Function at 0x405780
Capabilities:
Check os version
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x64aca8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x20
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x40]
push edi
mov esi, ecx
call fcn.005396f0
mov eax, dword [esp + 0x44]
xor ebx, ebx
mov dword [esp + 0x38], ebx
mov dword [edi + 0x90], esi
mov dword [edi], 0x655b90
mov byte [edi + 0x41], bl
mov dword [edi + 0x94], 0xb4
mov dword [edi + 0x98], eax
mov ecx, dword [esi + 0x82c]
mov edx, dword [ecx + 0x24]
push 0x15
mov esi, 0xf
push str.DelayLoad_AwardScreen
lea ecx, [esp + 0x1c]
mov dword [esp + 0x4c], edx
mov dword [esp + 0x34], esi
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00404330
mov byte [esp + 0x38], 1
mov eax, dword [0x6a9f38]
mov ecx, dword [eax + 0x634]
lea eax, [esp + 0x14]
call fcn.00513140
mov ebp, 0x10
mov byte [esp + 0x38], bl
cmp dword [esp + 0x2c], ebp
jb 0x405834
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0061c19a
add esp, 4
mov eax, dword [edi + 0x98]
cmp eax, 1
jne 0x405903
push 0x15
push str.DelayLoad_Background6
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], esi
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00404330
mov byte [esp + 0x38], 2
mov edx, dword [0x6a9f38]
mov ecx, dword [edx + 0x634]
lea eax, [esp + 0x14]
call fcn.00513140
mov byte [esp + 0x38], bl
cmp dword [esp + 0x2c], ebp
jb 0x405890
mov eax, dword [esp + 0x18]
push eax
call fcn.0061c19a
add esp, 4
push 0x14
push str.DelayLoad_ZombieNote
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], esi
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00404330
mov byte [esp + 0x38], 3
mov ecx, dword [0x6a9f38]
mov ecx, dword [ecx + 0x634]
lea eax, [esp + 0x14]
call fcn.00513140
mov byte [esp + 0x38], bl
cmp dword [esp + 0x2c], ebp
jb 0x4058dd
mov edx, dword [esp + 0x18]
push edx
call fcn.0061c19a
add esp, 4
push 0x11
push str.DelayLoad_Credits
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], esi
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00404330
mov byte [esp + 0x38], 4
jmp 0x4059c7
cmp eax, 2
jne 0x4059fb
push 0x15
push str.DelayLoad_Background1
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], esi
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00404330
mov byte [esp + 0x38], 5
mov edx, dword [0x6a9f38]
mov ecx, dword [edx + 0x634]
lea eax, [esp + 0x14]
call fcn.00513140
mov byte [esp + 0x38], bl
cmp dword [esp + 0x2c], ebp
jb 0x405959
mov eax, dword [esp + 0x18]
push eax
call fcn.0061c19a
add esp, 4
push 0x14
push str.DelayLoad_ZombieNote
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], esi
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00404330
mov byte [esp + 0x38], 6
mov ecx, dword [0x6a9f38]
mov ecx, dword [ecx + 0x634]
lea eax, [esp + 0x14]
call fcn.00513140
mov byte [esp + 0x38], bl
cmp dword [esp + 0x2c], ebp
jb 0x4059a6
mov edx, dword [esp + 0x18]
push edx
call fcn.0061c19a
add esp, 4
push 0x18
push str.DelayLoad_ZombieNoteHelp
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], esi
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00404330
jmp 0x796a19
mov eax, dword [0x6a9f38]
mov ecx, dword [eax + 0x634]
lea eax, [esp + 0x14]
call fcn.00513140
mov byte [esp + 0x38], bl
