40000000
jne 0x565af8
test ecx, 0x4000000
jne 0x565af8
mov ebp, 0xfc00
cmp esi, dword [esp + 0x14]
jae 0x565a86
mov ax, word [esi]
and ax, bp
cmp ax, dx
je 0x565d26
mov ebx, dword [esp + 0x10]
mov edx, dword [esp + 0x20]
movzx ecx, word [ebx + 0x64]
test ecx, ecx
je 0x565abd
cmp esi, edx
jbe 0x565abd
sub esi, 2
cmp esi, edx
jbe 0x565ab8
mov edi, 0xdc00
mov ax, word [esi]
and ax, bp
cmp ax, di
jne 0x565ab8
sub esi, 2
cmp esi, edx
ja 0x565aa6
sub ecx, 1
jne 0x565a96
mov eax, dword [esp + 0x28]
mov edi, esi
mov ebp, dword [esp + 0x5c]
sub edi, edx
sar edi, 1
push ebp
sub eax, edi
push eax
push esi
call fcn.0058c0e0
mov ecx, dword [esp + 0x28]
add esp, 0xc
mov dword [ecx + 0x30], eax
test eax, eax
je 0x565aeb
add dword [ebp], edi
jmp 0x566b9e
mov edi, dword [esp + 0x40]
mov ebp, 1
mov eax, ecx
jmp 0x565afc
mov ebx, dword [esp + 0x10]
push dword [esp + 0x34]
push eax
push dword [esp + 0x194]
push edi
push dword [esp + 0x38]
push dword [esp + 0x34]
push ebx
call fcn.005835a0
mov ebx, eax
add esp, 0x1c
cmp ebx, 0xffffffd3
je 0x565b7b
test ebx, ebx
js 0x565b74
test dword [esp + 0x18c], 0x4000
je 0x565b74
mov ecx, dword [esp + 0x60]
mov edi, dword [esp + 0x28]
mov ebp, dword [esp + 0x1c]
lea edi, [edi + ecx]
push dword [ebp + 8]
mov esi, dword [ebp]
add edi, edi
push edi
mov ecx, esi
call dword [0x5c53f0]
call esi
add esp, 8
mov dword [ebp + 0x10], eax
test eax, eax
je 0x566033
push edi
push dword [esp + 0x24]
push eax
call fcn.00591570
add esp, 0xc
or byte [ebp + 0x2d], 1
mov eax, ebx
jmp 0x566b9e
cmp dword [esp + 0x18], 0
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x120], ebx
je 0x565d50
test ebp, ebp
mov ebp, dword [esp + 0x24]
jne 0x565d54
test dword [esp + 0x18c], 0x40000000
je 0x565bb6
test ebp, 0x4000000
je 0x565d54
mov edx, dword [esp + 0x14]
mov eax, ebp
xor ecx, ecx
and eax, 0x4000000
cmp esi, edx
jae 0x565beb
test eax, eax
je 0x565d0d
nop
mov ax, word [esi]
and ax, word [esp + 0x44]
cmp ax, word [esp + 0x48]
jne 0x565beb
add esi, 2
mov ecx, 1
cmp esi, edx
jb 0x565bd0
mov edx, esi
mov dword [esp + 0x120], edx
test ecx, ecx
jne 0x565c42
mov eax, dword [esp + 0x10]
movzx ecx, word [eax + 0x64]
test ecx, ecx
je 0x565c42
cmp edx, ebx
jbe 0x565c42
sub edx, 2
mov dword [esp + 0x120], edx
cmp edx, ebx
jbe 0x565c3d
nop word [eax + eax]
mov ax, word [edx]
and ax, word [esp + 0x44]
cmp ax, word [esp + 0x48]
jne 0x565c3d
sub edx, 2
mov dword [esp + 0x120], edx
cmp edx, ebx
ja 0x565c20
sub ecx, 1
jne 0x565c04
push dword [esp + 0x5c]
mov eax, dword [esp + 0x2c]
mov ecx, edx
sub ecx, ebx
sar ecx, 1
sub eax, ecx
push eax
push edx
call fcn.0058c0e0
mov edx, dword [esp + 0x28]
add esp, 0xc
mov dword [edx + 0x30], eax
test eax, eax
je 0x565d03
nop dword [eax + eax]
