Function at 0x4a6dc0
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xc8
mov esi, esp
mov dword [esi + 0xb0], ebp
mov ebx, ecx
mov edi, dword [ebp + 8]
mov dword [esi + 0xb4], esp
mov dword [esi + 0xc0], 0xffffffff
lea eax, [esi + 0xb8]
mov dword [esi + 0xbc], 0x4c3ee0
mov ecx, dword fs:[0]
mov dword [esi + 0xb8], ecx
mov dword fs:[0], eax
mov eax, dword [0x572300]
mov ecx, 0x7b0d3d0
mov eax, dword [eax - 0x150d98b4]
add eax, ecx
lea ecx, [esi + 0x90]
call eax
mov dword [esi + 4], ebx
add ebx, 0x30
lea eax, [edi + 4]
mov dword [esi + 0x28], eax
mov dword [esi + 0x74], 0
mov dword [esi], ebx
jmp 0x4a6e5e
mov eax, dword [0x5720f0]
mov eax, dword [eax + 0x52601a7e]
mov ecx, 0xee58f8c3
add eax, ecx
mov ecx, dword [esi]
call eax
mov ecx, dword [esi + 4]
mov dword [ecx + 0x28], eax
mov ebx, dword [esi]
test byte [esi + 0x74], 1
jne 0x4a72c6
mov eax, dword [esi + 4]
mov eax, dword [eax + 0x28]
cmp eax, 6
jl 0x4a72d2
cmp eax, 9
jae 0x4a6f20
cmp eax, 8
jne 0x4a731a
mov dword [esi + 0xc0], 0
mov ecx, dword [ebp + 8]
push 0xffffffffffffffff
call fcn.004b3570
test al, al
je 0x4a781f
mov eax, dword [0x5720f0]
mov eax, dword [eax + 0x52601a7e]
mov ecx, 0xee58f8c3
add eax, ecx
mov ecx, dword [esi]
call eax
mov ecx, dword [esi + 4]
mov dword [ecx + 0x28], eax
cmp eax, 0xa
je 0x4a745e
mov byte [esi + 0x2c], 1
mov eax, dword [0x572330]
mov eax, dword [eax - 0x72acac8a]
mov ebx, 0xf4a72f5b
add eax, ebx
lea edi, [esi + 0x90]
mov ecx, edi
lea edx, [esi + 8]
push edx
call eax
mov eax, dword [0x572330]
mov eax, dword [eax - 0x72acac86]
add eax, ebx
mov ecx, edi
lea edx, [esi + 0x2c]
push edx
push dword [esi + 0xc]
push dword [esi + 8]
lea edx, [esi + 0x44]
push edx
call eax
mov ebx, dword [esi]
jmp 0x4a6e5e
cmp eax, 0xe
jae 0x4a7535
cmp eax, 9
jne 0x4a766f
mov dword [esi + 0xc0], 0
mov ecx, dword [ebp + 8]
push 0xffffffffffffffff
call fcn.004b3390
test al, al
je 0x4a781f
mov eax, dword [0x5720f0]
mov eax, dword [eax + 0x52601a7e]
mov ecx, 0xee58f8c3
add eax, ecx
mov ecx, dword [esi]
call eax
mov ecx, dword [esi + 4]
mov dword [ecx + 0x28], eax
cmp eax, 0xb
jne 0x4a7080
mov eax, dword [0x572a94]
mov eax, dword [eax - 0x466f9f14]
mov ebx, 0x355bc927
add eax, ebx
mov edi, dword [esi + 0x28]
mov ecx, edi
call eax
mov ecx, dword [eax]
mov eax, dword [0x572a94]
mov eax, dword [eax - 0x466f9f10]
add eax, ebx
call eax
mov eax, dword [0x572a94]
mov eax, dword [eax - 0x466f9f0c]
add eax, ebx
mov ecx, edi
call eax
mov eax, dword [0x572300]
mov eax, dword [eax - 0x150d988c]
mov ebx, 0x7b0d3d0
add eax, ebx
lea edi, [esi + 0x90]
mov ecx, edi
call eax
test al, al
jne 0x4a77ed
