Function at 0x4713c0
Capabilities:
Check os version
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x528b97
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x14c
push ebx
push ebp
push esi
xor esi, esi
push edi
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x70], 0x531158
mov word [esp + 0x74], 0xffff
mov word [esp + 0x76], si
lea ecx, [esp + 0x34]
mov dword [esp + 0x164], esi
call fcn.00498890
lea ecx, [esp + 0x24]
mov byte [esp + 0x164], 1
call fcn.0048a5e0
lea ecx, [esp + 0x18]
mov byte [esp + 0x164], 2
call fcn.0048a5e0
push 6
push 0x54ae78
lea ecx, [esp + 0x1c]
mov byte [esp + 0x16c], 3
call fcn.0048a680
push 9
push 0x54ae6c
lea ecx, [esp + 0x30]
mov byte [esp + 0x16c], 4
call fcn.0048a680
push 9
push 0x54cfc0
lea ecx, [esp + 0x28]
mov byte [esp + 0x16c], 5
call fcn.0048a680
mov byte [esp + 0x164], 6
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x54cf04
call fcn.0048a680
mov ecx, dword [0x55b3d0]
call fcn.0049aa70
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x54cfb8
call fcn.0048a680
mov ecx, dword [0x55b3d0]
call fcn.0049acb0
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x54cfb0
call fcn.0048a680
mov ecx, dword [0x55b3d0]
call fcn.0049acb0
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x54cfa8
call fcn.0048a680
mov ecx, dword [0x55b3d0]
call fcn.0049acb0
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x54cfa0
call fcn.0048a680
mov ecx, dword [0x55b3d0]
call fcn.0049acb0
mov ecx, dword [0x55b3d0]
lea eax, [esp + 0x70]
push eax
call fcn.0049adf0
cmp ax, si
jl 0x472403
movsx eax, word [esp + 0x74]
cmp eax, 3
ja case.default.0x471538
jmp dword [eax*4 + 0x47249c]
push 1
push 5
lea ecx, [esp + 0x1c]
call fcn.0048a9f0
mov cl, byte [esp + 0x33]
sub esp, 0x10
mov ebx, esp
mov dword [esp + 0x3c], esp
push esi
mov byte [ebx], cl
mov ecx, ebx
call fcn.00405cc0
mov edi, str.zzzz
or ecx, 0xffffffff
xor eax, eax
push 1
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov ebp, ecx
mov ecx, ebx
push ebp
call fcn.00408220
test al, al
je 0x4715a8
mov edi, dword [ebx + 4]
mov ecx, ebp
mov edx, ecx
mov esi, str.zzzz
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebx + 4]
mov dword [ebx + 8], ebp
add ebp, eax
xor esi, esi
mov byte [ebp], 0
sub esp, 0x10
lea eax, [esp + 0x53]
mov ecx, esp
mov dword [esp + 0x6c], esp
push eax
push str.0000
mov byte [esp + 0x18c], 7
call fcn.00407a70
sub esp, 0x10
lea edx, [esp + 0x99]
mov ecx, esp
mov dword [esp + 0x84], esp
push edx
push 0x54a7cc
mov byte [esp + 0x19c], 8
call fcn.00407a70
sub esp, 0x10
lea eax, [esp + 0x71]
mov ecx, esp
mov dword [esp + 0x9c], esp
push eax
push 0x55802c
mov byte [esp + 0x1ac], 9
call fcn.00407a70
push ecx
lea edx, [esp + 0x58]
mov ecx, esp
mov dword [esp + 0x60], esp
push edx
mov byte [esp + 0x1ac], 0xa
call fcn.0048a5f0
push ecx
mov byte [esp + 0x1ac], 0xb
mov ecx, esp