mov ecx, dword [esp + 0x120]
mov eax, dword [edx + 0x28]
sub ecx, ebx
sar ecx, 1
add eax, ecx
lea ecx, [edx + 0x28]
mov dword [ecx], eax
test ebp, 0x4000000
je 0x565d48
cmp dword [edx + 0x30], 0
jg 0x565d48
lea edx, [ebx + eax*2]
mov dword [esp + 0x14], edx
cmp edx, esi
jae 0x565d3e
add edx, 2
mov dword [esp + 0x120], edx
cmp edx, esi
jae 0x565cdd
nop dword [eax + eax]
mov ax, word [edx]
and ax, word [esp + 0x44]
cmp ax, word [esp + 0x48]
jne 0x565cdd
add edx, 2
mov dword [esp + 0x120], edx
cmp edx, esi
jb 0x565cc0
mov eax, dword [esp + 0x28]
push ecx
mov ecx, edx
sub ecx, ebx
sar ecx, 1
sub eax, ecx
push eax
push edx
call fcn.0058c0e0
mov edx, dword [esp + 0x28]
add esp, 0xc
mov dword [edx + 0x30], eax
test eax, eax
jne 0x565c70
mov edx, dword [esp + 0x58]
mov dword [esp + 0x14], edx
jmp 0x565d58
mov ax, word [esi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x565beb
test edi, edi
je 0x565d34
mov eax, 0xffffffdc
jmp 0x566b9e
mov eax, 0xffffffe6
jmp 0x566b9e
mov dword [esp + 0x54], 2
jmp 0x565d58
mov eax, dword [edx + 0x30]
jmp 0x566b9e
mov ebp, dword [esp + 0x24]
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x34]
test ecx, ecx
jne 0x565d6d
mov eax, dword [esp + 0x10]
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
jmp 0x565d74
movq xmm0, qword [ecx]
mov eax, dword [ecx + 8]
mov dword [esp + 0xd8], eax
test ecx, ecx
mov eax, dword [esp + 0x10]
mov ebx, 0x685dac
cmovne ebx, ecx
movq qword [esp + 0xd0], xmm0
mov ecx, dword [eax + 0x40]
mov eax, ecx
or eax, dword [esp + 0x18c]
shr eax, 0x1f
mov dword [esp + 0x40], eax
mov eax, ecx
shr eax, 8
and eax, 1
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 0x48]
mov dword [esp + 0x34], eax
mov eax, dword [ebx + 0x24]
cmp eax, 0xffffffff
jne 0x565dca
mov eax, dword [esp + 0x74]
jmp 0x565dd9
mov ebp, dword [esp + 0x24]
lea eax, [eax*2]
add eax, dword [esp + 0x20]
mov dword [esp + 0x6c], eax
lea eax, [esp + 0x90]
mov dword [esp + 0x168], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0xa8], eax
mov eax, edx
sub eax, dword [esp + 0x20]
sar eax, 1
mov dword [esp + 0xac], eax
mov eax, dword [ebx + 0x14]
mov dword [esp + 0x170], eax
mov eax, dword [ebx + 0x18]
mov dword [esp + 0x16c], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x11c], eax
mov dword [esp + 0x124], edx
mov edx, dword [esp + 0x34]
mov eax, edx
shr eax, 0xc
and eax, 1
mov dword [esp + 0x90], 2
mov dword [esp + 0xf0], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0xcc], 0
mov dword [esp + 0x104], edi
cmp word [eax + 0x64], 0
ja 0x565e72
test edx, 0x2000
jne 0x565e72
xor eax, eax
jmp 0x565e77
mov eax, 1
mov dword [esp + 0xf4], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x14c], ecx
mov dword [esp + 0x154], 0