mov eax, dword [0x572300]
mov eax, dword [eax - 0x150d9888]
add eax, ebx
mov ecx, edi
lea edi, [esi + 8]
push edi
call eax
mov eax, dword [0x572300]
mov eax, dword [eax - 0x150d9884]
add eax, ebx
mov ecx, edi
call eax
mov dword [esi + 0xc0], 0
test al, al
je 0x4a716a
mov eax, dword [0x5720f0]
mov eax, dword [eax + 0x52601a7e]
mov ecx, 0xee58f8c3
add eax, ecx
mov ecx, dword [esi]
call eax
mov ecx, dword [esi + 4]
mov dword [ecx + 0x28], eax
cmp eax, 0xd
je 0x4a6e40
cmp eax, 0xa
mov ebx, dword [esi]
jne 0x4a79cf
mov eax, dword [0x572aa8]
mov eax, dword [eax - 0x24e81913]
mov ecx, 0xc09cc1bd
add eax, ecx
mov edi, dword [esi + 0x28]
mov ecx, edi
call eax
mov ecx, dword [eax]
mov eax, dword [0x572aa8]
mov eax, dword [eax - 0x24e8190f]
mov edx, 0xc09cc1bd
add eax, edx
call eax
mov eax, dword [0x572aa8]
mov eax, dword [eax - 0x24e8190b]
mov ecx, 0xc09cc1bd
jmp 0x4a729c
cmp eax, 4
jne 0x4a7823
mov eax, dword [0x572300]
mov eax, dword [eax - 0x150d98a0]
mov ecx, 0x7b0d3d0
add eax, ecx
mov dword [esi + 0xc0], 0xffffffff
mov ecx, dword [esi]
call eax
mov edi, eax
mov eax, dword [0x572a98]
mov eax, dword [eax - 0x33270622]
mov ebx, 0x8b673fcf
add eax, ebx
mov ecx, dword [esi + 0x28]
call eax
mov eax, dword [eax]
mov ecx, dword [eax + 8]
mov eax, dword [0x572a98]
mov eax, dword [eax - 0x3327061e]
add eax, ebx
mov dword [esi + 0xc0], 0
push edi
call eax
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x10], eax
mov eax, dword [0x5720f0]
mov eax, dword [eax + 0x52601a7e]
mov ecx, 0xee58f8c3
add eax, ecx
mov ecx, dword [esi]
call eax
mov ecx, dword [esi + 4]
mov dword [ecx + 0x28], eax
cmp eax, 0xc
jne 0x4a78f9
mov byte [esi + 0x2c], 0
mov eax, dword [0x572330]
mov eax, dword [eax - 0x72acac8a]
mov ebx, 0xf4a72f5b
add eax, ebx
lea edi, [esi + 0x90]
mov ecx, edi
lea edx, [esi + 8]
push edx
call eax
mov eax, dword [0x572330]
mov eax, dword [eax - 0x72acac86]
add eax, ebx
mov ecx, edi
lea edx, [esi + 0x2c]
push edx
push dword [esi + 0xc]
push dword [esi + 8]
lea edx, [esi + 0x44]
push edx
call eax
mov eax, dword [0x5720f0]
mov eax, dword [eax + 0x52601a7e]
mov ecx, 0xee58f8c3
add eax, ecx
mov ecx, dword [esi]
call eax
jmp 0x4a6e56
mov eax, dword [0x5720f0]
mov eax, dword [eax + 0x52601a7e]
mov ecx, 0xee58f8c3
add eax, ecx
mov ecx, dword [esi]
call eax
mov ecx, dword [esi + 4]
mov dword [ecx + 0x28], eax
cmp eax, 0xd
jne 0x4a7252
mov eax, dword [0x5720f0]
mov eax, dword [eax + 0x52601a7e]
mov ecx, 0xee58f8c3
add eax, ecx
mov ecx, dword [esi]
call eax
mov ecx, dword [esi + 4]
mov dword [ecx + 0x28], eax
cmp eax, 4
jne 0x4a7b7b
mov eax, dword [0x572300]