mov dword [esp + 0x58], esp
push 6
push 0x54ae64
call fcn.0048a680
lea eax, [esp + 0x140]
mov ecx, 0x55b3d0
push eax
mov byte [esp + 0x1b0], 6
call fcn.00499be0
mov edx, dword [0x531160]
mov cx, word [eax]
push edx
add eax, 4
mov word [esp + 0x38], cx
push esi
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x170], 0xc
call fcn.00407be0
mov eax, dword [esp + 0x100]
mov byte [esp + 0x164], 6
cmp eax, esi
je 0x4716b4
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x4716ab
cmp al, 0xff
je 0x4716ab
dec al
mov byte [ecx], al
jmp 0x4716b4
push ecx
call fcn.00514120
add esp, 4
lea eax, [esp + 0x78]
lea ecx, [esp + 0x34]
push eax
mov dword [esp + 0x104], esi
mov dword [esp + 0x108], esi
mov dword [esp + 0x10c], esi
call fcn.00498ae0
mov eax, dword [esp + 0x7c]
cmp eax, esi
je 0x4716fc
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x4716f3
cmp al, 0xff
je 0x4716f3
dec al
mov byte [ecx], al
jmp 0x4716fc
push ecx
call fcn.00514120
add esp, 4
lea ecx, [esp + 0xc8]
mov dword [esp + 0x7c], esi
push ecx
lea ecx, [esp + 0x38]
mov dword [esp + 0x84], esi
mov dword [esp + 0x88], esi
call fcn.00498ae0
mov eax, dword [eax + 4]
cmp eax, esi
jne 0x47172b
mov eax, 0x53115c
push eax
call fcn.00470510
mov edi, eax
mov eax, dword [esp + 0xd0]
add esp, 4
cmp eax, esi
je 0x47175e
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x471755
cmp al, 0xff
je 0x471755
dec al
mov byte [ecx], al
jmp 0x47175e
push ecx
call fcn.00514120
add esp, 4
lea ecx, [esp + 0x34]
mov dword [esp + 0xcc], esi
mov dword [esp + 0xd0], esi
mov dword [esp + 0xd4], esi
call fcn.00493130
cmp ax, 2
je 0x4722fb
mov edx, edi
lea ecx, [esp + 0x28]
sar edx, 8
mov byte [esp + 0x60], dl
mov eax, dword [esp + 0x60]
push eax
push 6
call fcn.0048a9f0
push edi
push 7
lea ecx, [esp + 0x30]
call fcn.0048a9f0
lea ecx, [esp + 0x28]
push ecx
call fcn.00422750
add esp, 4
lea edx, [esp + 0x24]
lea eax, [esp + 0x28]
push edx
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.0048a5f0
call fcn.0046e890
add esp, 8
cmp ax, si
push esi
push 1
push ecx
mov ecx, esp
jne 0x47180c
mov dword [esp + 0x1c], esp
push 6
push 0x54937c
call fcn.0048a680
push ecx
mov byte [esp + 0x174], 0xd
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x54ae44
jmp 0x471e93
mov dword [esp + 0x1c], esp
push 6
push 0x54937c
call fcn.0048a680
push ecx
mov byte [esp + 0x174], 0xe
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x54cf2c
call fcn.0048a680
mov ecx, 0x55b3d0
mov byte [esp + 0x174], 6
call fcn.00499670
jmp case.default.0x471538
push esi
push 5
lea ecx, [esp + 0x1c]
call fcn.0048a9f0
mov cl, byte [esp + 0x31]
sub esp, 0x10
mov edx, esp
mov edi, str.zzzz
xor eax, eax
mov dword [esp + 0x20], esp
mov byte [edx], cl
or ecx, 0xffffffff
mov dword [edx + 4], esi
mov dword [edx + 8], esi
mov dword [edx + 0xc], esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.zzzz