mov dword [esp + 0x138], 0
movzx edx, word [eax + 0x6e]
lea edi, [eax + 0x70]
movzx eax, word [eax + 0x6c]
mov word [esp + 0x112], ax
imul eax, edx
mov dword [esp + 0x114], edi
mov dword [esp + 0x134], 0
mov word [esp + 0x110], dx
mov dword [esp + 0x158], 0
lea eax, [edi + eax*2]
mov edi, dword [esp + 0x10]
mov dword [esp + 0x118], eax
mov ax, word [edi + 0x60]
mov word [esp + 0x10e], ax
movzx eax, word [edi + 0x62]
dec eax
cmp eax, 5
ja case.default.0x565f02
jmp dword [eax*4 + 0x566bb8]
mov eax, 0xd
mov dword [esp + 0x15c], 1
mov word [esp + 0x160], ax
jmp 0x565f84
mov eax, 0xa
mov dword [esp + 0x15c], 1
mov word [esp + 0x160], ax
jmp 0x565f84
xor eax, eax
mov dword [esp + 0x15c], 1
mov word [esp + 0x160], ax
jmp 0x565f84
mov dword [esp + 0x15c], 2
mov dword [esp + 0x160], 0xa000d
jmp 0x565f84
mov dword [esp + 0x158], 1
jmp 0x565f84
mov dword [esp + 0x158], 2
movzx eax, word [edi + 0x68]
mov edx, dword [ebx + 0x28]
mov ecx, dword [ebx + 0x2c]
lea eax, [eax*8 + 0x57]
and eax, 0xfffffffc
cmp edx, dword [edi + 0x4c]
mov dword [esp + 0x64], eax
cmovae edx, dword [edi + 0x4c]
shl edx, 0xa
cmp ecx, dword [edi + 0x50]
mov dword [esp + 0xdc], edx
cmovae ecx, dword [edi + 0x50]
mov dword [esp + 0xe0], ecx
mov ecx, dword [ebx + 0x30]
lea ebx, [eax + eax*4]
cmp ecx, dword [edi + 0x54]
cmovae ecx, dword [edi + 0x54]
add ebx, ebx
mov dword [esp + 0xe4], ecx
mov ecx, 0x5000
cmp ebx, ecx
cmovb ebx, ecx
cmp ebx, edx
jbe 0x565fef
cmp eax, edx
jbe 0x565fed
mov eax, 0xffffffc1
jmp 0x566b9e
mov ebx, edx
mov ecx, dword [esp + 0x1c]
cmp dword [ecx + 0x1c], ebx
jae 0x566048
push dword [ecx + 8]
mov edi, dword [ecx + 4]
push dword [ecx + 0x18]
mov ecx, edi
call dword [0x5c53f0]
call edi
mov eax, dword [esp + 0x24]
add esp, 8
push dword [eax + 8]
mov edi, dword [eax]
mov ecx, edi
push ebx
call dword [0x5c53f0]
call edi
mov ecx, dword [esp + 0x24]
add esp, 8
mov dword [ecx + 0x18], eax
test eax, eax
jne 0x56603d
mov dword [ecx + 0x1c], eax
mov eax, 0xffffffd0
jmp 0x566b9e
mov edi, dword [esp + 0x10]
mov eax, dword [esp + 0x64]
mov dword [ecx + 0x1c], ebx
add eax, 0xffffffac
push eax
mov eax, dword [ecx + 0x18]
add eax, 0x54
push 0xff
push eax
call fcn.00591af0
mov eax, dword [edi + 0xc]
add esp, 0xc
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xf8], eax
lea edi, [eax + 0x100]
add eax, 0x340
mov edx, dword [ecx + 0x48]
mov dword [esp + 0xfc], edi
mov dword [esp + 0x100], eax
test dl, 0x10
je 0x566113
movzx ebx, word [ecx + 0x58]
mov dword [esp + 0x30], ebx
movzx eax, bx
movzx ebx, bx
mov dword [esp + 0x50], 1
mov dword [esp + 0x38], ebx
test dl, 0x20
je 0x56612f
mov ecx, eax
mov eax, 0xff
cmp word [esp + 0x30], ax
ja 0x5660cd
movzx eax, byte [ecx + edi]