mov eax, dword [eax - 0x150d98a0]
mov ecx, 0x7b0d3d0
add eax, ecx
mov dword [esi + 0xc0], 0xffffffff
mov ecx, dword [esi]
call eax
mov edi, eax
mov eax, dword [0x572a98]
mov eax, dword [eax - 0x33270622]
mov ebx, 0x8b673fcf
add eax, ebx
mov ecx, dword [esi + 0x28]
call eax
mov eax, dword [eax]
mov ecx, dword [eax + 8]
mov eax, dword [0x572a98]
mov eax, dword [eax - 0x3327061e]
add eax, ebx
mov dword [esi + 0xc0], 0
push edi
call eax
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x10], eax
mov eax, dword [0x5720f0]
mov eax, dword [eax + 0x52601a7e]
mov ecx, 0xee58f8c3
add eax, ecx
mov ecx, dword [esi]
call eax
mov ecx, dword [esi + 4]
mov dword [ecx + 0x28], eax
cmp eax, 0xc
jne 0x4a7c51
mov eax, dword [0x5720f0]
mov eax, dword [eax + 0x52601a7e]
mov ecx, 0xee58f8c3
add eax, ecx
mov ecx, dword [esi]
call eax
jmp 0x4a6e56
cmp eax, 0xb
mov ebx, dword [esi]
jne 0x4a7aa5
mov eax, dword [0x572a94]
mov eax, dword [eax - 0x466f9f14]
mov ecx, 0x355bc927
add eax, ecx
mov edi, dword [esi + 0x28]
mov ecx, edi
call eax
mov ecx, dword [eax]
mov eax, dword [0x572a94]
mov eax, dword [eax - 0x466f9f10]
mov edx, 0x355bc927
add eax, edx
call eax
mov eax, dword [0x572a94]
mov eax, dword [eax - 0x466f9f0c]
mov ecx, 0x355bc927
add eax, ecx
mov ecx, edi
call eax
mov eax, dword [0x572300]
mov eax, dword [eax - 0x150d9880]
mov ecx, 0x7b0d3d0
add eax, ecx
lea ecx, [esi + 0x90]
call eax
mov al, 1
mov dword [esi + 0x74], eax
jmp 0x4a6e5e
mov dword [esi + 0x74], 0
jmp 0x4a6fae
cmp eax, 3
jge 0x4a7369
test eax, eax
jle 0x4a766f
mov dword [esi + 0xc0], 0
cmp eax, 2
jne 0x4a7498
mov byte [esi + 8], 0
mov eax, dword [0x572ab8]
mov eax, dword [eax - 0x50468197]
mov ecx, 0x68c77561
add eax, ecx
mov ecx, dword [ebp + 8]
lea edx, [esi + 8]
push edx
call eax
jmp 0x4a6fae
cmp eax, 6
jne 0x4a73be
mov eax, dword [0x572300]
mov eax, dword [eax - 0x150d9894]
mov ecx, 0x7b0d3d0
add eax, ecx
mov ecx, ebx
call eax
mov dword [esi + 0xc], edx
mov dword [esi + 8], eax
mov eax, dword [str._..f8]
mov eax, dword [eax - 0x7cd73ba3]
mov ecx, 0xd0894fc
add eax, ecx
mov dword [esi + 0xc0], 0
mov ecx, dword [ebp + 8]
lea edx, [esi + 8]
push edx
call eax
jmp 0x4a6fae
je 0x4a74bc
cmp eax, 5
jne 0x4a74ed
mov eax, dword [0x572300]
mov eax, dword [eax - 0x150d9890]
mov ecx, 0x7b0d3d0
add eax, ecx
mov ecx, ebx
call eax
mov dword [esi + 0xc], edx
mov dword [esi + 8], eax
mov eax, dword [0x572ac8]
mov eax, dword [eax + 0x26799749]
mov ecx, 0x5c3a29d9
add eax, ecx
mov dword [esi + 0xc0], 0
mov ecx, dword [ebp + 8]
lea edx, [esi + 8]
push edx
call eax
jmp 0x4a6fae
mov eax, dword [0x572300]
