Function at 0x4bea50
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xc8
mov esi, esp
mov dword [esi + 0xb0], ebp
mov edi, ecx
mov dword [esi + 0xb4], esp
mov dword [esi + 0xc0], 0xffffffff
lea eax, [esi + 0xb8]
mov dword [esi + 0xbc], 0x4c4390
mov ecx, dword fs:[0]
mov dword [esi + 0xb8], ecx
mov dword fs:[0], eax
mov eax, dword [0x572ee0]
mov ecx, 0x911585b1
mov eax, dword [eax - 0x13aabde9]
add eax, ecx
lea ecx, [esi + 0x74]
call eax
lea ecx, [edi + 0x30]
mov dword [esi + 4], edi
lea eax, [edi + 0x5c]
mov dword [esi + 0x84], eax
mov edi, 0x911585b1
mov dword [esi + 0x70], 0
lea edx, [esi + 8]
mov dword [esi], ecx
jmp 0x4beafb
mov eax, dword [0x572da4]
mov eax, dword [eax + 0x4d686a38]
mov ecx, 0x7594eb43
add eax, ecx
mov ecx, dword [esi]
call eax
mov ecx, dword [esi + 4]
mov dword [ecx + 0x28], eax
mov ecx, dword [esi]
lea edx, [esi + 8]
mov edi, 0x911585b1
lea ebx, [esi + 0x74]
test byte [esi + 0x70], 1
jne 0x4bee3a
mov eax, dword [esi + 4]
mov eax, dword [eax + 0x28]
cmp eax, 6
jl 0x4bee46
cmp eax, 9
jae 0x4bebb0
cmp eax, 8
jne 0x4bee91
mov dword [esi + 0xc0], 0
mov ecx, dword [ebp + 8]
push 0xffffffffffffffff
call fcn.004a9110
test al, al
je 0x4bf32b
mov eax, dword [0x572da4]
mov eax, dword [eax + 0x4d686a38]
mov ecx, 0x7594eb43
add eax, ecx
mov ecx, dword [esi]
call eax
mov ecx, dword [esi + 4]
mov dword [ecx + 0x28], eax
cmp eax, 0xa
je 0x4befb6
mov byte [esi + 0x40], 1
mov eax, dword [0x572330]
mov eax, dword [eax - 0x72acac8a]
mov ebx, 0xf4a72f5b
add eax, ebx
lea edi, [esi + 0x74]
mov ecx, edi
lea edx, [esi + 0x20]
push edx
call eax
mov eax, dword [0x572330]
mov eax, dword [eax - 0x72acac86]
add eax, ebx
mov ecx, edi
lea edx, [esi + 0x40]
push edx
push dword [esi + 0x24]
push dword [esi + 0x20]
lea edx, [esi + 8]
push edx
call eax
jmp 0x4beaf1
cmp eax, 0xe
jae 0x4bf03e
cmp eax, 9
jne 0x4bf17b
mov dword [esi + 0xc0], 0
mov ecx, dword [ebp + 8]
push 0xffffffffffffffff
call fcn.004a8850
test al, al
je 0x4bf32b
mov eax, dword [0x572da4]
mov eax, dword [eax + 0x4d686a38]
mov ecx, 0x7594eb43
add eax, ecx
mov ecx, dword [esi]
call eax
mov ecx, dword [esi + 4]
mov dword [ecx + 0x28], eax
cmp eax, 0xb
jne 0x4becc0
mov ecx, dword [ebp + 8]
call fcn.004a8a60
test al, al
mov edi, 0x911585b1
lea ebx, [esi + 0x74]
je 0x4bf32b
mov eax, dword [0x572ee0]
mov eax, dword [eax - 0x13aabdc5]
add eax, edi
mov ecx, ebx
call eax
test al, al
jne 0x4bf2fc
mov eax, dword [0x572ee0]
mov eax, dword [eax - 0x13aabdc1]
add eax, edi
mov ecx, ebx
mov ebx, 0x911585b1
lea edi, [esi + 0x20]
push edi
call eax
mov eax, dword [0x572ee0]
mov eax, dword [eax - 0x13aabdbd]
add eax, ebx
mov ecx, edi
call eax
mov dword [esi + 0xc0], 0
test al, al