mov dword [esp + 0x30], eax
cmp ebx, 0x7f
jbe 0x566135
mov ebx, dword [esp + 0x18]
test ebx, ebx
jne 0x5660dd
test ebp, 0x20000
je 0x566139
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, word [eax*2 + 0x68b2c8]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x68f6c8]
lea eax, [eax + eax*2]
mov ax, word [eax*4 + 0x6870bc]
add ax, word [esp + 0x38]
movzx ecx, ax
mov dword [esp + 0x30], ecx
jmp 0x566139
test dword [esp + 0x34], 0x200
jne 0x56612f
mov ebx, dword [esp + 0x18]
test dl, 0x40
je 0x56613d
add ecx, 0x14
mov dword [esp + 0x4c], ecx
jmp 0x566139
mov ebx, dword [esp + 0x18]
jmp 0x56613d
mov ebx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x30]
movzx ebp, ax
mov eax, dword [esp + 0x38]
movzx eax, ax
mov dword [esp + 0x80], ebp
mov ebp, dword [esp + 0x24]
mov dword [esp + 0x7c], eax
test dl, dl
jns 0x5661e4
movzx ecx, word [ecx + 0x5c]
mov dword [esp + 0x2c], ecx
movzx eax, cx
movzx ecx, cx
mov dword [esp + 0x78], 1
mov dword [esp + 0x3c], ecx
test edx, 0x100
je 0x5661e6
mov edx, dword [esp + 0x3c]
mov ecx, eax
mov eax, 0xff
cmp word [esp + 0x2c], ax
ja 0x5661a4
movzx eax, byte [edi + ecx]
mov dword [esp + 0x2c], eax
cmp dx, 0x7f
jbe 0x5661e6
test ebx, ebx
jne 0x5661b0
test ebp, 0x20000
je 0x5661e6
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, word [eax*2 + 0x68b2c8]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x68f6c8]
lea eax, [eax + eax*2]
mov ax, word [eax*4 + 0x6870bc]
add ax, dx
movzx eax, ax
mov dword [esp + 0x2c], eax
jmp 0x5661e6
xor eax, eax
mov eax, dword [esp + 0x3c]
mov edi, dword [esp + 0x14]
movzx eax, ax
mov dword [esp + 0x88], eax
nop dword [eax + eax]
mov ebp, dword [esp + 0x15c]
xor ecx, ecx
mov edx, dword [esp + 0x158]
mov dword [esp + 0x58], ecx
mov dword [esp + 0x24], ecx
mov dword [esp + 0xec], ecx
mov ecx, dword [esp + 0x10]
test dword [ecx + 0x40], 0x10000
jne 0x5667bf
cmp dword [esp + 0x70], 0
mov ebx, dword [esp + 0x124]
je 0x566365
mov edi, esi
cmp esi, dword [esp + 0x14]
jae 0x566361
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x566310
nop word [eax + eax]
test edx, edx
je 0x5662d2
mov eax, dword [esp + 0x124]
cmp edi, eax
jae 0x566303
push ecx
lea ecx, [esp + 0x160]
push ecx
push eax
push edx
push edi
call fcn.0058a7d0
mov ebp, dword [esp + 0x170]
add esp, 0x14
mov edx, dword [esp + 0x158]
mov ebx, dword [esp + 0x124]
test eax, eax
jne 0x566361
mov ecx, dword [esp + 0x18]
add edi, 2
cmp edi, dword [esp + 0x14]
jae 0x566361
mov ax, word [edi]
and ax, word [esp + 0x44]
cmp ax, word [esp + 0x48]
jne 0x566260
add edi, 2
cmp edi, dword [esp + 0x14]
jb 0x566260
jmp 0x566361
lea eax, [ebp*2]
mov ecx, ebx
sub ecx, eax
cmp edi, ecx
ja 0x5662a4
mov ax, word [edi]
cmp ax, word [esp + 0x160]