mov eax, dword [eax - 0x150d989c]
mov edi, 0x7b0d3d0
add eax, edi
mov ecx, ebx
call eax
fstp qword [esi + 0xa8]
vmovsd xmm0, qword [esi + 0xa8]
mov eax, dword [0x572300]
mov eax, dword [eax - 0x150d9898]
add eax, edi
sub esp, 8
vmovsd qword [esi + 0xa0], xmm0
vmovsd qword [esp], xmm0
call eax
add esp, 8
test al, al
je 0x4a7d27
mov eax, dword [0x572300]
mov eax, dword [eax - 0x150d98a0]
add eax, edi
mov dword [esi + 0xc0], 0xffffffff
mov ecx, ebx
call eax
vmovsd xmm0, qword [esi + 0xa0]
vmovsd qword [esi + 8], xmm0
mov eax, dword [0x572ab4]
mov eax, dword [eax + 0x431e2b52]
mov ecx, 0x1c871af3
add eax, ecx
mov dword [esi + 0xc0], 0
mov ecx, dword [ebp + 8]
lea edx, [esi + 8]
push edx
call eax
jmp 0x4a6fae
mov eax, dword [0x572aa8]
mov eax, dword [eax - 0x24e81913]
mov ebx, 0xc09cc1bd
add eax, ebx
mov edi, dword [esi + 0x28]
mov ecx, edi
call eax
mov ecx, dword [eax]
mov eax, dword [0x572aa8]
mov eax, dword [eax - 0x24e8190f]
add eax, ebx
call eax
mov eax, dword [0x572aa8]
mov eax, dword [eax - 0x24e8190b]
jmp 0x4a6fa8
mov byte [esi + 8], 1
mov eax, dword [0x572ab8]
mov eax, dword [eax - 0x50468197]
mov ecx, 0x68c77561
add eax, ecx
mov ecx, dword [ebp + 8]
lea edx, [esi + 8]
push edx
call eax
jmp 0x4a6fae
mov dword [esi + 8], 0
mov eax, dword [0x572abc]
mov eax, dword [eax + 0x17d30d04]
mov ecx, 0xfbc3ce1f
add eax, ecx
mov dword [esi + 0xc0], 0
mov ecx, dword [ebp + 8]
lea edx, [esi + 8]
push edx
call eax
jmp 0x4a6fae
mov eax, dword [0x572300]
mov eax, dword [eax - 0x150d98a0]
mov ecx, 0x7b0d3d0
add eax, ecx
mov dword [esi + 0xc0], 0xffffffff
mov ecx, ebx
call eax
mov ecx, dword [0x572ac4]
mov edx, dword [ecx - 0x5bbe45aa]
mov ecx, 0x4159b694
add edx, ecx
mov dword [esi + 0xc0], 0
mov ecx, dword [ebp + 8]
push eax
call edx
jmp 0x4a6fae
jne 0x4a766f
mov edi, 0xeaf2674c
add edi, dword [0x572310]
mov eax, dword [0x570140]
mov ecx, 0xc115db07
mov eax, dword [eax - 0x490b3c8c]
add eax, ecx
sub esp, 4
movzx ecx, byte [esi + 8]
mov byte [esp], cl
lea ebx, [esi + 0x2c]
mov ecx, ebx
call eax
mov eax, dword [0x570140]
mov eax, dword [eax - 0x490b3c88]
mov ecx, 0xc115db07
add eax, ecx
push edi
call eax
add esp, 4
mov ecx, dword [0x570140]
mov ecx, dword [ecx - 0x490b3c84]
mov edx, 0xc115db07
add ecx, edx
push eax
call ecx
add esp, 4
mov dword [esi + 0xc0], 2
mov ecx, ebx
push eax
push edi
call fcn.00405290
mov dword [esi + 0xc0], 0x1b
mov ecx, dword [esi + 4]
lea eax, [esi + 0x2c]
push eax
push 0
lea eax, [esi + 0x44]
push eax
call fcn.004a6710
mov eax, dword [0x572300]
mov ecx, 0x7b0d3d0
mov eax, dword [eax - 0x150d98b0]
add eax, ecx
lea edi, [esi + 0x84]