je 0x4bed5f
mov eax, dword [0x572da4]
mov eax, dword [eax + 0x4d686a38]
mov ecx, 0x7594eb43
add eax, ecx
mov ecx, dword [esi]
call eax
mov ecx, dword [esi + 4]
mov dword [ecx + 0x28], eax
cmp eax, 0xd
je 0x4bead5
cmp eax, 0xa
jne 0x4bf4e1
mov ecx, dword [ebp + 8]
call fcn.004a9320
test al, al
jne 0x4bee14
jmp 0x4bf32b
cmp eax, 4
jne 0x4bf32f
mov ecx, dword [ebp + 8]
push dword [esi + 0x84]
call fcn.004a8f20
test al, al
je 0x4bf32b
mov eax, dword [0x572da4]
mov eax, dword [eax + 0x4d686a38]
mov ecx, 0x7594eb43
add eax, ecx
mov ecx, dword [esi]
call eax
mov ecx, dword [esi + 4]
mov dword [ecx + 0x28], eax
cmp eax, 0xc
jne 0x4bf408
mov byte [esi + 0x40], 0
mov eax, dword [0x572330]
mov eax, dword [eax - 0x72acac8a]
mov ebx, 0xf4a72f5b
add eax, ebx
lea edi, [esi + 0x74]
mov ecx, edi
lea edx, [esi + 0x20]
push edx
call eax
mov eax, dword [0x572330]
mov eax, dword [eax - 0x72acac86]
add eax, ebx
mov ecx, edi
lea edx, [esi + 0x40]
push edx
push dword [esi + 0x24]
push dword [esi + 0x20]
lea edx, [esi + 8]
push edx
call eax
mov eax, dword [0x572da4]
mov eax, dword [eax + 0x4d686a38]
mov ecx, 0x7594eb43
add eax, ecx
mov ecx, dword [esi]
call eax
jmp 0x4beaeb
mov eax, dword [0x572da4]
mov eax, dword [eax + 0x4d686a38]
mov ecx, 0x7594eb43
add eax, ecx
mov ecx, dword [esi]
call eax
mov ecx, dword [esi + 4]
mov dword [ecx + 0x28], eax
cmp eax, 0xd
jne 0x4bedfb
mov eax, dword [0x572da4]
mov eax, dword [eax + 0x4d686a38]
mov ecx, 0x7594eb43
add eax, ecx
mov ecx, dword [esi]
call eax
mov ecx, dword [esi + 4]
mov dword [ecx + 0x28], eax
cmp eax, 4
jne 0x4bf693
mov ecx, dword [ebp + 8]
push dword [esi + 0x84]
call fcn.004a8f20
test al, al
je 0x4bf32b
mov eax, dword [0x572da4]
mov eax, dword [eax + 0x4d686a38]
mov ecx, 0x7594eb43
add eax, ecx
mov ecx, dword [esi]
call eax
mov ecx, dword [esi + 4]
mov dword [ecx + 0x28], eax
cmp eax, 0xc
jne 0x4bf76c
mov eax, dword [0x572da4]
mov eax, dword [eax + 0x4d686a38]
mov ecx, 0x7594eb43
add eax, ecx
mov ecx, dword [esi]
call eax
jmp 0x4beaeb
cmp eax, 0xb
jne 0x4bf5ba
mov ecx, dword [ebp + 8]
call fcn.004a8a60
test al, al
je 0x4bf32b
mov eax, dword [0x572ee0]
mov eax, dword [eax - 0x13aabdb9]
mov edi, 0x911585b1
add eax, edi
lea ecx, [esi + 0x74]
call eax
mov al, 1
mov dword [esi + 0x70], eax
mov ecx, dword [esi]
lea edx, [esi + 8]
jmp 0x4beafb
mov dword [esi + 0x70], 0
jmp 0x4bec1b
cmp eax, 3
jge 0x4beedf
test eax, eax
jle 0x4bf17b
mov dword [esi + 0xc0], 0
cmp eax, 2
jne 0x4befc3
mov byte [esi + 8], 0
mov eax, dword [0x57238c]
mov eax, dword [eax + 0x7536bdec]
mov ecx, 0xb179b39b
add eax, ecx
mov ecx, dword [ebp + 8]
push 0
push edx
lea edx, [esi + 0x20]
push edx
call eax
jmp 0x4bf031
