Function at 0x4a1130
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5b01cd
mov eax, dword fs:[0]
push eax
sub esp, 0x40c
mov eax, dword [0x616798]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
lea ecx, [edi + 0x224]
mov dword [edi], vtable.BBOClient.0
call fcn.0045adb0
mov dword [edi + 0x298], 0
mov dword [edi + 0x29c], 0
mov dword [edi + 0x2a0], 0xffffffff
call fcn.004f2230
call fcn.004a0db0
mov dword [edi + 0x410], 0
mov ecx, edi
mov dword [edi + 0x418], 0
mov eax, dword [0x6192d0]
mov eax, dword [eax + 0x2a68c]
mov dword [eax], 0xbfc90fdb
mov eax, dword [0x6192d0]
mov eax, dword [eax + 0x2a68c]
mov dword [eax + 4], 0xbebd70a4
mov eax, dword [0x6192d0]
mov eax, dword [eax + 0x2a68c]
mov dword [eax + 0xc], 0x43250000
mov eax, dword [0x6192d0]
mov eax, dword [eax + 0x2a68c]
mov dword [eax + 0x10], 0xc2840000
mov eax, dword [0x6192d0]
mov eax, dword [eax + 0x2a68c]
mov dword [eax + 0x14], 0xc2fa0000
call fcn.004adc00
push 0x174
call fcn.00554883
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0
test eax, eax
je 0x4a1236
mov ecx, eax
call fcn.00461cc0
mov ecx, eax
jmp 0x4a1238
xor ecx, ecx
mov dword [edi + 0xa8], ecx
mov eax, dword [0x6192d0]
push str.dat_skydome.ase
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00463520
mov eax, dword [0x6192d0]
mov ecx, dword [edi + 0xa8]
push 0
push str.dat_sky.png
push dword [eax + 0x2a3d8]
call fcn.00463fc0
push 0x94074
call fcn.00554883
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 1
test eax, eax
je 0x4a12a0
mov ecx, eax
call fcn.004f7240
mov ecx, eax
jmp 0x4a12a2
xor ecx, ecx
push 0
mov dword [edi + 0x154], ecx
mov eax, dword [0x6192d0]
push 0x100
push 0x100
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.004f92b0
mov eax, dword [0x6192d0]
mov ecx, dword [edi + 0x154]
push str.datgrassfull.png
push dword [eax + 0x2a3d8]
call fcn.004fbb10
mov ecx, dword [edi + 0x154]
call fcn.004f8000
call fcn.004f2230
push 0x14
call fcn.00554883
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 2
test eax, eax
je 0x4a1320
push dword [edi + 0x154]
mov ecx, eax
call fcn.004e6330
jmp 0x4a1322
xor eax, eax
mov dword [edi + 0x15c], eax
mov dword [0x619a58], 0
mov dword [edi + 0x294], 0
mov dword [edi + 0x284], 0
mov dword [edi + 0x280], 0
mov dword [edi + 0x290], 0
mov dword [0x619a5c], 0
mov dword [0x619a60], 0
mov dword [0x619a64], 0
push 8
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 0x20c], 0xffffffff
mov dword [edi + 0x160], 0
mov dword [edi + 0x164], 0
mov dword [edi + 0x168], 0
mov dword [edi + 0x28c], 0
call fcn.00554883
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 3
test eax, eax
je 0x4a13d5
mov ecx, eax
call fcn.004f4470
jmp 0x4a13d7
xor eax, eax
push 0x4d8
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 4], eax
call fcn.00554883
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 4
test eax, eax
je 0x4a140f
push 0x5c0f88
push 0
mov ecx, eax
call fcn.004b0360
jmp 0x4a1411
xor eax, eax
mov ecx, dword [edi + 4]
push eax
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 0xc], eax
mov dword [edi + 8], eax
call fcn.004f45c0
mov ecx, dword [edi + 8]
mov dword [ecx + 0x170], eax
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push eax
push dword [eax + 0x170]
call fcn.004f45a0