mov ecx, dword [esi]
push edi
call eax
mov dword [esi + 0xc0], 0x1c
push 0
lea eax, [esi + 0x44]
push eax
push edi
push 0x65
lea eax, [esi + 8]
push eax
call fcn.004a6280
add esp, 0x14
mov dword [esi + 0xc0], 0x1d
lea eax, [esi + 0x5c]
mov ecx, dword [esi]
push eax
call fcn.004a6af0
mov eax, dword [0x572300]
mov ebx, 0x7b0d3d0
mov eax, dword [eax - 0x150d98b0]
add eax, ebx
lea edi, [esi + 0x78]
mov ecx, dword [esi]
push edi
call eax
mov eax, dword [0x572300]
mov eax, dword [eax - 0x150d98ac]
add eax, ebx
mov dword [esi + 0xc0], 0xffffffff
mov ecx, edi
call eax
mov dword [esi + 0xc0], 0x1e
mov ecx, dword [ebp + 8]
lea edx, [esi + 8]
push edx
lea edx, [esi + 0x5c]
push edx
push eax
call fcn.004a8550
jmp 0x4a779e
mov edi, 0xeaf2674c
add edi, dword [0x572310]
mov eax, dword [0x570140]
mov ecx, 0xc115db07
mov eax, dword [eax - 0x490b3c8c]
add eax, ecx
sub esp, 4
movzx ecx, byte [esi + 8]
mov byte [esp], cl
lea ebx, [esi + 0x2c]
mov ecx, ebx
call eax
mov eax, dword [0x570140]
mov eax, dword [eax - 0x490b3c88]
mov ecx, 0xc115db07
add eax, ecx
push edi
call eax
add esp, 4
mov ecx, dword [0x570140]
mov ecx, dword [ecx - 0x490b3c84]
mov edx, 0xc115db07
add ecx, edx
push eax
call ecx
add esp, 4
mov dword [esi + 0xc0], 1
mov ecx, ebx
push eax
push edi
call fcn.00405290
mov dword [esi + 0xc0], 0x17
mov ecx, dword [esi + 4]
lea eax, [esi + 0x2c]
push eax
push 0x10
lea eax, [esi + 0x44]
push eax
call fcn.004a6710
mov eax, dword [0x572300]
mov ecx, 0x7b0d3d0
mov eax, dword [eax - 0x150d98b0]
add eax, ecx
lea edi, [esi + 0x84]
mov ecx, dword [esi]
push edi
call eax
mov dword [esi + 0xc0], 0x18
push 0
lea eax, [esi + 0x44]
push eax
push edi
push 0x65
lea eax, [esi + 8]
push eax
call fcn.004a6280
add esp, 0x14
mov dword [esi + 0xc0], 0x19
lea eax, [esi + 0x5c]
mov ecx, dword [esi]
push eax
call fcn.004a6af0
mov eax, dword [0x572300]
mov ebx, 0x7b0d3d0
mov eax, dword [eax - 0x150d98b0]
add eax, ebx
lea edi, [esi + 0x78]
mov ecx, dword [esi]
push edi
call eax
mov eax, dword [0x572300]
mov eax, dword [eax - 0x150d98ac]
add eax, ebx
mov dword [esi + 0xc0], 0xffffffff
mov ecx, edi
call eax
mov dword [esi + 0xc0], 0x1a
mov ecx, dword [ebp + 8]
lea edx, [esi + 8]
push edx
lea edx, [esi + 0x5c]
push edx
push eax
call fcn.004a8550
mov ebx, eax
mov eax, dword [0x572300]
mov eax, dword [eax - 0x150d98a8]
mov edi, 0x7b0d3d0
add eax, edi
lea ecx, [esi + 0x5c]
call eax
mov eax, dword [0x572300]
mov eax, dword [eax - 0x150d98a4]
add eax, edi
lea ecx, [esi + 8]
call eax
mov eax, dword [0x572300]
mov eax, dword [eax - 0x150d98a8]
add eax, edi
lea ecx, [esi + 0x44]
call eax