cmp eax, 6
jne 0x4bef33
mov eax, dword [0x572ee0]
mov eax, dword [eax - 0x13aabdcd]
add eax, edi
call eax
mov dword [esi + 0x24], edx
mov dword [esi + 0x20], eax
mov eax, dword [0x572394]
mov eax, dword [eax + 0x2e00bb70]
mov ecx, 0x4fbcec49
add eax, ecx
mov dword [esi + 0xc0], 0
mov ecx, dword [ebp + 8]
push 0
lea edx, [esi + 0x20]
push edx
lea edx, [esi + 8]
push edx
call eax
jmp 0x4bf031
mov dword [esi + 0xc0], 0
je 0x4befe7
cmp eax, 5
jne 0x4bf00e
mov eax, dword [0x572ee0]
mov eax, dword [eax - 0x13aabdc9]
add eax, edi
call eax
mov dword [esi + 0x24], edx
mov dword [esi + 0x20], eax
mov eax, dword [0x57239c]
mov eax, dword [eax + 0x757b1527]
mov ecx, 0xc8e96e19
add eax, ecx
mov ecx, dword [ebp + 8]
push 0
lea edx, [esi + 0x20]
push edx
lea edx, [esi + 8]
push edx
call eax
jmp 0x4bf031
mov eax, dword [0x572ee0]
mov eax, dword [eax - 0x13aabdd5]
add eax, edi
mov ebx, ecx
call eax
fstp qword [esi + 0xa8]
vmovsd xmm0, qword [esi + 0xa8]
mov eax, dword [0x572ee0]
mov eax, dword [eax - 0x13aabdd1]
add eax, edi
sub esp, 8
vmovsd qword [esi + 0xa0], xmm0
vmovsd qword [esp], xmm0
call eax
add esp, 8
mov dword [esi + 0xc0], 0
test al, al
je 0x4bf845
vmovsd xmm0, qword [esi + 0xa0]
vmovsd qword [esi + 0x20], xmm0
mov eax, dword [0x572388]
mov eax, dword [eax - 0x35c0f9ed]
mov ecx, 0xbe865088
add eax, ecx
mov ecx, dword [ebp + 8]
push 0
lea edx, [esi + 0x20]
push edx
lea edx, [esi + 8]
push edx
call eax
jmp 0x4bf031
mov ecx, dword [ebp + 8]
call fcn.004a9320
jmp 0x4bec0b
mov byte [esi + 8], 1
mov eax, dword [0x57238c]
mov eax, dword [eax + 0x7536bdec]
mov ecx, 0xb179b39b
add eax, ecx
mov ecx, dword [ebp + 8]
push 0
push edx
lea edx, [esi + 0x20]
push edx
call eax
jmp 0x4bf031
mov dword [esi + 8], 0
mov eax, dword [0x572390]
mov eax, dword [eax - 0x62adf9f3]
mov ecx, 0x8d68373f
add eax, ecx
mov ecx, dword [ebp + 8]
push 0
push edx
lea edx, [esi + 0x20]
push edx
call eax
jmp 0x4bf031
mov eax, dword [0x572398]
mov eax, dword [eax + 0xaeb7347]
mov ecx, 0x4bdcaa0a
add eax, ecx
mov ecx, dword [ebp + 8]
push 0
push dword [esi + 0x84]
lea edx, [esi + 0x20]
push edx
call eax
mov edi, 0x911585b1
lea ebx, [esi + 0x74]
jmp 0x4bec1b
jne 0x4bf17b
mov edi, 0xec554217
add edi, dword [0x572ef0]
mov eax, dword [0x570140]
mov ecx, 0xc115db07
mov eax, dword [eax - 0x490b3c8c]
add eax, ecx
sub esp, 4
movzx ecx, byte [esi + 0x20]
mov byte [esp], cl
lea ebx, [esi + 0x40]
mov ecx, ebx
call eax
mov eax, dword [0x570140]
mov eax, dword [eax - 0x490b3c88]
mov ecx, 0xc115db07
add eax, ecx
push edi
call eax
add esp, 4
mov ecx, dword [0x570140]
mov ecx, dword [ecx - 0x490b3c84]
mov edx, 0xc115db07
add ecx, edx
push eax
call ecx
add esp, 4
mov dword [esi + 0xc0], 2