mov esi, eax
mov eax, dword [edi + 8]
mov dword [eax + 0x168], 0x28
mov eax, dword [edi + 8]
mov dword [eax + 0x164], 0x28
mov eax, dword [edi + 8]
mov dword [eax + 0x108], 0
mov eax, dword [edi + 8]
mov dword [eax + 0x10c], 0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 0x154]
push dword [eax + 0x164]
call fcn.004fb210
mov eax, dword [edi + 8]
fstp dword [eax + 0x114]
mov eax, dword [edi + 8]
mov ecx, dword [edi + 0x154]
push dword [eax + 0x168]
call fcn.004fb320
mov eax, dword [edi + 8]
sub esp, 8
mov ecx, edi
fstp dword [eax + 0x11c]
mov eax, dword [edi + 8]
movss xmm0, dword [eax + 0x11c]
movss dword [esp + 4], xmm0
movss xmm0, dword [eax + 0x114]
movss dword [esp], xmm0
call fcn.004acca0
mov eax, dword [edi + 8]
push 0x10
fstp dword [eax + 0x118]
mov eax, dword [edi + 8]
mov dword [edi + 0x1f8], 0xbea3d70a
movss xmm0, dword [eax + 0x108]
movss dword [esi + 0x118], xmm0
movss dword [esi + 0x11c], xmm0
mov dword [esi + 0x120], 0x3e75c28f
mov dword [esi + 0x124], 0x3e567750
mov eax, dword [edi + 8]
movss xmm0, dword [eax + 0x114]
movss dword [esi + 0x110], xmm0
movss dword [esi + 0x108], xmm0
mov eax, dword [edi + 8]
movss xmm0, dword [eax + 0x11c]
movss dword [esi + 0x114], xmm0
movss dword [esi + 0x10c], xmm0
mov dword [esi + 0x128], 0x3e99999a
call fcn.00554883
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 5
test eax, eax
je 0x4a1580
mov ecx, eax
call fcn.0044d7f0
jmp 0x4a1582
xor eax, eax
push 0x10
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 0x18], eax
call fcn.00554883
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 6
test eax, eax
je 0x4a15b0
mov ecx, eax
call fcn.0044d7f0
jmp 0x4a15b2
xor eax, eax
push 0x174
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 0x1c], eax
call fcn.00554883
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 7
test eax, eax
je 0x4a15ec
push str.AVATAR_STAND
push 1
mov ecx, eax
call fcn.0045dca0
mov ecx, eax
jmp 0x4a15ee
xor ecx, ecx
mov dword [edi + 0x120], ecx
mov eax, dword [0x6192d0]
push 0xffffffffffffffff
push str.dat_avatar_stand.anc
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.0045ea90
mov eax, dword [0x6192d0]
mov ecx, dword [edi + 0x120]
push dword [eax + 0x2a3d8]
call fcn.0045e510
mov ecx, dword [edi + 0x120]
mov esi, eax
mov eax, dword [0x6192d0]
push esi
push 0
push dword [eax + 0x2a3d8]
call fcn.00460cf0
mov eax, dword [0x6192d0]
sub esp, 0xc
mov ecx, dword [edi + 0x120]
mov dword [esp + 8], 0
mov dword [esp + 4], 0xbdcccccd
mov dword [esp], 0
push 0
push dword [eax + 0x2a3d8]
call fcn.0045df30
push 0x174
call fcn.00554883
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 8
test eax, eax
je 0x4a16a5
push str.AVATAR_RUN
push 1
mov ecx, eax
call fcn.0045dca0
mov ecx, eax
jmp 0x4a16a7
xor ecx, ecx
mov dword [edi + 0x124], ecx
mov eax, dword [0x6192d0]
push 0xffffffffffffffff
push str.dat_avatar_run.anc
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.0045ea90
mov eax, dword [0x6192d0]
mov ecx, dword [edi + 0x124]
push esi
push 0
push dword [eax + 0x2a3d8]
call fcn.00460cf0
mov eax, dword [0x6192d0]
sub esp, 0xc
mov ecx, dword [edi + 0x124]
mov dword [esp + 8], 0
mov dword [esp + 4], 0xbdcccccd
mov dword [esp], 0
push 0
push dword [eax + 0x2a3d8]
call fcn.0045df30