mov eax, dword [0x572300]
add edi, dword [eax - 0x150d98a8]
lea ecx, [esi + 0x2c]
call edi
jmp 0x4a77ef
mov bl, 1
mov eax, dword [0x572300]
mov edx, 0x7b0d3d0
add edx, dword [eax - 0x150d987c]
lea ecx, [esi + 0x90]
call edx
mov eax, dword [esi + 0xb8]
mov dword fs:[0], eax
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 4
xor ebx, ebx
jmp 0x4a77ef
mov eax, 0xeaf2674c
add eax, dword [0x572304]
lea ecx, [esi + 0x2c]
push eax
call fcn.00401db0
mov dword [esi + 0xc0], 0x23
mov ecx, dword [esi + 4]
lea eax, [esi + 0x2c]
push eax
push 4
lea eax, [esi + 0x44]
push eax
call fcn.004a6710
mov eax, dword [0x572300]
mov ecx, 0x7b0d3d0
mov eax, dword [eax - 0x150d98b0]
add eax, ecx
lea edi, [esi + 0x84]
mov ecx, dword [esi]
push edi
call eax
mov dword [esi + 0xc0], 0x24
push 0
lea eax, [esi + 0x44]
push eax
push edi
push 0x65
lea eax, [esi + 8]
push eax
call fcn.004a6280
add esp, 0x14
mov dword [esi + 0xc0], 0x25
lea eax, [esi + 0x5c]
mov ecx, dword [esi]
push eax
call fcn.004a6af0
mov eax, dword [0x572300]
mov ebx, 0x7b0d3d0
mov eax, dword [eax - 0x150d98b0]
add eax, ebx
lea edi, [esi + 0x78]
mov ecx, dword [esi]
push edi
call eax
mov eax, dword [0x572300]
mov eax, dword [eax - 0x150d98ac]
add eax, ebx
mov dword [esi + 0xc0], 0xffffffff
mov ecx, edi
call eax
mov dword [esi + 0xc0], 0x26
mov ecx, dword [ebp + 8]
lea edx, [esi + 8]
push edx
lea edx, [esi + 0x5c]
push edx
push eax
call fcn.004a8550
jmp 0x4a779e
mov eax, 0xeaf2674c
add eax, dword [0x572308]
lea ecx, [esi + 0x2c]
push eax
call fcn.00401db0
mov dword [esi + 0xc0], 0x1f
mov ecx, dword [esi + 4]
lea eax, [esi + 0x2c]
push eax
push 0xc
lea eax, [esi + 0x44]
push eax
call fcn.004a6710
mov eax, dword [0x572300]
mov ecx, 0x7b0d3d0
mov eax, dword [eax - 0x150d98b0]
add eax, ecx
lea edi, [esi + 0x84]
mov ecx, dword [esi]
push edi
call eax
mov dword [esi + 0xc0], 0x20
push 0
lea eax, [esi + 0x44]
push eax
push edi
push 0x65
lea eax, [esi + 8]
push eax
call fcn.004a6280
add esp, 0x14
mov dword [esi + 0xc0], 0x21
lea eax, [esi + 0x5c]
mov ecx, dword [esi]
push eax
call fcn.004a6af0
mov eax, dword [0x572300]
mov ebx, 0x7b0d3d0
mov eax, dword [eax - 0x150d98b0]
add eax, ebx
lea edi, [esi + 0x78]
mov ecx, dword [esi]
push edi
call eax
mov eax, dword [0x572300]
mov eax, dword [eax - 0x150d98ac]
add eax, ebx
mov dword [esi + 0xc0], 0xffffffff
mov ecx, edi
call eax
mov dword [esi + 0xc0], 0x22
mov ecx, dword [ebp + 8]
lea edx, [esi + 8]
push edx
lea edx, [esi + 0x5c]
push edx
push eax
call fcn.004a8550
jmp 0x4a779e
mov eax, 0xeaf2674c
add eax, dword [0x572314]
lea ecx, [esi + 0x2c]
push eax
call fcn.00401db0
