Function at 0x427697
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x210
mov eax, dword [0x4b1240]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, 1
sub dword [0x4a8790], ebx
cmp byte [0x4b55c7], 0
push esi
push edi
jne 0x4277b8
xor edi, edi
cmp dword [0x4a8790], edi
jg 0x4277b8
mov eax, dword [0x4b5638]
mov esi, dword [sym.imp.USER32.dll_KillTimer]
add eax, 0xffffffe8
cmp eax, 0x16
ja case.default.0x42751a
movzx eax, byte [eax + 0x4277d8]
jmp dword [eax*4 + 0x4277cc]
mov ecx, dword [0x4a856c]
cmp ecx, dword [0x4b559c]
jge case.default.0x42751a
cmp dword [0x4a8548], ebx
jne case.default.0x42751a
cmp byte [0x4b5545], 0
mov byte [0x4b5541], bl
mov dword [0x4a8558], edi
jne case.default.0x42751a
push 0xffffffffffffffff
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x20c], esp
push str.girl_bg
mov byte [0x4b5545], bl
call fcn.004154c0
mov ecx, dword [0x4b290c]
call fcn.004018e0
mov edx, dword [0x4b5978]
push 0x4af
push edx
call esi
mov eax, dword [0x4b5978]
push edi
mov edi, dword [sym.imp.USER32.dll_SetTimer]
push 0xc8
push 0x4af
push eax
call edi
mov ecx, dword [0x4b5978]
push 0x4ae
push ecx
call esi
mov edx, dword [0x4b5978]
push 0
push 0x1b58
push 0x4ae
push edx
call edi
push ebx
push ebx
push 0x1d
call fcn.00409510
add esp, 0xc
jmp case.default.0x42751a
mov eax, dword [0x4a856c]
cmp eax, dword [0x4b559c]
jge 0x427688
cmp byte [0x4b5545], 0
mov byte [0x4b57df], bl
mov dword [0x4b589c], edi
jne case.default.0x42751a
push 0xffffffffffffffff
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x20c], esp
push str.girl_bg
mov byte [0x4b5545], bl
call fcn.004154c0
mov ecx, dword [0x4b290c]
call fcn.004018e0
mov ecx, dword [0x4b5978]
push 0x4af
push ecx
call esi
mov edx, dword [0x4b5978]
push edi
mov edi, dword [sym.imp.USER32.dll_SetTimer]
push 0xc8
push 0x4af
push edx
call edi
mov eax, dword [0x4b5978]
push 0x4ae
push eax
call esi
mov ecx, dword [0x4b5978]
push 0
push 0x1b58
push 0x4ae
push ecx
call edi
push ebx
push ebx
push 0x1d
call fcn.00409510
add esp, 0xc
jmp case.default.0x42751a
call fcn.0041ead0
push str._ShakePreResultTH_:_EndWithGamewin_n
jmp 0x42776f
cmp dword [0x4a8548], ebx
jle 0x4276e5
cmp byte [0x4b5523], 0
jne 0x4276db
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x20c], esp
push str.Multi_before_eft
mov byte [0x4b5523], bl
call fcn.004154c0
mov ecx, dword [0x4b290c]
call fcn.004018e0
push edi
push ebx
push 0x2a
call fcn.00409510
add esp, 0xc
push str._ShakePreResultTH_:_Multi_before_eft_n
jmp 0x42776f
call fcn.00463f1c
mov dword [ebp - 0x208], eax
fild dword [ebp - 0x208]
fnstcw word [ebp - 0x206]
movzx eax, word [ebp - 0x206]
fmul qword [0x481600]
or eax, 0xc00
mov dword [ebp - 0x20c], eax
fmul qword [0x497ab8]
fldcw word [ebp - 0x20c]
fistp qword [ebp - 0x210]
cmp dword [ebp - 0x210], 0xa
fldcw word [ebp - 0x206]
jl 0x427688
cmp byte [0x4b5522], 0
jne 0x42776a
push 2
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x20c], esp
push str.door
mov byte [0x4b5522], bl
call fcn.004154c0
mov ecx, dword [0x4b290c]
call fcn.004018e0
push str._ShakePreResultTH_:_door_n
lea edx, [ebp - 0x204]
push 0x100
push edx
call fcn.004646a5
add esp, 0xc
lea eax, [ebp - 0x204]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea ecx, [ebp - 0x204]
push ecx
push ebx
call fcn.00408da0
add esp, 8
mov edx, dword [0x4b5978]
push 0x49c
push edx
mov dword [0x4a8790], 0x64
call esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00463931
mov esp, ebp
pop ebp
ret