mov ecx, edx
call fcn.00408160
sub esp, 0x10
lea edx, [esp + 0x8a]
mov ecx, esp
mov dword [esp + 0x3c], esp
push edx
push str.0000
mov byte [esp + 0x18c], 0xf
call fcn.00407a70
sub esp, 0x10
lea eax, [esp + 0x98]
mov ecx, esp
mov dword [esp + 0x8c], esp
push eax
push 0x54a7cc
mov byte [esp + 0x19c], 0x10
call fcn.00407a70
sub esp, 0x10
lea edx, [esp + 0x70]
mov ecx, esp
mov dword [esp + 0x94], esp
push edx
push 0x55802c
mov byte [esp + 0x1ac], 0x11
call fcn.00407a70
push ecx
lea eax, [esp + 0x58]
mov ecx, esp
mov dword [esp + 0x90], esp
push eax
mov byte [esp + 0x1ac], 0x12
call fcn.0048a5f0
push ecx
mov byte [esp + 0x1ac], 0x13
mov ecx, esp
mov dword [esp + 0x74], esp
push 6
push 0x54ae64
call fcn.0048a680
lea ecx, [esp + 0x154]
mov byte [esp + 0x1ac], 6
push ecx
mov ecx, 0x55b3d0
call fcn.00499be0
mov ecx, dword [0x531160]
mov dx, word [eax]
push ecx
add eax, 4
push esi
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x170], 0x14
mov word [esp + 0x40], dx
call fcn.00407be0
mov eax, dword [esp + 0x114]
mov byte [esp + 0x164], 6
cmp eax, esi
je 0x4719a0
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x471997
cmp al, 0xff
je 0x471997
dec al
mov byte [ecx], al
jmp 0x4719a0
push ecx
call fcn.00514120
add esp, 4
lea edx, [esp + 0x98]
lea ecx, [esp + 0x34]
push edx
mov dword [esp + 0x118], esi
mov dword [esp + 0x11c], esi
mov dword [esp + 0x120], esi
call fcn.00498ae0
mov eax, dword [esp + 0x9c]
cmp eax, esi
je 0x4719ee
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x4719e5
cmp al, 0xff
je 0x4719e5
dec al
mov byte [ecx], al
jmp 0x4719ee
push ecx
call fcn.00514120
add esp, 4
lea eax, [esp + 0xa8]
lea ecx, [esp + 0x34]
push eax
mov dword [esp + 0xa0], esi
mov dword [esp + 0xa4], esi
mov dword [esp + 0xa8], esi
call fcn.00498ae0
mov eax, dword [eax + 4]
cmp eax, esi
jne 0x471a20
mov eax, 0x53115c
push eax
call fcn.00470510
mov edi, eax
mov eax, dword [esp + 0xb0]
add esp, 4
cmp eax, esi
je 0x471a53
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x471a4a
cmp al, 0xff
je 0x471a4a
dec al
mov byte [ecx], al
jmp 0x471a53
push ecx
call fcn.00514120
add esp, 4
lea ecx, [esp + 0x34]
mov dword [esp + 0xac], esi
mov dword [esp + 0xb0], esi
mov dword [esp + 0xb4], esi
call fcn.00493130
cmp ax, 2
je 0x4722fb
mov ecx, edi
sar ecx, 8
mov byte [esp + 0x60], cl
lea ecx, [esp + 0x20]
mov edx, dword [esp + 0x60]
push edx
push 6
call fcn.0048a9f0
push edi
push 7
lea ecx, [esp + 0x28]
call fcn.0048a9f0
lea eax, [esp + 0x20]
push eax
call fcn.00422750
add esp, 4
lea ecx, [esp + 0x24]
lea edx, [esp + 0x20]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push edx
call fcn.0048a5f0
call fcn.0046e890
add esp, 8
cmp ax, si
push esi
push 1
push ecx
mov ecx, esp
jne 0x471b01
mov dword [esp + 0x1c], esp
push 6
push 0x54937c
call fcn.0048a680
push ecx
mov byte [esp + 0x174], 0x15