mov dword [esi + 0xc0], 0x13
mov ecx, dword [esi + 4]
lea eax, [esi + 0x2c]
push eax
push 0xa
lea eax, [esi + 0x44]
push eax
call fcn.004a6710
mov eax, dword [0x572300]
mov ecx, 0x7b0d3d0
mov eax, dword [eax - 0x150d98b0]
add eax, ecx
lea edi, [esi + 0x84]
mov ecx, dword [esi]
push edi
call eax
mov dword [esi + 0xc0], 0x14
push 0
lea eax, [esi + 0x44]
push eax
push edi
push 0x65
lea eax, [esi + 8]
push eax
call fcn.004a6280
add esp, 0x14
mov dword [esi + 0xc0], 0x15
lea eax, [esi + 0x5c]
mov ecx, dword [esi]
push eax
call fcn.004a6af0
mov eax, dword [0x572300]
mov ebx, 0x7b0d3d0
mov eax, dword [eax - 0x150d98b0]
add eax, ebx
lea edi, [esi + 0x78]
mov ecx, dword [esi]
push edi
call eax
mov eax, dword [0x572300]
mov eax, dword [eax - 0x150d98ac]
add eax, ebx
mov dword [esi + 0xc0], 0xffffffff
mov ecx, edi
call eax
mov dword [esi + 0xc0], 0x16
mov ecx, dword [ebp + 8]
lea edx, [esi + 8]
push edx
lea edx, [esi + 0x5c]
push edx
push eax
call fcn.004a8550
jmp 0x4a779e
mov eax, 0xeaf2674c
add eax, dword [0x572318]
lea ecx, [esi + 0x2c]
push eax
call fcn.00401db0
mov dword [esi + 0xc0], 7
mov ecx, dword [esi + 4]
lea eax, [esi + 0x2c]
push eax
push 0xb
lea eax, [esi + 0x44]
push eax
call fcn.004a6710
mov eax, dword [0x572300]
mov ecx, 0x7b0d3d0
mov eax, dword [eax - 0x150d98b0]
add eax, ecx
lea edi, [esi + 0x84]
mov ecx, dword [esi]
push edi
call eax
mov dword [esi + 0xc0], 8
push 0
lea eax, [esi + 0x44]
push eax
push edi
push 0x65
lea eax, [esi + 8]
push eax
call fcn.004a6280
add esp, 0x14
mov dword [esi + 0xc0], 9
lea eax, [esi + 0x5c]
mov ecx, dword [esi]
push eax
call fcn.004a6af0
mov eax, dword [0x572300]
mov ebx, 0x7b0d3d0
mov eax, dword [eax - 0x150d98b0]
add eax, ebx
lea edi, [esi + 0x78]
mov ecx, dword [esi]
push edi
call eax
mov eax, dword [0x572300]
mov eax, dword [eax - 0x150d98ac]
add eax, ebx
mov dword [esi + 0xc0], 0xffffffff
mov ecx, edi
call eax
mov dword [esi + 0xc0], 0xa
mov ecx, dword [ebp + 8]
lea edx, [esi + 8]
push edx
lea edx, [esi + 0x5c]
push edx
push eax
call fcn.004a8550
jmp 0x4a779e
mov eax, 0xeaf2674c
add eax, dword [0x572304]
lea ecx, [esi + 0x2c]
push eax
call fcn.00401db0
mov dword [esi + 0xc0], 0xf
mov ecx, dword [esi + 4]
lea eax, [esi + 0x2c]
push eax
push 4
lea eax, [esi + 0x44]
push eax
call fcn.004a6710
mov eax, dword [0x572300]
mov ecx, 0x7b0d3d0
mov eax, dword [eax - 0x150d98b0]
add eax, ecx
lea edi, [esi + 0x84]
mov ecx, dword [esi]
push edi
call eax
mov dword [esi + 0xc0], 0x10
push 0
lea eax, [esi + 0x44]
push eax
push edi
push 0x65
lea eax, [esi + 8]
push eax
call fcn.004a6280
add esp, 0x14