call fcn.004f2230
push 0x174
call fcn.00554883
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 9
test eax, eax
je 0x4a174b
push str.AVATAR_ATTACK
push 1
mov ecx, eax
call fcn.0045dca0
mov ecx, eax
jmp 0x4a174d
xor ecx, ecx
mov dword [edi + 0x128], ecx
mov eax, dword [0x6192d0]
push 0xffffffffffffffff
push str.dat_avatar_attack.anc
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.0045ea90
mov eax, dword [0x6192d0]
mov ecx, dword [edi + 0x128]
push esi
push 0
push dword [eax + 0x2a3d8]
call fcn.00460cf0
mov eax, dword [0x6192d0]
sub esp, 0xc
mov ecx, dword [edi + 0x128]
mov dword [esp + 8], 0
mov dword [esp + 4], 0xbdcccccd
mov dword [esp], 0
push 0
push dword [eax + 0x2a3d8]
call fcn.0045df30
push 0x174
call fcn.00554883
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0xa
test eax, eax
je 0x4a17ec
push str.AVATAR_ATTACK2
push 1
mov ecx, eax
call fcn.0045dca0
mov ecx, eax
jmp 0x4a17ee
xor ecx, ecx
mov dword [edi + 0x12c], ecx
mov eax, dword [0x6192d0]
push 0xffffffffffffffff
push str.dat_avatar_attack2.anc
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.0045ea90
mov eax, dword [0x6192d0]
mov ecx, dword [edi + 0x12c]
push esi
push 0
push dword [eax + 0x2a3d8]
call fcn.00460cf0
mov eax, dword [0x6192d0]
sub esp, 0xc
mov ecx, dword [edi + 0x12c]
mov dword [esp + 8], 0
mov dword [esp + 4], 0xbdcccccd
mov dword [esp], 0
push 0
push dword [eax + 0x2a3d8]
call fcn.0045df30
push 0x174
call fcn.00554883
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0xb
test eax, eax
je 0x4a188d
push str.MERCHANT_ANIM
push 1
mov ecx, eax
call fcn.0045dca0
mov ecx, eax
jmp 0x4a188f
xor ecx, ecx
mov dword [edi + 0x130], ecx
mov eax, dword [0x6192d0]
push 0xffffffffffffffff
push str.datmerchant.anc
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.0045ea90
push 0x174
call fcn.00554883
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0xc
test eax, eax
je 0x4a18e3
push str.WITCHSTAND_ANIM
push 1
mov ecx, eax
call fcn.0045dca0
mov ecx, eax
jmp 0x4a18e5
xor ecx, ecx
mov dword [edi + 0x134], ecx
mov eax, dword [0x6192d0]
push 0xffffffffffffffff
push str.datwitch_idle.anc
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.0045ea90
mov eax, dword [0x6192d0]
mov ecx, dword [edi + 0x134]
push 0
push str.datwitch.PNG
push dword [eax + 0x2a3d8]
call fcn.0045fad0
push 0x174
call fcn.00554883
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0xd
test eax, eax
je 0x4a1956
push str.WITCHTALK_ANIM
push 1
mov ecx, eax
call fcn.0045dca0
mov ecx, eax
jmp 0x4a1958
xor ecx, ecx
mov dword [edi + 0x138], ecx
mov eax, dword [0x6192d0]
push 0xffffffffffffffff
push str.datwitch_talk.anc
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.0045ea90
mov eax, dword [0x6192d0]
mov ecx, dword [edi + 0x138]
push 0
push str.datwitch.PNG
push dword [eax + 0x2a3d8]
call fcn.0045fad0
mov dword [edi + 0x220], 0
call fcn.004f2230
push 0x174
call fcn.00554883
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0xe
test eax, eax
je 0x4a19d1
mov ecx, eax
call fcn.00461cc0
mov ecx, eax
jmp 0x4a19d3
xor ecx, ecx
mov dword [edi + 0xb0], ecx
mov eax, dword [0x6192d0]
push str.dat_sack.ase
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00463520
mov eax, dword [0x6192d0]
mov ecx, dword [edi + 0xb0]
push 0