mov ecx, ebx
push eax
push edi
call fcn.00405290
mov dword [esi + 0xc0], 0x1b
mov ecx, dword [esi + 4]
lea eax, [esi + 0x40]
push eax
push 0
lea eax, [esi + 8]
push eax
call fcn.004c0070
mov eax, dword [0x572ee0]
mov ecx, 0x911585b1
mov eax, dword [eax - 0x13aabde5]
add eax, ecx
lea edi, [esi + 0x94]
mov ecx, dword [esi]
push edi
call eax
mov dword [esi + 0xc0], 0x1c
push 0
lea eax, [esi + 8]
push eax
push edi
push 0x65
lea eax, [esi + 0x20]
push eax
call fcn.004a6280
add esp, 0x14
mov dword [esi + 0xc0], 0x1d
lea eax, [esi + 0x58]
mov ecx, dword [esi]
push eax
call fcn.004c0430
mov eax, dword [0x572ee0]
mov ebx, 0x911585b1
mov eax, dword [eax - 0x13aabde5]
add eax, ebx
lea edi, [esi + 0x88]
mov ecx, dword [esi]
push edi
call eax
mov eax, dword [0x572ee0]
mov eax, dword [eax - 0x13aabde1]
add eax, ebx
mov dword [esi + 0xc0], 0xffffffff
mov ecx, edi
call eax
mov dword [esi + 0xc0], 0x1e
mov ecx, dword [ebp + 8]
lea edx, [esi + 0x20]
push edx
lea edx, [esi + 0x58]
push edx
push eax
call fcn.004a61d0
jmp 0x4bf2ad
mov edi, 0xec554217
add edi, dword [0x572ef0]
mov eax, dword [0x570140]
mov ecx, 0xc115db07
mov eax, dword [eax - 0x490b3c8c]
add eax, ecx
sub esp, 4
movzx ecx, byte [esi + 0x20]
mov byte [esp], cl
lea ebx, [esi + 0x40]
mov ecx, ebx
call eax
mov eax, dword [0x570140]
mov eax, dword [eax - 0x490b3c88]
mov ecx, 0xc115db07
add eax, ecx
push edi
call eax
add esp, 4
mov ecx, dword [0x570140]
mov ecx, dword [ecx - 0x490b3c84]
mov edx, 0xc115db07
add ecx, edx
push eax
call ecx
add esp, 4
mov dword [esi + 0xc0], 1
mov ecx, ebx
push eax
push edi
call fcn.00405290
mov dword [esi + 0xc0], 0x17
mov ecx, dword [esi + 4]
lea eax, [esi + 0x40]
push eax
push 0x10
lea eax, [esi + 8]
push eax
call fcn.004c0070
mov eax, dword [0x572ee0]
mov ecx, 0x911585b1
mov eax, dword [eax - 0x13aabde5]
add eax, ecx
lea edi, [esi + 0x94]
mov ecx, dword [esi]
push edi
call eax
mov dword [esi + 0xc0], 0x18
push 0
lea eax, [esi + 8]
push eax
push edi
push 0x65
lea eax, [esi + 0x20]
push eax
call fcn.004a6280
add esp, 0x14
mov dword [esi + 0xc0], 0x19
lea eax, [esi + 0x58]
mov ecx, dword [esi]
push eax
call fcn.004c0430
mov eax, dword [0x572ee0]
mov ebx, 0x911585b1
mov eax, dword [eax - 0x13aabde5]
add eax, ebx
lea edi, [esi + 0x88]
mov ecx, dword [esi]
push edi
call eax
mov eax, dword [0x572ee0]
mov eax, dword [eax - 0x13aabde1]
add eax, ebx
mov dword [esi + 0xc0], 0xffffffff
mov ecx, edi
call eax
mov dword [esi + 0xc0], 0x1a
mov ecx, dword [ebp + 8]
lea edx, [esi + 0x20]
push edx
lea edx, [esi + 0x58]
push edx
push eax
call fcn.004a61d0
mov ebx, eax
mov eax, dword [0x572ee0]
mov eax, dword [eax - 0x13aabddd]
mov edi, 0x911585b1