jne 0x5662a4
cmp ebp, 1
je 0x566361
mov ax, word [edi + 2]
cmp ax, word [esp + 0x162]
je 0x566361
jmp 0x5662a4
mov ebx, dword [esp + 0x124]
jmp 0x5662a8
test edx, edx
je 0x566455
mov eax, dword [esp + 0x124]
cmp edi, eax
jae 0x566499
push ecx
lea ecx, [esp + 0x160]
push ecx
push eax
push edx
push edi
call fcn.0058a7d0
mov ebp, dword [esp + 0x170]
add esp, 0x14
mov edx, dword [esp + 0x158]
mov ebx, dword [esp + 0x124]
test eax, eax
jne 0x566361
mov ecx, dword [esp + 0x18]
add edi, 2
cmp edi, dword [esp + 0x14]
jb 0x566310
mov dword [esp + 0x14], edi
cmp dword [esp + 0x40], 0
je 0x5664a5
mov ecx, dword [esp + 0x50]
mov ebp, dword [esp + 0x4c]
test ecx, ecx
jne 0x566384
test ebp, ebp
je 0x5666fd
cmp esi, edi
sbb eax, eax
neg eax
cmp esi, edi
jae 0x5663d7
movzx eax, word [esi]
test ecx, ecx
je 0x5663ab
cmp ax, word [esp + 0x38]
je 0x5666fd
cmp ax, word [esp + 0x30]
je 0x5666fd
test ebp, ebp
je case.0x566881.997
mov ecx, 0xff
cmp ax, cx
cmova eax, ecx
movzx edx, ax
mov eax, 1
mov ecx, edx
shr edx, 3
and ecx, 7
shl eax, cl
test byte [edx + ebp], al
mov eax, 0
setne al
test eax, eax
jne 0x5666fd
mov ecx, dword [esp + 0x10]
xor ebx, ebx
cmp dword [esp + 0x18], 0
je 0x566a68
mov ebp, dword [esp + 0x74]
cmp edi, ebp
je 0x566a68
test ebx, ebx
je 0x566409
cmp ebx, 0xfffffffe
jne 0x566a68
mov ebx, dword [esp + 0x5c]
nop dword [eax]
lea esi, [edi + 2]
cmp esi, ebp
jae 0x566437
mov ecx, 0xfc00
mov edx, 0xdc00
mov ax, word [esi]
and ax, cx
cmp ax, dx
jne 0x5669ff
add esi, 2
cmp esi, ebp
jb 0x566421
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x10]
mov dword [ebp + 0xc], eax
mov eax, dword [esp + 0x138]
mov byte [ebp + 0x2c], 0
mov dword [ebp + 0x14], eax
jmp 0x566b47
lea eax, [ebp*2]
mov ecx, ebx
sub ecx, eax
cmp edi, ecx
ja 0x566354
mov ax, word [edi]
cmp ax, word [esp + 0x160]
jne 0x566354
cmp ebp, 1
je 0x566361
mov ax, word [edi + 2]
cmp ax, word [esp + 0x162]
je 0x566361
jmp 0x566354
mov ebx, dword [esp + 0x124]
jmp 0x566358
cmp dword [esp + 0x50], 0
je 0x56650a
cmp esi, edi
jae 0x5666ea
mov eax, dword [esp + 0x7c]
cmp ax, word [esp + 0x80]
je 0x5664f1
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x30]
nop word [eax + eax]
movzx eax, word [esi]
cmp ax, cx
je 0x5666ea
cmp ax, dx
je 0x5666ea
add esi, 2
cmp esi, edi
jb 0x5664d0
jmp 0x5666ea
mov eax, dword [esp + 0x38]
cmp word [esi], ax
je 0x5666ea
add esi, 2
cmp esi, edi
jb 0x5664f5
jmp 0x5666ea
test dword [esp + 0x34], 0x200
je 0x5666aa
mov eax, dword [esp + 0x84]
mov edi, dword [esp + 0x11c]
add eax, edi
cmp esi, eax
jbe 0x5666fd
cmp esi, dword [esp + 0x14]
jae 0x566688
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x158]
mov edx, dword [esp + 0x14]
test eax, eax
je 0x566602
test ebx, ebx