push str.dat_sack.png
push dword [eax + 0x2a3d8]
call fcn.00463fc0
mov eax, dword [0x6192d0]
sub esp, 0xc
mov ecx, dword [edi + 0xb0]
mov dword [esp + 8], 0x3b656042
mov dword [esp + 4], 0x3b656042
mov dword [esp], 0x3b656042
push dword [eax + 0x2a3d8]
call fcn.00464e30
push 0x174
call fcn.00554883
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0xf
test eax, eax
je 0x4a1a6b
mov ecx, eax
call fcn.00461cc0
mov ecx, eax
jmp 0x4a1a6d
xor ecx, ecx
mov dword [edi + 0x118], ecx
mov eax, dword [0x6192d0]
push str.dat_bomb.ase
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00463520
mov eax, dword [0x6192d0]
mov ecx, dword [edi + 0x118]
push 0
push str.dat_bomb.png
push dword [eax + 0x2a3d8]
call fcn.00463fc0
mov eax, dword [0x6192d0]
sub esp, 0xc
mov ecx, dword [edi + 0x118]
mov dword [esp + 8], 0x3b449ba6
mov dword [esp + 4], 0x3b449ba6
mov dword [esp], 0x3b449ba6
push dword [eax + 0x2a3d8]
call fcn.00464e30
push 0x174
call fcn.00554883
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0x10
test eax, eax
je 0x4a1b05
mov ecx, eax
call fcn.00461cc0
mov ecx, eax
jmp 0x4a1b07
xor ecx, ecx
mov dword [edi + 0x11c], ecx
mov eax, dword [0x6192d0]
push str.dat_bomb.ase
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00463520
mov eax, dword [0x6192d0]
mov ecx, dword [edi + 0x11c]
push 0
push str.dat_bomb.png
push dword [eax + 0x2a3d8]
call fcn.00463fc0
mov eax, dword [0x6192d0]
sub esp, 0xc
mov ecx, dword [edi + 0x11c]
mov dword [esp + 8], 0x3be56042
mov dword [esp + 4], 0x3be56042
mov dword [esp], 0x3be56042
push dword [eax + 0x2a3d8]
call fcn.00464e30
push 0x174
call fcn.00554883
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0x11
test eax, eax
je 0x4a1b9f
mov ecx, eax
call fcn.00461cc0
mov ecx, eax
jmp 0x4a1ba1
xor ecx, ecx
mov dword [edi + 0xd4], ecx
mov eax, dword [0x6192d0]
push str.dat_tree1.ase
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00463520
mov eax, dword [0x6192d0]
mov ecx, dword [edi + 0xd4]
push 1
push str.dat_f_tree.png
push dword [eax + 0x2a3d8]
call fcn.00463fc0
mov eax, dword [0x6192d0]
sub esp, 0xc
mov ecx, dword [edi + 0xd4]
mov dword [esp + 8], 0x3cf5c28f
mov dword [esp + 4], 0x3cf5c28f
mov dword [esp], 0x3cf5c28f
push dword [eax + 0x2a3d8]
call fcn.00464e30
push 0x174
call fcn.00554883
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0x12
test eax, eax
je 0x4a1c39
mov ecx, eax
call fcn.00461cc0
mov ecx, eax
jmp 0x4a1c3b
xor ecx, ecx
mov dword [edi + 0xe4], ecx
mov eax, dword [0x6192d0]
push str.dat_tower.ase
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00463520
mov eax, dword [0x6192d0]
mov ecx, dword [edi + 0xe4]
push 1
push str.dat_tower.png
push dword [eax + 0x2a3d8]
call fcn.00463fc0
mov eax, dword [0x6192d0]
sub esp, 0xc
mov ecx, dword [edi + 0xe4]
mov dword [esp + 8], 0x3be56042
mov dword [esp + 4], 0x3ba3d70a
mov dword [esp], 0x3be56042
push dword [eax + 0x2a3d8]
call fcn.00464e30
push 0x174
call fcn.00554883
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0x13
test eax, eax
je 0x4a1cd3
mov ecx, eax
call fcn.00461cc0
mov ecx, eax
jmp 0x4a1cd5
xor ecx, ecx
mov dword [edi + 0x110], ecx
mov eax, dword [0x6192d0]
push str.dat_rop_tower.ase
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00463520