cmp dword [esp + 0x2c], ebp
jb 0x405ca2
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0061c19a
add esp, 4
jmp 0x405ca2
mov edx, dword [edi + 0x90]
cmp dword [edx + 0x7f8], ebx
jne 0x405ca2
mov eax, dword [esp + 0x44]
cmp eax, 0xa
jne 0x405ab0
push str.DelayLoad_Background1
lea ecx, [esp + 0x18]
call fcn.00404450
mov byte [esp + 0x38], 8
mov eax, dword [0x6a9f38]
mov ecx, dword [eax + 0x634]
lea eax, [esp + 0x14]
call fcn.00513140
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], bl
call fcn.00404420
push str.DelayLoad_ZombieNote
lea ecx, [esp + 0x18]
call fcn.00404450
mov byte [esp + 0x38], 9
mov ecx, dword [0x6a9f38]
mov ecx, dword [ecx + 0x634]
lea eax, [esp + 0x14]
call fcn.00513140
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], bl
call fcn.00404420
push str.DelayLoad_ZombieNote1
lea ecx, [esp + 0x18]
call fcn.00404450
mov byte [esp + 0x38], 0xa
mov edx, dword [0x6a9f38]
mov ecx, dword [edx + 0x634]
lea eax, [esp + 0x14]
call fcn.00513140
jmp 0x405c95
cmp eax, 0x14
jne 0x405b27
push str.DelayLoad_Background2
lea ecx, [esp + 0x18]
call fcn.00404450
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x3c], 0xb
call fcn.00513120
add esp, 4
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], bl
call fcn.00404420
push str.DelayLoad_ZombieNote
lea ecx, [esp + 0x18]
call fcn.00404450
lea ecx, [esp + 0x14]
push ecx
mov byte [esp + 0x3c], 0xc
call fcn.00513120
add esp, 4
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], bl
call fcn.00404420
push str.DelayLoad_ZombieNote2
lea ecx, [esp + 0x18]
call fcn.00404450
mov byte [esp + 0x38], 0xd
jmp 0x405c88
cmp eax, 0x1e
jne 0x405b9e
push str.DelayLoad_Background1
lea ecx, [esp + 0x18]
call fcn.00404450
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x3c], 0xe
call fcn.00513120
add esp, 4
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], bl
call fcn.00404420
push str.DelayLoad_ZombieNote
lea ecx, [esp + 0x18]
call fcn.00404450
lea ecx, [esp + 0x14]
push ecx
mov byte [esp + 0x3c], 0xf
call fcn.00513120
add esp, 4
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], bl
call fcn.00404420
push str.DelayLoad_ZombieNote3
lea ecx, [esp + 0x18]
call fcn.00404450
mov byte [esp + 0x38], 0x10
jmp 0x405c88
cmp eax, 0x28
jne 0x405c12
push str.DelayLoad_Background2
lea ecx, [esp + 0x18]
call fcn.00404450
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x3c], 0x11
call fcn.00513120
add esp, 4
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], bl
call fcn.00404420
push str.DelayLoad_ZombieNote
lea ecx, [esp + 0x18]
call fcn.00404450
lea ecx, [esp + 0x14]
push ecx
mov byte [esp + 0x3c], 0x12
call fcn.00513120
add esp, 4
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], bl
call fcn.00404420
push str.DelayLoad_ZombieNote4
lea ecx, [esp + 0x18]
call fcn.00404450
mov byte [esp + 0x38], 0x13
jmp 0x405c88
cmp eax, 0x32
jne 0x405ca2
push str.DelayLoad_Background1
lea ecx, [esp + 0x18]
call fcn.00404450
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x3c], 0x14
call fcn.00513120
add esp, 4
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], bl
call fcn.00404420
push str.DelayLoad_ZombieNote
lea ecx, [esp + 0x18]
call fcn.00404450
lea ecx, [esp + 0x14]
push ecx
mov byte [esp + 0x3c], 0x15