je 0x56658c
cmp esi, edi
jbe 0x5665ca
push eax
lea eax, [esp + 0x160]
push eax
push edi
push ebx
push esi
call fcn.0058a890
add esp, 0x14
test eax, eax
jne 0x56667a
mov ebp, dword [esp + 0x15c]
mov edi, dword [esp + 0x11c]
mov ebx, dword [esp + 0x158]
jmp 0x5665c6
lea edx, [ebp*2]
lea eax, [edi + edx]
cmp esi, eax
jb 0x5665c6
mov ecx, esi
sub ecx, edx
mov ax, word [ecx]
cmp ax, word [esp + 0x160]
jne 0x5665c6
cmp ebp, 1
je 0x56667a
mov ax, word [ecx + 2]
cmp ax, word [esp + 0x162]
je 0x56667a
mov edx, dword [esp + 0x14]
add esi, 2
cmp esi, edx
jae 0x56667a
mov ax, word [esi]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
mov eax, dword [esp + 0x18]
jne 0x566551
add esi, 2
cmp esi, edx
jae 0x56667a
jmp 0x566551
test ebx, ebx
je 0x566639
cmp esi, edi
jbe 0x566673
push eax
lea eax, [esp + 0x160]
push eax
push edi
push ebx
push esi
call fcn.0058a890
add esp, 0x14
test eax, eax
jne 0x56667a
mov ebp, dword [esp + 0x15c]
mov edi, dword [esp + 0x11c]
mov ebx, dword [esp + 0x158]
jmp 0x56666b
lea edx, [ebp*2]
lea eax, [edi + edx]
cmp esi, eax
jb 0x56666b
mov ecx, esi
sub ecx, edx
mov ax, word [ecx]
cmp ax, word [esp + 0x160]
jne 0x56666b
cmp ebp, 1
je 0x56667a
mov ax, word [ecx + 2]
cmp ax, word [esp + 0x162]
je 0x56667a
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
add esi, 2
cmp esi, edx
jb 0x566602
mov edx, dword [esp + 0x158]
mov ebx, dword [esp + 0x124]
cmp word [esi - 2], 0xd
jne 0x5666fd
cmp edx, 1
je 0x566699
cmp edx, 2
jne 0x5666fd
cmp esi, dword [esp + 0x14]
jae 0x5666fd
cmp word [esi], 0xa
jne 0x5666fd
add esi, 2
jmp 0x5666fd
mov ebp, dword [esp + 0x4c]
test ebp, ebp
je 0x5666fd
cmp esi, edi
jae 0x5666ea
mov ebx, 0xff
nop dword [eax + eax]
movzx edx, word [esi]
mov eax, 1
cmp edx, ebx
cmova edx, ebx
mov ecx, edx
shr edx, 3
and ecx, 7
shl eax, cl
test byte [edx + ebp], al
jne 0x5666e3
add esi, 2
cmp esi, edi
jb 0x5666c0
mov ebx, dword [esp + 0x124]
cmp word [esp + 0x10c], 0
jne 0x5666fd
cmp esi, ebx
jae case.0x566881.997
cmp word [esp + 0x10c], 0
mov edi, ebx
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x14], edi
jne 0x5667bf
movzx eax, word [ecx + 0x66]
mov edx, edi
sub edx, esi
sar edx, 1
cmp edx, eax
jl 0x5663e3
cmp dword [esp + 0x78], 0
mov eax, dword [esp + 0x50]
lea ecx, [esi + eax*2]
je 0x5667bb
cmp ecx, dword [esp + 0x68]
jbe 0x5667bb
cmp edx, 0x7d0
jb 0x56675b
cmp dword [esp + 0x40], 0
jne 0x5667bb
cmp edx, 0x1e8480
jae 0x5667bb
mov edx, dword [esp + 0x124]
cmp ecx, edx
jae case.0x566881.997
mov ebx, dword [esp + 0x2c]
movzx eax, bx
cmp word [esp + 0x88], ax
je 0x566888
mov ebp, dword [esp + 0x3c]
mov ebx, edx
movzx eax, word [ecx]
mov edi, ecx
add ecx, 2
mov edx, eax
cmp ax, bp
je 0x5667a8
cmp dx, word [esp + 0x2c]