mov eax, dword [0x6192d0]
mov ecx, dword [edi + 0x110]
push 0
push str.dat_rop_tower.png
push dword [eax + 0x2a3d8]
call fcn.00463fc0
mov eax, dword [0x6192d0]
sub esp, 0xc
mov ecx, dword [edi + 0x110]
mov dword [esp + 8], 0x3be56042
mov dword [esp + 4], 0x3ba3d70a
mov dword [esp], 0x3be56042
push dword [eax + 0x2a3d8]
call fcn.00464e30
push 0x174
call fcn.00554883
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0x14
test eax, eax
je 0x4a1d6d
mov ecx, eax
call fcn.00461cc0
mov ecx, eax
jmp 0x4a1d6f
xor ecx, ecx
mov dword [edi + 0xb4], ecx
mov eax, dword [0x6192d0]
push str.datcave.MEC
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00462fd0
mov eax, dword [0x6192d0]
mov ecx, dword [edi + 0xb4]
push 0
push str.datcave.png
push dword [eax + 0x2a3d8]
call fcn.00463fc0
push 0x174
call fcn.00554883
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0x15
test eax, eax
je 0x4a1dd7
mov ecx, eax
call fcn.00461cc0
mov ecx, eax
jmp 0x4a1dd9
xor ecx, ecx
mov dword [edi + 0xb8], ecx
mov eax, dword [0x6192d0]
push str.datcave2.MEC
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00462fd0
mov eax, dword [0x6192d0]
mov ecx, dword [edi + 0xb8]
push 0
push str.datcave.png
push dword [eax + 0x2a3d8]
call fcn.00463fc0
call fcn.004f2230
push 0x174
call fcn.00554883
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0x16
test eax, eax
je 0x4a1e46
mov ecx, eax
call fcn.00461cc0
mov ecx, eax
jmp 0x4a1e48
xor ecx, ecx
mov dword [edi + 0xbc], ecx
mov eax, dword [0x6192d0]
push str.datcave.MEC
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00462fd0
mov eax, dword [0x6192d0]
mov ecx, dword [edi + 0xbc]
push 0
push str.datcaveRed.png
push dword [eax + 0x2a3d8]
call fcn.00463fc0
push 0x174
call fcn.00554883
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0x17
test eax, eax
je 0x4a1eb0
mov ecx, eax
call fcn.00461cc0
mov ecx, eax
jmp 0x4a1eb2
xor ecx, ecx
mov dword [edi + 0xc0], ecx
mov eax, dword [0x6192d0]
push str.datcave2.MEC
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00462fd0
mov eax, dword [0x6192d0]
mov ecx, dword [edi + 0xc0]
push 0
push str.datcaveRed.png
push dword [eax + 0x2a3d8]
call fcn.00463fc0
push 0x174
call fcn.00554883
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0x18
test eax, eax
je 0x4a1f1a
mov ecx, eax
call fcn.00461cc0
mov ecx, eax
jmp 0x4a1f1c
xor ecx, ecx
mov dword [edi + 0xc4], ecx
mov eax, dword [0x6192d0]
push str.datcave.MEC
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00462fd0
mov eax, dword [0x6192d0]
mov ecx, dword [edi + 0xc4]
push 0
push str.datcaveBlack.png
push dword [eax + 0x2a3d8]
call fcn.00463fc0
push 0x174
call fcn.00554883
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0x19
test eax, eax
je 0x4a1f84
mov ecx, eax
call fcn.00461cc0
mov ecx, eax
jmp 0x4a1f86
xor ecx, ecx
mov dword [edi + 0xc8], ecx
mov eax, dword [0x6192d0]
push str.dat_standin_box.ASE
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00463520
mov eax, dword [0x6192d0]
mov ecx, dword [edi + 0xc8]
push 0
push str.dat_bladeMetal.png
push dword [eax + 0x2a3d8]
call fcn.00463fc0
mov eax, dword [0x6192d0]
sub esp, 0xc
mov ecx, dword [edi + 0xc8]
mov dword [esp + 8], 0x3ba3d70a
mov dword [esp + 4], 0x3ba3d70a
mov dword [esp], 0x3ba3d70a
push dword [eax + 0x2a3d8]