mov dword [esi + 0xc0], 0x11
lea eax, [esi + 0x5c]
mov ecx, dword [esi]
push eax
call fcn.004a6af0
mov eax, dword [0x572300]
mov ebx, 0x7b0d3d0
mov eax, dword [eax - 0x150d98b0]
add eax, ebx
lea edi, [esi + 0x78]
mov ecx, dword [esi]
push edi
call eax
mov eax, dword [0x572300]
mov eax, dword [eax - 0x150d98ac]
add eax, ebx
mov dword [esi + 0xc0], 0xffffffff
mov ecx, edi
call eax
mov dword [esi + 0xc0], 0x12
mov ecx, dword [ebp + 8]
lea edx, [esi + 8]
push edx
lea edx, [esi + 0x5c]
push edx
push eax
call fcn.004a8550
jmp 0x4a779e
mov eax, 0xeaf2674c
add eax, dword [0x572308]
lea ecx, [esi + 0x2c]
push eax
call fcn.00401db0
mov dword [esi + 0xc0], 0xb
mov ecx, dword [esi + 4]
lea eax, [esi + 0x2c]
push eax
push 0xc
lea eax, [esi + 0x44]
push eax
call fcn.004a6710
mov eax, dword [0x572300]
mov ecx, 0x7b0d3d0
mov eax, dword [eax - 0x150d98b0]
add eax, ecx
lea edi, [esi + 0x84]
mov ecx, dword [esi]
push edi
call eax
mov dword [esi + 0xc0], 0xc
push 0
lea eax, [esi + 0x44]
push eax
push edi
push 0x65
lea eax, [esi + 8]
push eax
call fcn.004a6280
add esp, 0x14
mov dword [esi + 0xc0], 0xd
lea eax, [esi + 0x5c]
mov ecx, dword [esi]
push eax
call fcn.004a6af0
mov eax, dword [0x572300]
mov ebx, 0x7b0d3d0
mov eax, dword [eax - 0x150d98b0]
add eax, ebx
lea edi, [esi + 0x78]
mov ecx, dword [esi]
push edi
call eax
mov eax, dword [0x572300]
mov eax, dword [eax - 0x150d98ac]
add eax, ebx
mov dword [esi + 0xc0], 0xffffffff
mov ecx, edi
call eax
mov dword [esi + 0xc0], 0xe
mov ecx, dword [ebp + 8]
lea edx, [esi + 8]
push edx
lea edx, [esi + 0x5c]
push edx
push eax
call fcn.004a8550
jmp 0x4a779e
mov byte [esi + 0x78], 0x27
mov dword [esi + 0xc0], 0
mov ecx, ebx
lea eax, [esi + 0x2c]
push eax
call fcn.004a6af0
mov eax, 0xeaf2674c
add eax, dword [0x57230c]
mov dword [esi + 0xc0], 3
lea ecx, [esi + 0x78]
push ecx
lea ecx, [esi + 0x2c]
push ecx
push eax
lea eax, [esi + 0x44]
push eax
call fcn.004a99c0
add esp, 0x10
mov dword [esi + 0xc0], 4
push 0
lea eax, [esi + 0x44]
push eax
push 0x196
lea eax, [esi + 8]
push eax
call fcn.004a96c0
add esp, 0x10
mov dword [esi + 0xc0], 5
lea eax, [esi + 0x5c]
mov ecx, dword [esi]
push eax
call fcn.004a6af0
mov eax, dword [0x572300]
mov ebx, 0x7b0d3d0
mov eax, dword [eax - 0x150d98b0]
add eax, ebx
lea edi, [esi + 0x84]
mov ecx, dword [esi]
push edi
call eax
mov eax, dword [0x572300]
mov eax, dword [eax - 0x150d98ac]
add eax, ebx
mov dword [esi + 0xc0], 0xffffffff
mov ecx, edi
call eax
mov dword [esi + 0xc0], 6
mov ecx, dword [ebp + 8]
lea edx, [esi + 8]
push edx
lea edx, [esi + 0x5c]
push edx
push eax
call fcn.004b3750
jmp 0x4a779e