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x54cf24
jmp 0x471e93
mov dword [esp + 0x1c], esp
push 6
push 0x54937c
call fcn.0048a680
push ecx
mov byte [esp + 0x174], 0x16
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x54cf2c
call fcn.0048a680
mov ecx, 0x55b3d0
mov byte [esp + 0x174], 6
call fcn.00499670
jmp case.default.0x471538
push 0xa
push 5
lea ecx, [esp + 0x1c]
call fcn.0048a9f0
push 0x18
push 0x54aecc
lea ecx, [esp + 0x20]
call fcn.0048ac30
mov al, byte [esp + 0x30]
sub esp, 0x10
mov edx, esp
mov edi, str.zzzzzzzzzzzzzzzzz
or ecx, 0xffffffff
mov dword [esp + 0x20], esp
mov byte [edx], al
xor eax, eax
mov dword [edx + 4], esi
mov dword [edx + 8], esi
mov dword [edx + 0xc], esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.zzzzzzzzzzzzzzzzz
mov ecx, edx
call fcn.00408160
sub esp, 0x10
lea edx, [esp + 0x6b]
mov ecx, esp
mov dword [esp + 0x3c], esp
push edx
push str.00000000000000000
mov byte [esp + 0x18c], 0x17
call fcn.00407a70
sub esp, 0x10
lea eax, [esp + 0x9b]
mov ecx, esp
mov dword [esp + 0x8c], esp
push eax
push 0x54a868
mov byte [esp + 0x19c], 0x18
call fcn.00407a70
sub esp, 0x10
lea edx, [esp + 0x72]
mov ecx, esp
mov dword [esp + 0x94], esp
push edx
push 0x55802c
mov byte [esp + 0x1ac], 0x19
call fcn.00407a70
push ecx
lea eax, [esp + 0x58]
mov ecx, esp
mov dword [esp + 0x90], esp
push eax
mov byte [esp + 0x1ac], 0x1a
call fcn.0048a5f0
push ecx
mov byte [esp + 0x1ac], 0x1b
mov ecx, esp
mov dword [esp + 0x74], esp
push 6
push 0x54aea8
call fcn.0048a680
lea ecx, [esp + 0x17c]
mov byte [esp + 0x1ac], 6
push ecx
mov ecx, 0x55b3d0
call fcn.00499be0
mov ecx, dword [0x531160]
mov dx, word [eax]
push ecx
mov byte [esp + 0x168], 0x1c
mov word [esp + 0x38], dx
push esi
add eax, 4
lea ecx, [esp + 0x40]
push eax
call fcn.00407be0
mov eax, dword [esp + 0x13c]
mov byte [esp + 0x164], 6
cmp eax, esi
je 0x471ca2
mov cl, byte [eax - 1]
dec eax
test cl, cl
je 0x471c99
cmp cl, 0xff
je 0x471c99
dec cl
mov byte [eax], cl
jmp 0x471ca2
push eax
call fcn.00514120
add esp, 4
lea edx, [esp + 0xb8]
lea ecx, [esp + 0x34]
push edx
mov dword [esp + 0x140], esi
mov dword [esp + 0x144], esi
mov dword [esp + 0x148], esi
call fcn.00498ae0
mov edi, dword [eax + 8]
mov eax, dword [esp + 0xbc]
cmp eax, esi
je 0x471cf3
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x471cea
cmp al, 0xff
je 0x471cea
dec al
mov byte [ecx], al
jmp 0x471cf3
push ecx
call fcn.00514120
add esp, 4
lea ecx, [esp + 0x34]
mov dword [esp + 0xbc], esi
mov dword [esp + 0xc0], esi
mov dword [esp + 0xc4], esi
call fcn.00493130
cmp ax, 2
je 0x4722fb
cmp di, 0x11
jne 0x471dc5
lea eax, [esp + 0xe8]
lea ecx, [esp + 0x34]
push eax
call fcn.00498ae0
mov eax, dword [eax + 4]
cmp eax, esi
jne 0x471d42
mov eax, 0x53115c
lea ecx, [esp + 0x148]
push eax
push ecx
call fcn.00514b75
mov eax, dword [esp + 0xf4]
add esp, 8
cmp eax, esi
je 0x471d7b