call fcn.00464e30
push 0x174
call fcn.00554883
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0x1a
test eax, eax
je 0x4a201e
mov ecx, eax
call fcn.00461cc0
mov ecx, eax
jmp 0x4a2020
xor ecx, ecx
mov dword [edi + 0xcc], ecx
mov eax, dword [0x6192d0]
push str.datchestClosed.ase
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00463520
mov eax, dword [0x6192d0]
sub esp, 0xc
mov ecx, dword [edi + 0xcc]
mov dword [esp + 8], 0x3b83126f
mov dword [esp + 4], 0x3b83126f
mov dword [esp], 0x3b83126f
push dword [eax + 0x2a3d8]
call fcn.00464e30
mov eax, dword [0x6192d0]
mov ecx, dword [edi + 0xcc]
push 0
push str.datchest.png
push dword [eax + 0x2a3d8]
call fcn.00463fc0
push 0x174
call fcn.00554883
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0x1b
test eax, eax
je 0x4a20b8
mov ecx, eax
call fcn.00461cc0
mov ecx, eax
jmp 0x4a20ba
xor ecx, ecx
mov dword [edi + 0xd0], ecx
mov eax, dword [0x6192d0]
push str.datchestOpen.ase
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00463520
mov eax, dword [0x6192d0]
sub esp, 0xc
mov ecx, dword [edi + 0xd0]
mov dword [esp + 8], 0x3b83126f
mov dword [esp + 4], 0x3b83126f
mov dword [esp], 0x3b83126f
push dword [eax + 0x2a3d8]
call fcn.00464e30
mov eax, dword [0x6192d0]
mov ecx, dword [edi + 0xd0]
push 0
push str.datchest.png
push dword [eax + 0x2a3d8]
call fcn.00463fc0
call fcn.004f2230
mov dword [ebp - 0x414], 0
lea ebx, [edi + 0xe8]
mov esi, str.BEAR
push 0x174
call fcn.00554883
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x1c
test eax, eax
je 0x4a216c
mov ecx, eax
call fcn.00461cc0
mov ecx, eax
jmp 0x4a216e
xor ecx, ecx
mov dword [ebx], ecx
mov eax, dword [0x6192d0]
push str.dat_token.MEC
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00462fd0
cmp eax, 0x7c36e076
je 0x4a21a0
cmp dword [edi + 0x29c], 0
je 0x4a2e85
cmp dword [ebp - 0x414], 9
lea eax, [ebp - 0x410]
jge 0x4a21c0
push esi
push str.dat_token__s.png
push eax
call fcn.0044c680
add esp, 0xc
jmp 0x4a21ce
push str.dat_token_ctf.png
push eax
call fcn.0044c680
add esp, 8
mov ecx, dword [ebx]
lea eax, [ebp - 0x410]
push 0
push eax
mov eax, dword [0x6192d0]
push dword [eax + 0x2a3d8]
call fcn.00463fc0
inc dword [ebp - 0x414]
add esi, 0xc
add ebx, 4
cmp esi, 0x5fd60c
jle 0x4a2143
movsd xmm0, qword [0x5c19e8]
sub esp, 8
movsd qword [esp], xmm0
call fcn.0044d140
fstp dword [ebp - 0x414]
movss xmm0, dword [ebp - 0x414]
movss dword [edi + 0x1f4], xmm0
movss dword [edi + 0x1f0], xmm0
call fcn.004f2230
mov eax, dword [edi + 0x154]
mov dword [edi + 0x208], 0
mov ecx, dword [eax + 0x10c]
imul ecx, dword [eax + 0x108]
push ecx
call fcn.00554c77
mov dword [edi + 0x16c], eax
add esp, 0xc
mov eax, dword [edi + 0x154]
xor edx, edx
mov ecx, dword [eax + 0x10c]
imul ecx, dword [eax + 0x108]
test ecx, ecx
jle 0x4a22a2
nop
mov eax, dword [edi + 0x16c]
mov byte [edx + eax], 0
inc edx
mov eax, dword [edi + 0x154]
mov ecx, dword [eax + 0x10c]
imul ecx, dword [eax + 0x108]
cmp edx, ecx
jl 0x4a2280
push 0x58
mov dword [edi + 0x14], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x27c], 0
mov dword [edi + 0x288], 0
mov dword [edi + 0x40c], 0
call fcn.00554883
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x1d
test eax, eax
je 0x4a2304
push ecx
mov dword [esp], 0x3f19999a