add eax, edi
lea ecx, [esi + 0x58]
call eax
mov eax, dword [0x572ee0]
mov eax, dword [eax - 0x13aabdd9]
add eax, edi
lea ecx, [esi + 0x20]
call eax
mov eax, dword [0x572ee0]
mov eax, dword [eax - 0x13aabddd]
add eax, edi
lea ecx, [esi + 8]
call eax
mov eax, dword [0x572ee0]
add edi, dword [eax - 0x13aabddd]
lea ecx, [esi + 0x40]
call edi
jmp 0x4bf2fe
mov bl, 1
mov eax, dword [0x572ee0]
mov edx, 0x911585b1
add edx, dword [eax - 0x13aabdb5]
lea ecx, [esi + 0x74]
call edx
mov eax, dword [esi + 0xb8]
mov dword fs:[0], eax
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 4
xor ebx, ebx
jmp 0x4bf2fe
mov eax, 0xec554217
add eax, dword [0x572ee4]
lea ecx, [esi + 0x40]
push eax
call fcn.00401db0
mov dword [esi + 0xc0], 0x23
mov ecx, dword [esi + 4]
lea eax, [esi + 0x40]
push eax
push 4
lea eax, [esi + 8]
push eax
call fcn.004c0070
mov eax, dword [0x572ee0]
mov ecx, 0x911585b1
mov eax, dword [eax - 0x13aabde5]
add eax, ecx
lea edi, [esi + 0x94]
mov ecx, dword [esi]
push edi
call eax
mov dword [esi + 0xc0], 0x24
push 0
lea eax, [esi + 8]
push eax
push edi
push 0x65
lea eax, [esi + 0x20]
push eax
call fcn.004a6280
add esp, 0x14
mov dword [esi + 0xc0], 0x25
lea eax, [esi + 0x58]
mov ecx, dword [esi]
push eax
call fcn.004c0430
mov eax, dword [0x572ee0]
mov ebx, 0x911585b1
mov eax, dword [eax - 0x13aabde5]
add eax, ebx
lea edi, [esi + 0x88]
mov ecx, dword [esi]
push edi
call eax
mov eax, dword [0x572ee0]
mov eax, dword [eax - 0x13aabde1]
add eax, ebx
mov dword [esi + 0xc0], 0xffffffff
mov ecx, edi
call eax
mov dword [esi + 0xc0], 0x26
mov ecx, dword [ebp + 8]
lea edx, [esi + 0x20]
push edx
lea edx, [esi + 0x58]
push edx
push eax
call fcn.004a61d0
jmp 0x4bf2ad
mov eax, 0xec554217
add eax, dword [0x572ee8]
lea ecx, [esi + 0x40]
push eax
call fcn.00401db0
mov dword [esi + 0xc0], 0x1f
mov ecx, dword [esi + 4]
lea eax, [esi + 0x40]
push eax
push 0xc
lea eax, [esi + 8]
push eax
call fcn.004c0070
mov eax, dword [0x572ee0]
mov ecx, 0x911585b1
mov eax, dword [eax - 0x13aabde5]
add eax, ecx
lea edi, [esi + 0x94]
mov ecx, dword [esi]
push edi
call eax
mov dword [esi + 0xc0], 0x20
push 0
lea eax, [esi + 8]
push eax
push edi
push 0x65
lea eax, [esi + 0x20]
push eax
call fcn.004a6280
add esp, 0x14
mov dword [esi + 0xc0], 0x21
lea eax, [esi + 0x58]
mov ecx, dword [esi]
push eax
call fcn.004c0430
mov eax, dword [0x572ee0]
mov ebx, 0x911585b1
mov eax, dword [eax - 0x13aabde5]
add eax, ebx
lea edi, [esi + 0x88]
mov ecx, dword [esi]
push edi
call eax
mov eax, dword [0x572ee0]
mov eax, dword [eax - 0x13aabde1]
add eax, ebx
mov dword [esi + 0xc0], 0xffffffff
mov ecx, edi
call eax
mov dword [esi + 0xc0], 0x22
mov ecx, dword [ebp + 8]
lea edx, [esi + 0x20]