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x471d72
cmp al, 0xff
je 0x471d72
dec al
mov byte [ecx], al
jmp 0x471d7b
push ecx
call fcn.00514120
add esp, 4
mov dword [esp + 0xec], esi
mov dword [esp + 0xf0], esi
mov dword [esp + 0xf4], esi
xor edi, edi
lea ebx, [esp + 0x148]
mov dl, byte [ebx]
lea eax, [edi + 6]
push edx
push eax
lea ecx, [esp + 0x20]
call fcn.0048a9f0
inc edi
inc ebx
cmp di, 0x11
jl 0x471d99
lea ecx, [esp + 0x34]
call fcn.00493130
cmp ax, 1
je 0x471e0d
jmp case.0x471538.2
push esi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x54937c
call fcn.0048a680
push ecx
mov byte [esp + 0x174], 0x1d
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x54aea0
call fcn.0048a680
mov ecx, 0x55b3d0
mov byte [esp + 0x174], 6
call fcn.00499670
jmp case.0x471538.2
lea ecx, [esp + 0x18]
push ecx
call fcn.00422750
add esp, 4
lea edx, [esp + 0x24]
lea eax, [esp + 0x18]
push esi
push edx
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.0048a5f0
mov ecx, dword [esp + 0x78]
call fcn.0046d810
push esi
push 1
push ecx
cmp ax, si
mov ecx, esp
jne 0x471e6d
mov dword [esp + 0x1c], esp
push 6
push 0x54937c
call fcn.0048a680
push ecx
mov byte [esp + 0x174], 0x1e
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x54cf24
jmp 0x471e93
mov dword [esp + 0x1c], esp
push 6
push 0x54937c
call fcn.0048a680
push ecx
mov byte [esp + 0x174], 0x1f
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x54cf2c
call fcn.0048a680
mov ecx, 0x55b3d0
mov byte [esp + 0x174], 6
call fcn.00499670
jmp case.default.0x471538
xor esi, esi
push 0xc
push 5
lea ecx, [esp + 0x1c]
call fcn.0048a9f0
push 0xd
push 0x54aebc
lea ecx, [esp + 0x20]
call fcn.0048ac30
mov cl, byte [esp + 0x32]
sub esp, 0x10
mov ebp, esp
mov edi, str.999999
xor eax, eax
mov dword [esp + 0x20], esp
mov byte [ebp], cl
or ecx, 0xffffffff
mov dword [ebp + 4], esi
mov dword [ebp + 8], esi
mov dword [ebp + 0xc], esi
push 1
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov ebx, ecx
mov ecx, ebp
push ebx
call fcn.00408220
test al, al
je 0x471f2b
mov edi, dword [ebp + 4]
mov ecx, ebx
mov edx, ecx
mov esi, str.999999
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp + 4]
mov dword [ebp + 8], ebx
add ebx, eax
xor esi, esi
mov byte [ebx], 0
sub esp, 0x10
lea eax, [esp + 0x73]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
push str.000000
mov byte [esp + 0x18c], 0x20
call fcn.00407a70
sub esp, 0x10
lea edx, [esp + 0x8b]
mov ecx, esp
mov dword [esp + 0x8c], esp
push edx
push 0x549dd4
mov byte [esp + 0x19c], 0x21
call fcn.00407a70
sub esp, 0x10
lea eax, [esp + 0xa7]
mov ecx, esp
mov dword [esp + 0x94], esp
push eax
push 0x55802c
mov byte [esp + 0x1ac], 0x22
call fcn.00407a70
push ecx
lea edx, [esp + 0x58]
mov ecx, esp
mov dword [esp + 0x90], esp
push edx
mov byte [esp + 0x1ac], 0x23
call fcn.0048a5f0
push ecx
mov byte [esp + 0x1ac], 0x24