mov ecx, eax
push str.dat_flare_white.png
push 0x12c
call fcn.00518b40
jmp 0x4a2306
xor eax, eax
mov dword [0x619a10], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0x40c90fdb
mov dword [eax + 0x44], 0xbfc90fdb
mov dword [eax + 0x40], 0x3fc90fdb
mov dword [eax + 0x50], 0x42a00000
mov dword [eax + 0x54], 0x42700000
mov dword [eax + 0x4c], 0x3ca3d70a
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3d75c28f
call fcn.004f2230
push 0x58
call fcn.00554883
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x1e
test eax, eax
je 0x4a2385
push ecx
mov dword [esp], 0x3dcccccd
mov ecx, eax
push str.dat_flare_white.png
push 0x258
call fcn.00518b40
jmp 0x4a2387
xor eax, eax
mov dword [0x619a14], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0
mov dword [eax + 0x44], 0x3fc90fdb
mov dword [eax + 0x40], 0x3fc90fdb
mov dword [eax + 0x50], 0x42a00000
mov dword [eax + 0x54], 0x42700000
mov dword [eax + 0x4c], 0x3c23d70a
push 0x58
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3c23d70a
call fcn.00554883
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x1f
test eax, eax
je 0x4a2401
push ecx
mov dword [esp], 0x3d75c28f
mov ecx, eax
push str.dat_flare_white.png
push 0x12c
call fcn.00518b40
jmp 0x4a2403
xor eax, eax
mov dword [0x619a18], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0x40c90fdb
mov dword [eax + 0x44], 0x3f860a92
mov dword [eax + 0x40], 0x3fc90fdb
mov dword [eax + 0x50], 0x41a00000
mov dword [eax + 0x54], 0x40a00000
mov dword [eax + 0x4c], 0x3c23d70a
push 0x58
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3c23d70a
call fcn.00554883
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x20
test eax, eax
je 0x4a247d
push ecx
mov dword [esp], 0x3dcccccd
mov ecx, eax
push str.dat_flare_white.png
push 0x12c
call fcn.00518b40
jmp 0x4a247f
xor eax, eax
mov dword [0x619a1c], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0
mov dword [eax + 0x44], 0xbfc90fdb
mov dword [eax + 0x40], 0xbfc90fdb
mov dword [eax + 0x50], 0x42c80000
mov dword [eax + 0x54], 0x42700000
mov dword [eax + 0x4c], 0x3c83126f
push 0x58
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3c83126f
call fcn.00554883
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x21
test eax, eax
je 0x4a24f6
push ecx
mov dword [esp], 0x3e99999a
mov ecx, eax
push str.dat_flare_white.png
push 0x64
call fcn.00518b40
jmp 0x4a24f8
xor eax, eax
mov dword [0x619a20], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0x40c90fdb
mov dword [eax + 0x44], 0
mov dword [eax + 0x40], 0
mov dword [eax + 0x50], 0x43340000
mov dword [eax + 0x54], 0x43200000
mov dword [eax + 0x4c], 0x3c23d70a
push 0x58
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3ca3d70a
call fcn.00554883
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x22
test eax, eax
je 0x4a256f
push ecx
mov dword [esp], 0x3e19999a
mov ecx, eax
push str.dat_flare_white.png
push 0x64
call fcn.00518b40
jmp 0x4a2571
xor eax, eax
mov dword [0x619a24], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0x40c90fdb
mov dword [eax + 0x44], 0
mov dword [eax + 0x40], 0
mov dword [eax + 0x50], 0x42a00000
mov dword [eax + 0x54], 0x42200000
mov dword [eax + 0x4c], 0x3ca3d70a
push 0x58
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3cf5c28f