je 0x5667a8
cmp ecx, ebx
jb 0x566785
mov edi, dword [esp + 0x14]
jmp case.0x566881.997
mov edx, dword [esp + 0x124]
cmp edi, edx
jae 0x56679f
mov dword [esp + 0x68], edi
mov edi, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
cmp esi, dword [esp + 0x6c]
ja case.0x566881.997
or dword [esp + 0xcc], 1
mov eax, esi
sub eax, dword [esp + 0x20]
sar eax, 1
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0x54]
or eax, dword [esp + 0x18c]
mov dword [esp + 0x148], eax
lea eax, [esp + 0xd0]
push eax
push dword [esp + 0x20]
movzx eax, word [ecx + 0x68]
push dword [esp + 0x6c]
mov dword [esp + 0x138], esi
push eax
push dword [esp + 0x128]
mov dword [esp + 0x144], esi
push esi
mov dword [esp + 0x100], 0
mov dword [esp + 0x120], 0
mov dword [esp + 0x168], 0
call fcn.0055a4f0
add esp, 0x18
mov ebx, eax
cmp dword [esp + 0xec], 0
je 0x566868
cmp dword [esp + 0x24], 0
jne 0x566868
mov eax, dword [esp + 0x12c]
mov dword [esp + 0x24], eax
mov dword [esp + 0x58], esi
test ebx, ebx
jg case.default.0x566881
je case.0x566881.996
lea eax, [ebx + 0x3e5]
cmp eax, 4
ja case.default.0x566881
jmp dword [eax*4 + 0x566bd0]
mov ebx, dword [esp + 0x3c]
nop dword [eax]
movzx eax, word [ecx]
mov edi, ecx
add ecx, 2
cmp ax, bx
je 0x5667af
cmp ecx, edx
jb 0x566890
mov edi, dword [esp + 0x14]
jmp case.0x566881.997
mov eax, dword [esp + 0x150]
mov edi, esi
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x154], eax
jmp 0x566909
mov edi, dword [esp + 0x140]
cmp edi, esi
jbe case.0x566881.996
mov ecx, dword [esp + 0x18]
jmp 0x566909
mov ecx, dword [esp + 0x18]
lea edi, [esi + 2]
mov dword [esp + 0x154], 0
test ecx, ecx
je 0x566909
cmp edi, dword [esp + 0x14]
jae 0x566909
mov ax, word [edi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x566909
add edi, 2
mov edx, dword [esp + 0x158]
xor ebx, ebx
cmp dword [esp + 0x70], ebx
je 0x56694e
mov eax, dword [esp + 0x124]
test edx, edx
je 0x5669b6
cmp esi, eax
jae 0x56694e
push ecx
lea ecx, [esp + 0x160]
push ecx
push eax
push edx
push esi
call fcn.0058a7d0
add esp, 0x14
test eax, eax
jne case.default.0x566881
mov edx, dword [esp + 0x158]
mov ebp, dword [esp + 0x15c]
mov esi, edi
cmp dword [esp + 0x40], ebx
jne case.default.0x566881
mov eax, dword [esp + 0x14]
cmp edi, eax
ja case.default.0x566881
mov ecx, dword [esp + 0x10]
cmp edi, dword [esp + 0x8c]
jbe 0x5669a6
cmp word [edi - 2], 0xd
jne 0x5669a6
cmp edi, eax
jae 0x5669a6
cmp word [edi], 0xa
jne 0x5669a6
test dword [ecx + 0x48], 0x800
jne 0x5669a6
cmp edx, 1
je 0x5669a3
cmp edx, 2
je 0x5669a3
cmp ebp, 2
jne 0x5669a6
lea esi, [edi + 2]
mov edi, dword [esp + 0x14]
mov dword [esp + 0x134], ebx
jmp 0x566223
mov ebp, dword [esp + 0x15c]
lea ecx, [ebp*2]
sub eax, ecx
cmp esi, eax
ja 0x566955