push edx
lea edx, [esi + 0x58]
push edx
push eax
call fcn.004a61d0
jmp 0x4bf2ad
mov eax, 0xec554217
add eax, dword [0x572ef4]
lea ecx, [esi + 0x40]
push eax
call fcn.00401db0
mov dword [esi + 0xc0], 0x13
mov ecx, dword [esi + 4]
lea eax, [esi + 0x40]
push eax
push 0xa
lea eax, [esi + 8]
push eax
call fcn.004c0070
mov eax, dword [0x572ee0]
mov ecx, 0x911585b1
mov eax, dword [eax - 0x13aabde5]
add eax, ecx
lea edi, [esi + 0x94]
mov ecx, dword [esi]
push edi
call eax
mov dword [esi + 0xc0], 0x14
push 0
lea eax, [esi + 8]
push eax
push edi
push 0x65
lea eax, [esi + 0x20]
push eax
call fcn.004a6280
add esp, 0x14
mov dword [esi + 0xc0], 0x15
lea eax, [esi + 0x58]
mov ecx, dword [esi]
push eax
call fcn.004c0430
mov eax, dword [0x572ee0]
mov ebx, 0x911585b1
mov eax, dword [eax - 0x13aabde5]
add eax, ebx
lea edi, [esi + 0x88]
mov ecx, dword [esi]
push edi
call eax
mov eax, dword [0x572ee0]
mov eax, dword [eax - 0x13aabde1]
add eax, ebx
mov dword [esi + 0xc0], 0xffffffff
mov ecx, edi
call eax
mov dword [esi + 0xc0], 0x16
mov ecx, dword [ebp + 8]
lea edx, [esi + 0x20]
push edx
lea edx, [esi + 0x58]
push edx
push eax
call fcn.004a61d0
jmp 0x4bf2ad
mov eax, 0xec554217
add eax, dword [0x572ef8]
lea ecx, [esi + 0x40]
push eax
call fcn.00401db0
mov dword [esi + 0xc0], 7
mov ecx, dword [esi + 4]
lea eax, [esi + 0x40]
push eax
push 0xb
lea eax, [esi + 8]
push eax
call fcn.004c0070
mov eax, dword [0x572ee0]
mov ecx, 0x911585b1
mov eax, dword [eax - 0x13aabde5]
add eax, ecx
lea edi, [esi + 0x94]
mov ecx, dword [esi]
push edi
call eax
mov dword [esi + 0xc0], 8
push 0
lea eax, [esi + 8]
push eax
push edi
push 0x65
lea eax, [esi + 0x20]
push eax
call fcn.004a6280
add esp, 0x14
mov dword [esi + 0xc0], 9
lea eax, [esi + 0x58]
mov ecx, dword [esi]
push eax
call fcn.004c0430
mov eax, dword [0x572ee0]
mov ebx, 0x911585b1
mov eax, dword [eax - 0x13aabde5]
add eax, ebx
lea edi, [esi + 0x88]
mov ecx, dword [esi]
push edi
call eax
mov eax, dword [0x572ee0]
mov eax, dword [eax - 0x13aabde1]
add eax, ebx
mov dword [esi + 0xc0], 0xffffffff
mov ecx, edi
call eax
mov dword [esi + 0xc0], 0xa
mov ecx, dword [ebp + 8]
lea edx, [esi + 0x20]
push edx
lea edx, [esi + 0x58]
push edx
push eax
call fcn.004a61d0
jmp 0x4bf2ad
mov eax, 0xec554217
add eax, dword [0x572ee4]
lea ecx, [esi + 0x40]
push eax
call fcn.00401db0
mov dword [esi + 0xc0], 0xf
mov ecx, dword [esi + 4]
lea eax, [esi + 0x40]
push eax
push 4
lea eax, [esi + 8]
push eax
call fcn.004c0070
mov eax, dword [0x572ee0]
mov ecx, 0x911585b1
mov eax, dword [eax - 0x13aabde5]
add eax, ecx
lea edi, [esi + 0x94]
mov ecx, dword [esi]
push edi
call eax
mov dword [esi + 0xc0], 0x10
push 0
lea eax, [esi + 8]