call fcn.00513120
add esp, 4
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], bl
call fcn.00404420
push str.DelayLoad_ZombieFinalNote
lea ecx, [esp + 0x18]
call fcn.00404450
mov byte [esp + 0x38], 0x16
lea edx, [esp + 0x14]
push edx
call fcn.00513120
add esp, 4
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], bl
call fcn.00404420
push 0x130
call fcn.0061c130
add esp, 4
cmp eax, ebx
je 0x405cbe
push 0x64
mov esi, eax
call fcn.00447c60
jmp 0x405cc0
xor eax, eax
mov dword [edi + 0x88], eax
mov ecx, dword [0x6a79cc]
mov dword [eax + 0xa4], ecx
mov edx, dword [edi + 0x88]
mov dword [edx + 0xa8], ebx
mov eax, dword [edi + 0x88]
mov dword [eax + 0xac], ebx
mov ecx, dword [edi + 0x88]
mov edx, dword [0x6a76fc]
mov dword [ecx + 0xb0], edx
mov ecx, dword [0x6a77e0]
mov eax, dword [edi + 0x88]
mov dword [eax + 0xb4], ecx
mov ebp, dword [edi + 0x88]
mov ecx, dword [ebp + 0xa0]
cmp ecx, ebx
mov esi, dword [0x6a72ec]
je 0x405d2c
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x2c]
mov ecx, esi
call eax
mov edx, 0x9f
mov dword [ebp + 0xa0], eax
push 0x2b
lea ecx, [edx + 0x36]
lea eax, [esp + 0x18]
call fcn.005643d0
mov edx, dword [eax]
mov ecx, dword [edi + 0x88]
mov dword [ecx + 0x1c], edx
mov edx, dword [eax + 4]
add ecx, 0x1c
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
mov edx, 0x9f
push 0x2b
lea ecx, [edx + 0x36]
lea eax, [esp + 0x18]
call fcn.005643d0
mov ecx, dword [edi + 0x88]
mov edx, dword [eax]
mov dword [ecx + 0x2c], edx
mov edx, dword [eax + 4]
mov dword [ecx + 0x30], edx
mov edx, dword [eax + 8]
add ecx, 0x2c
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
mov eax, dword [edi + 0x88]
mov dword [eax + 8], 0x144
mov dword [eax + 0xc], 0x1f4
mov dword [eax + 0x10], 0x9c
mov dword [eax + 0x14], 0x2a
mov ecx, dword [edi + 0x88]
mov dword [ecx + 0x120], 0xffffffff
mov edx, dword [edi + 0x88]
push 0x130
mov dword [edx + 4], edi
call fcn.0061c130
add esp, 4
cmp eax, ebx
je 0x405df8
push 0x65
mov esi, eax
call fcn.00447c60
jmp 0x405dfa
xor eax, eax
push 0x18
push str._AWARD_MAIN_MENU_BUTTON_
lea ecx, [esp + 0x1c]
mov dword [edi + 0x8c], eax
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00404330
mov byte [esp + 0x38], 0x17
mov eax, dword [edi + 0x8c]
push eax
lea edx, [esp + 0x18]
call fcn.00448470
mov byte [esp + 0x38], bl
cmp dword [esp + 0x2c], 0x10
jb 0x405e4d
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0061c19a
add esp, 4
mov edx, dword [edi + 0x8c]
mov eax, dword [0x6a75e4]
mov dword [edx + 0xa4], eax
mov ecx, dword [edi + 0x8c]
mov edx, dword [0x6a7780]
mov dword [ecx + 0xa8], edx
mov eax, dword [edi + 0x8c]
mov dword [eax + 0xac], ebx
mov ebp, dword [edi + 0x8c]
mov ecx, dword [ebp + 0xa0]
cmp ecx, ebx
mov esi, dword [0x6a77f8]
je 0x405e9a
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x2c]
mov ecx, esi
call eax
mov edx, 0x2a
mov dword [ebp + 0xa0], eax
push 0x5a
mov ecx, edx
lea eax, [esp + 0x18]
call fcn.005643d0
mov edx, dword [eax]
mov ecx, dword [edi + 0x8c]
mov dword [ecx + 0x1c], edx
mov edx, dword [eax + 4]
add ecx, 0x1c
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
mov edx, 0x2a
push 0x5a
mov ecx, edx
lea eax, [esp + 0x18]
call fcn.005643d0
mov edx, dword [eax]
mov ecx, dword [edi + 0x8c]
mov dword [ecx + 0x2c], edx