mov ecx, esp
mov dword [esp + 0x74], esp
push 6
push 0x54ae88
call fcn.0048a680
lea eax, [esp + 0x168]
mov ecx, 0x55b3d0
push eax
mov byte [esp + 0x1b0], 6
call fcn.00499be0
mov cx, word [eax]
lea edi, [eax + 4]
mov word [esp + 0x34], cx
mov ecx, dword [0x531160]
mov eax, dword [edi + 8]
mov byte [esp + 0x164], 0x25
mov ebx, eax
cmp ecx, ebx
jae 0x47200c
mov ebx, ecx
lea edx, [esp + 0x38]
cmp edx, edi
jne 0x47202f
push ecx
push ebx
lea ecx, [esp + 0x40]
call fcn.0040d1e0
push esi
push esi
lea ecx, [esp + 0x40]
call fcn.0040d1e0
jmp 0x4720bc
cmp ebx, esi
jbe 0x47207c
cmp ebx, eax
jne 0x47207c
mov eax, dword [edi + 4]
cmp eax, esi
jne 0x472043
mov eax, 0x53115c
cmp byte [eax - 1], 0xfe
jae 0x47207c
push 1
lea ecx, [esp + 0x3c]
call fcn.00405cc0
mov eax, dword [edi + 4]
cmp eax, esi
jne 0x472060
mov eax, 0x53115c
mov dword [esp + 0x3c], eax
mov ecx, dword [edi + 8]
mov dword [esp + 0x40], ecx
mov edi, dword [edi + 0xc]
mov dword [esp + 0x44], edi
mov cl, byte [eax - 1]
inc cl
mov byte [eax - 1], cl
jmp 0x4720bc
push 1
push ebx
lea ecx, [esp + 0x40]
call fcn.00408220
test al, al
je 0x4720bc
mov edi, dword [edi + 4]
cmp edi, esi
mov esi, 0x53115c
je 0x47209a
mov esi, edi
mov edi, dword [esp + 0x3c]
mov ecx, ebx
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x40], ebx
xor esi, esi
mov byte [ebx + ecx], 0
mov eax, dword [esp + 0x128]
mov byte [esp + 0x164], 6
cmp eax, esi
je 0x4720ec
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x4720e3
cmp al, 0xff
je 0x4720e3
dec al
mov byte [ecx], al
jmp 0x4720ec
push ecx
call fcn.00514120
add esp, 4
lea edx, [esp + 0xd8]
lea ecx, [esp + 0x34]
push edx
mov dword [esp + 0x12c], esi
mov dword [esp + 0x130], esi
mov dword [esp + 0x134], esi
call fcn.00498ae0
mov edi, dword [eax + 8]
mov eax, dword [esp + 0xdc]
cmp eax, esi
je 0x47213d
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x472134
cmp al, 0xff
je 0x472134
dec al
mov byte [ecx], al
jmp 0x47213d
push ecx
call fcn.00514120
add esp, 4
lea ecx, [esp + 0x34]
mov dword [esp + 0xdc], esi
mov dword [esp + 0xe0], esi
mov dword [esp + 0xe4], esi
call fcn.00493130
cmp ax, 2
je 0x47237e
cmp di, 6
jne 0x47220f
lea eax, [esp + 0x88]
lea ecx, [esp + 0x34]
push eax
call fcn.00498ae0
mov eax, dword [eax + 4]
cmp eax, esi
jne 0x47218c
mov eax, 0x53115c
lea ecx, [esp + 0x148]
push eax
push ecx
call fcn.00514b75
mov eax, dword [esp + 0x94]
add esp, 8
cmp eax, esi
je 0x4721c5
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x4721bc
cmp al, 0xff
je 0x4721bc
dec al
mov byte [ecx], al
jmp 0x4721c5
push ecx
call fcn.00514120
add esp, 4
mov dword [esp + 0x8c], esi
mov dword [esp + 0x90], esi
mov dword [esp + 0x94], esi
xor edi, edi
lea ebx, [esp + 0x148]
mov dl, byte [ebx]
lea eax, [edi + 6]
push edx
push eax
lea ecx, [esp + 0x20]
call fcn.0048a9f0
inc edi
inc ebx
cmp di, 6
jl 0x4721e3
lea ecx, [esp + 0x34]