push eax
push edi
push 0x65
lea eax, [esi + 0x20]
push eax
call fcn.004a6280
add esp, 0x14
mov dword [esi + 0xc0], 0x11
lea eax, [esi + 0x58]
mov ecx, dword [esi]
push eax
call fcn.004c0430
mov eax, dword [0x572ee0]
mov ebx, 0x911585b1
mov eax, dword [eax - 0x13aabde5]
add eax, ebx
lea edi, [esi + 0x88]
mov ecx, dword [esi]
push edi
call eax
mov eax, dword [0x572ee0]
mov eax, dword [eax - 0x13aabde1]
add eax, ebx
mov dword [esi + 0xc0], 0xffffffff
mov ecx, edi
call eax
mov dword [esi + 0xc0], 0x12
mov ecx, dword [ebp + 8]
lea edx, [esi + 0x20]
push edx
lea edx, [esi + 0x58]
push edx
push eax
call fcn.004a61d0
jmp 0x4bf2ad
mov eax, 0xec554217
add eax, dword [0x572ee8]
lea ecx, [esi + 0x40]
push eax
call fcn.00401db0
mov dword [esi + 0xc0], 0xb
mov ecx, dword [esi + 4]
lea eax, [esi + 0x40]
push eax
push 0xc
lea eax, [esi + 8]
push eax
call fcn.004c0070
mov eax, dword [0x572ee0]
mov ecx, 0x911585b1
mov eax, dword [eax - 0x13aabde5]
add eax, ecx
lea edi, [esi + 0x94]
mov ecx, dword [esi]
push edi
call eax
mov dword [esi + 0xc0], 0xc
push 0
lea eax, [esi + 8]
push eax
push edi
push 0x65
lea eax, [esi + 0x20]
push eax
call fcn.004a6280
add esp, 0x14
mov dword [esi + 0xc0], 0xd
lea eax, [esi + 0x58]
mov ecx, dword [esi]
push eax
call fcn.004c0430
mov eax, dword [0x572ee0]
mov ebx, 0x911585b1
mov eax, dword [eax - 0x13aabde5]
add eax, ebx
lea edi, [esi + 0x88]
mov ecx, dword [esi]
push edi
call eax
mov eax, dword [0x572ee0]
mov eax, dword [eax - 0x13aabde1]
add eax, ebx
mov dword [esi + 0xc0], 0xffffffff
mov ecx, edi
call eax
mov dword [esi + 0xc0], 0xe
mov ecx, dword [ebp + 8]
lea edx, [esi + 0x20]
push edx
lea edx, [esi + 0x58]
push edx
push eax
call fcn.004a61d0
jmp 0x4bf2ad
mov byte [esi + 0x88], 0x27
mov ecx, ebx
lea eax, [esi + 0x40]
push eax
call fcn.004c0430
mov eax, 0xec554217
add eax, dword [0x572eec]
mov dword [esi + 0xc0], 3
lea ecx, [esi + 0x88]
push ecx
lea ecx, [esi + 0x40]
push ecx
push eax
lea eax, [esi + 8]
push eax
call fcn.004a99c0
add esp, 0x10
mov dword [esi + 0xc0], 4
push 0
lea eax, [esi + 8]
push eax
push 0x196
lea eax, [esi + 0x20]
push eax
call fcn.004a96c0
add esp, 0x10
mov dword [esi + 0xc0], 5
lea eax, [esi + 0x58]
mov ecx, dword [esi]
push eax
call fcn.004c0430
mov eax, dword [0x572ee0]
mov ebx, 0x911585b1
mov eax, dword [eax - 0x13aabde5]
add eax, ebx
lea edi, [esi + 0x94]
mov ecx, dword [esi]
push edi
call eax
mov eax, dword [0x572ee0]
mov eax, dword [eax - 0x13aabde1]
add eax, ebx
mov dword [esi + 0xc0], 0xffffffff
mov ecx, edi
call eax
mov dword [esi + 0xc0], 6
mov ecx, dword [ebp + 8]
lea edx, [esi + 0x20]
push edx
lea edx, [esi + 0x58]
push edx
push eax
call fcn.004a9610
jmp 0x4bf2ad