mov ax, word [esi]
cmp ax, word [esp + 0x160]
jne 0x566955
cmp ebp, 1
je case.default.0x566881
mov ax, word [esi + 2]
cmp ax, word [esp + 0x162]
jne 0x566955
mov edi, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
jmp 0x5663e5
mov eax, dword [esp + 0x28]
mov ecx, esi
sub ecx, dword [esp + 0x20]
sar ecx, 1
push ebx
sub eax, ecx
mov dword [esp + 0x124], esi
push eax
push esi
call fcn.0058c0e0
add esp, 0xc
test eax, eax
je 0x566a4e
jns 0x566410
mov eax, dword [ebx]
lea edi, [esi + eax*2]
mov dword [esp + 0x14], edi
mov dword [esp + 0x124], edi
cmp edi, esi
jbe 0x566410
mov dword [esp + 0x54], 3
jmp 0x566200
mov edi, ebp
mov dword [esp + 0x124], ebp
mov dword [esp + 0x14], edi
mov dword [esp + 0x54], 1
jmp 0x566200
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x134]
mov dword [ebp + 0xc], ecx
mov dword [ebp + 0x14], eax
mov byte [ebp + 0x2c], 0
cmp ebx, 1
jne 0x566b34
movzx eax, word [ebp + 0x2e]
mov ecx, dword [esp + 0x108]
add eax, eax
cmp ecx, eax
jl 0x566a9b
xor edx, edx
jmp 0x566aa5
mov eax, ecx
cdq
sub eax, edx
mov edx, eax
sar edx, 1
inc edx
mov ebx, dword [esp + 0x20]
sub esi, ebx
mov eax, dword [esp + 0x12c]
mov ecx, dword [esp + 0x128]
sub eax, ebx
sar esi, 1
sar eax, 1
cmp dword [esp + 0x130], ecx
mov dword [ebp + 0x30], edx
cmova ecx, dword [esp + 0x130]
sub ecx, ebx
mov dword [ebp + 0x28], esi
sar ecx, 1
test dword [esp + 0x18c], 0x4000
mov dword [ebp + 0x20], eax
mov dword [ebp + 0x24], ecx
je 0x566b2d
mov ecx, dword [esp + 0x60]
mov edi, dword [esp + 0x28]
push dword [ebp + 8]
mov esi, dword [ebp]
lea edi, [edi + ecx]
mov ecx, esi
add edi, edi
push edi
call dword [0x5c53f0]
call esi
add esp, 8
mov dword [ebp + 0x10], eax
test eax, eax
je 0x566033
push edi
push ebx
push eax
call fcn.00591570
mov edx, dword [ebp + 0x30]
add esp, 0xc
or byte [ebp + 0x2d], 1
mov eax, edx
jmp 0x566b9e
mov dword [ebp + 0x10], ebx
mov eax, edx
jmp 0x566b9e
mov eax, dword [esp + 0x138]
mov dword [ebp + 0x14], eax
test ebx, ebx
je 0x566b47
cmp ebx, 0xfffffffe
jne 0x566b84
mov ecx, dword [esp + 0x58]
test ecx, ecx
je 0x566b81
mov eax, dword [esp + 0x20]
mov ebx, 0xfffffffe
sub ecx, eax
mov dword [ebp + 0x10], eax
sar ecx, 1
sub edi, eax
mov dword [ebp + 0x34], ecx
mov dword [ebp + 0x28], ecx
mov ecx, dword [esp + 0x24]
sar edi, 1
sub ecx, eax
sar ecx, 1
mov eax, ebx
mov dword [ebp + 0x38], edi
mov dword [ebp + 0x20], ecx
mov dword [ebp + 0x24], edi
mov dword [ebp + 0x30], ebx
jmp 0x566b9e
or ebx, 0xffffffff
mov dword [ebp + 0x30], ebx
mov eax, ebx
jmp 0x566b9e
mov eax, 0xffffffd4
jmp 0x566b9e
mov eax, 0xffffffcd
jmp 0x566b9e
mov eax, 0xffffffde
mov ecx, dword [esp + 0x174]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0058e709
add esp, 0x168
ret