mov edx, dword [eax + 4]
mov dword [ecx + 0x30], edx
mov edx, dword [eax + 8]
add ecx, 0x2c
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
mov eax, dword [edi + 0x8c]
mov dword [eax + 8], 0x2a5
mov dword [eax + 0x10], 0x6f
mov dword [eax + 0x14], 0x1a
mov ebp, 0x10
mov dword [eax + 0xc], ebp
mov ecx, dword [edi + 0x8c]
mov dword [ecx + 4], edi
mov edx, dword [edi + 0x8c]
mov dword [edx + 0x120], 1
mov eax, dword [edi + 0x90]
cmp dword [eax + 0x7f8], ebx
jne 0x405f88
mov eax, dword [eax + 0x82c]
cmp eax, ebx
je 0x405f66
cmp dword [eax + 0x2c], ebx
jg 0x405f88
mov esi, dword [esp + 0x44]
cmp esi, 3
jg 0x405f8c
mov eax, dword [edi + 0x8c]
mov byte [eax + 0xf9], 1
mov ecx, dword [edi + 0x8c]
mov byte [ecx + 0x1a], 1
jmp 0x405f8c
mov esi, dword [esp + 0x44]
mov eax, dword [edi + 0x98]
cmp eax, 1
jne 0x40612f
push 0xe
push str._ROLL_CREDITS_
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00404330
mov byte [esp + 0x38], 0x18
mov edx, dword [edi + 0x88]
push edx
lea edx, [esp + 0x18]
call fcn.00448470
mov byte [esp + 0x38], bl
cmp dword [esp + 0x2c], ebp
jb 0x405fe7
mov eax, dword [esp + 0x18]
push eax
call fcn.0061c19a
add esp, 4
mov ecx, dword [edi + 0x88]
mov edx, dword [0x6a7338]
mov dword [ecx + 0xa4], edx
mov eax, dword [edi + 0x88]
mov dword [eax + 0xa8], ebx
mov ecx, dword [edi + 0x88]
mov dword [ecx + 0xac], ebx
mov edx, dword [edi + 0x88]
mov dword [edx + 0xb0], ebx
mov eax, dword [edi + 0x88]
mov dword [eax + 0xb4], ebx
mov ebp, dword [edi + 0x88]
mov ecx, dword [ebp + 0xa0]
cmp ecx, ebx
mov esi, dword [0x6a75c8]
je 0x406047
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x2c]
mov ecx, esi
call eax
mov edx, 0xff
mov dword [ebp + 0xa0], eax
push 0xff
mov ecx, edx
lea eax, [esp + 0x18]
call fcn.005643d0
mov edx, dword [eax]
mov ecx, dword [edi + 0x88]
mov dword [ecx + 0x1c], edx
mov edx, dword [eax + 4]
add ecx, 0x1c
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
mov edx, 0x9f
push 0x2b
lea ecx, [edx + 0x36]
lea eax, [esp + 0x18]
call fcn.005643d0
mov edx, dword [eax]
mov ecx, dword [edi + 0x88]
mov dword [ecx + 0x2c], edx
mov edx, dword [eax + 4]
mov dword [ecx + 0x30], edx
mov edx, dword [eax + 8]
mov dword [ecx + 0x34], edx
mov eax, dword [eax + 0xc]
add ecx, 0x2c
mov dword [ecx + 0xc], eax
mov eax, dword [edi + 0x88]
mov esi, dword [esp + 0x44]
mov dword [eax + 8], 0x145
mov dword [eax + 0xc], 0x1f9
mov dword [eax + 0x10], 0xbe
mov dword [eax + 0x14], 0x49
mov ecx, dword [edi + 0x88]
mov dword [ecx + 0x11c], 0x21
mov edx, dword [edi + 0x88]
mov eax, 0xfffffffe
mov dword [edx + 0x120], eax
mov ecx, dword [edi + 0x88]
mov dword [ecx + 0x124], eax
mov edx, dword [edi + 0x88]
mov dword [edx + 0x128], 8
mov eax, dword [edi + 0x88]
mov dword [eax + 4], edi
jmp 0x4062bf
cmp eax, 2
jne 0x40619c
push 0x12
push str._MAIN_MENU_BUTTON_
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00404330
mov byte [esp + 0x38], 0x19
mov ecx, dword [edi + 0x88]
push ecx
lea edx, [esp + 0x18]
call fcn.00448470
mov byte [esp + 0x38], bl
cmp dword [esp + 0x2c], ebp
jb 0x406180
mov edx, dword [esp + 0x18]
push edx
call fcn.0061c19a
add esp, 4
mov eax, dword [edi + 0x8c]
mov byte [eax + 0xf9], 1
mov ecx, dword [edi + 0x8c]
mov byte [ecx + 0x1a], 1
jmp 0x4062bf