call fcn.00493130
cmp ax, 1
je 0x472257
jmp 0x471eb1
push esi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x54937c
call fcn.0048a680
push ecx
mov byte [esp + 0x174], 0x26
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x54aea0
call fcn.0048a680
mov ecx, 0x55b3d0
mov byte [esp + 0x174], 6
call fcn.00499670
jmp 0x471eb1
lea ecx, [esp + 0x18]
push ecx
call fcn.00422750
add esp, 4
lea edx, [esp + 0x24]
lea eax, [esp + 0x18]
push esi
push edx
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.0048a5f0
mov ecx, dword [esp + 0x78]
call fcn.0046d810
push esi
push 1
push ecx
cmp ax, si
mov ecx, esp
jne 0x4722d3
mov dword [esp + 0x1c], esp
push 6
push 0x54937c
call fcn.0048a680
push ecx
mov byte [esp + 0x174], 0x27
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x54cf24
call fcn.0048a680
mov ecx, 0x55b3d0
mov byte [esp + 0x174], 6
call fcn.00499670
xor esi, esi
jmp case.default.0x471538
mov dword [esp + 0x1c], esp
push 6
push 0x54937c
call fcn.0048a680
push ecx
mov byte [esp + 0x174], 0x28
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x54cf2c
jmp 0x4722b5
lea ecx, [esp + 0x20]
mov byte [esp + 0x164], 5
call fcn.0048a720
lea ecx, [esp + 0x28]
mov byte [esp + 0x164], 4
call fcn.0048a720
lea ecx, [esp + 0x14]
mov byte [esp + 0x164], 3
call fcn.0048a720
lea ecx, [esp + 0x18]
mov byte [esp + 0x164], 2
call fcn.0048a720
lea ecx, [esp + 0x24]
mov byte [esp + 0x164], 1
call fcn.0048a720
mov eax, dword [esp + 0x3c]
cmp eax, esi
je 0x4723fe
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x4723f5
cmp al, 0xff
je 0x4723f5
dec al
mov byte [ecx], al
xor ax, ax
jmp 0x472481
lea ecx, [esp + 0x20]
mov byte [esp + 0x164], 5
call fcn.0048a720
lea ecx, [esp + 0x28]
mov byte [esp + 0x164], 4
call fcn.0048a720
lea ecx, [esp + 0x14]
mov byte [esp + 0x164], 3
call fcn.0048a720
lea ecx, [esp + 0x18]
mov byte [esp + 0x164], 2
call fcn.0048a720
lea ecx, [esp + 0x24]
mov byte [esp + 0x164], 1
call fcn.0048a720
mov eax, dword [esp + 0x3c]
cmp eax, esi
je 0x4723fe
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x4723f5
cmp al, 0xff
je 0x4723f5
dec al
mov byte [ecx], al
xor ax, ax
jmp 0x472481
push ecx
call fcn.00514120
add esp, 4
xor ax, ax
jmp 0x472481
lea ecx, [esp + 0x20]
mov byte [esp + 0x164], 5
call fcn.0048a720
lea ecx, [esp + 0x28]
mov byte [esp + 0x164], 4
call fcn.0048a720
lea ecx, [esp + 0x14]
mov byte [esp + 0x164], 3
call fcn.0048a720
lea ecx, [esp + 0x18]
mov byte [esp + 0x164], 2
call fcn.0048a720
lea ecx, [esp + 0x24]
mov byte [esp + 0x164], 1
call fcn.0048a720
mov eax, dword [esp + 0x3c]
cmp eax, esi
je 0x47247d
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x472474
cmp al, 0xff
je 0x472474
dec al
mov byte [ecx], al
jmp 0x47247d
push ecx
call fcn.00514120
add esp, 4
mov ax, 1
mov ecx, dword [esp + 0x15c]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x158
ret