mov eax, dword [edi + 0x90]
cmp dword [eax + 0x7f8], ebx
je 0x4061e6
push str._MAIN_MENU_BUTTON_
lea ecx, [esp + 0x18]
call fcn.00404450
mov byte [esp + 0x38], 0x1a
mov edx, dword [edi + 0x88]
push edx
lea edx, [esp + 0x18]
call fcn.00448470
mov byte [esp + 0x38], bl
cmp dword [esp + 0x2c], ebp
jb 0x40622a
mov eax, dword [esp + 0x18]
push eax
call fcn.0061c19a
add esp, 4
jmp 0x40622a
cmp esi, 1
jne 0x406243
mov eax, dword [eax + 0x82c]
cmp eax, ebx
je 0x406273
cmp dword [eax + 0x2c], ebx
jle 0x406273
push str._CONTINUE_BUTTON_
lea ecx, [esp + 0x18]
call fcn.00404450
mov byte [esp + 0x38], 0x1b
mov eax, dword [edi + 0x88]
push eax
lea edx, [esp + 0x18]
call fcn.00448470
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], bl
call fcn.00404420
mov ecx, dword [edi + 0x8c]
mov byte [ecx + 0xf9], 1
mov edx, dword [edi + 0x8c]
mov byte [edx + 0x1a], 1
jmp 0x4062bf
cmp esi, 0xf
jne 0x406264
push str._VIEW_ALMANAC_BUTTON_
lea ecx, [esp + 0x18]
call fcn.00404450
mov byte [esp + 0x38], 0x1c
mov eax, dword [edi + 0x88]
push eax
jmp 0x4062a9
cmp esi, 0x19
je 0x40628f
cmp esi, 0x23
je 0x40628f
cmp esi, 0x2d
je 0x40628f
push str._NEXT_LEVEL_BUTTON_
lea ecx, [esp + 0x18]
call fcn.00404450
mov byte [esp + 0x38], 0x1e
mov ecx, dword [edi + 0x88]
push ecx
jmp 0x4062a9
push str._CONTINUE_BUTTON_
lea ecx, [esp + 0x18]
call fcn.00404450
mov byte [esp + 0x38], 0x1d
mov edx, dword [edi + 0x88]
push edx
lea edx, [esp + 0x18]
call fcn.00448470
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], bl
call fcn.00404420
mov ebp, dword [edi + 0x90]
cmp dword [ebp + 0x7f8], ebx
jne 0x406330
mov eax, dword [ebp + 0x82c]
cmp eax, ebx
je 0x4062dc
cmp dword [eax + 0x2c], ebx
jg 0x406330
cmp esi, 0x19
jne 0x406330
cmp byte [ebp + 0x8c4], bl
jne 0x406305
mov esi, dword [ebp + 0x878]
cmp esi, ebx
je 0x4062fc
call fcn.005d5cb0
cmp al, bl
jne 0x406330
cmp dword [ebp + 0x8c0], 1
jne 0x406330
mov eax, dword [edi + 0x90]
mov ecx, dword [eax + 0x82c]
cmp dword [ecx + 0x348], ebx
jne 0x406330
mov edx, dword [edi + 0x8c]
mov byte [edx + 0xf9], 1
mov eax, dword [edi + 0x8c]
mov byte [eax + 0x1a], 1
mov eax, dword [edi + 0x98]
cmp eax, 1
je 0x406374
cmp eax, 2
je 0x406374
mov ecx, dword [edi + 0x90]
cmp dword [ecx + 0x7f8], ebx
jne 0x4063e8
mov edx, dword [ecx + 0x82c]
mov eax, dword [edx + 0x24]
cmp eax, 0xa
je 0x406374
cmp eax, 0x14
je 0x406374
cmp eax, 0x1e
je 0x406374
cmp eax, 0x28
je 0x406374
cmp eax, 0x32
jne 0x4063e8
mov eax, dword [edi + 0x90]
mov esi, dword [eax + 0x83c]
call fcn.0045abb0
mov eax, dword [edi + 0x88]
add dword [eax + 0xc], 0x14
mov eax, dword [edi + 0x90]
cmp byte [eax + 0x8c5], bl
jne 0x406406
fldz
mov ecx, dword [0x6a9f00]
mov esi, dword [eax + 0x784]
fst dword [esp + 0x44]
fcomp dword [ecx + 0x117c]
fnstsw ax
test ah, 0x44
jnp 0x4063d2
fld dword [ecx + 0x117c]
push ecx
fstp dword [esp]
call fcn.005af410
fstp dword [esp + 0x48]
add esp, 4
fld dword [esp + 0x44]
push ecx
mov eax, 0x56
fstp dword [esp]
mov ecx, esi
call fcn.00515020
jmp 0x406406
mov esi, dword [ecx + 0x83c]
cmp dword [esi + 8], 8
je 0x406406
call fcn.0045abb0
or eax, 0xffffffff
or edx, eax
lea ecx, [eax + 9]
call fcn.0045adb0
mov ecx, dword [esp + 0x30]
mov eax, edi
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x2c
ret 8