call fcn.00554883
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x23
test eax, eax
je 0x4a25eb
push ecx
mov dword [esp], 0x3f800000
mov ecx, eax
push str.dat_flare_white.png
push 0x12c
call fcn.00518b40
jmp 0x4a25ed
xor eax, eax
mov dword [0x619a28], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0x40c90fdb
mov dword [eax + 0x44], 0
mov dword [eax + 0x40], 0x3f490fdb
mov dword [eax + 0x50], 0x43340000
mov dword [eax + 0x54], 0x42c80000
mov dword [eax + 0x4c], 0x3ca3d70a
push 0x58
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3da3d70a
call fcn.00554883
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x24
test eax, eax
je 0x4a2664
push ecx
mov dword [esp], 0x3f666666
mov ecx, eax
push str.datmist1.png
push 0x64
call fcn.00519c00
jmp 0x4a2666
xor eax, eax
mov dword [0x619a2c], eax
mov dword [eax + 0x3c], 0x3f800000
mov dword [eax + 0x38], 0x3f8ccccd
mov dword [eax + 0x44], 0
mov dword [eax + 0x40], 0
mov dword [eax + 0x50], 0x43520000
mov dword [eax + 0x54], 0x43520000
mov dword [eax + 0x4c], 0x3ca3d70a
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3cf5c28f
call fcn.004f2230
push 0x58
call fcn.00554883
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x25
test eax, eax
je 0x4a26e2
push ecx
mov dword [esp], 0
mov ecx, eax
push str.dat_bombFire.png
push 0x64
call fcn.0051bf80
jmp 0x4a26e4
xor eax, eax
mov dword [0x619a30], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0x40c90fdb
mov dword [eax + 0x44], 0xbfc90fdb
mov dword [eax + 0x40], 0x3fc90fdb
mov dword [eax + 0x50], 0x42a00000
mov dword [eax + 0x54], 0x42700000
mov dword [eax + 0x4c], 0x3e4ccccd
push 0x5c
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3ecccccd
call fcn.00554883
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x26
test eax, eax
je 0x4a2765
sub esp, 8
mov ecx, eax
mov dword [esp + 4], 0x3e4ccccd
mov dword [esp], 0x3b449ba6
push str.dat_smoke.png
push 0x64
call fcn.0051d020
jmp 0x4a2767
xor eax, eax
mov dword [0x619a34], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0x3f860a92
mov dword [eax + 0x44], 0xbfc90fdb
mov dword [eax + 0x40], 0x3fc90fdb
mov dword [eax + 0x50], 0x42a00000
mov dword [eax + 0x54], 0x42700000
mov dword [eax + 0x4c], 0x3c23d70a
push 0x70
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3ca3d70a
call fcn.00554883
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x27
test eax, eax
je 0x4a27de
push ecx
mov dword [esp], 0x3dcccccd
mov ecx, eax
push str.dat_flare_white.png
push 0x64
call fcn.0051ad30
jmp 0x4a27e0
xor eax, eax
mov dword [0x619a38], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0
mov dword [eax + 0x44], 0
mov dword [eax + 0x40], 0
mov dword [eax + 0x50], 0x428c0000
mov dword [eax + 0x54], 0x42200000
mov dword [eax + 0x4c], 0
mov dword [eax + 0x48], 0
mov dword [eax + 0x68], 0x3f333333
mov dword [eax + 0x6c], 0x3ecccccd
mov dword [eax + 0x60], 0
mov dword [eax + 0x64], 0
mov dword [eax + 0x58], 0x3d23d70a
push 0x18
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x5c], 0x3cf5c28f
call fcn.00554883
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x28
test eax, eax
je 0x4a2881
push ecx
mov dword [esp], 0x3e99999a
mov ecx, eax
push str.dat_flare_white.png
push 0x1e
call fcn.00521290
jmp 0x4a2883
xor eax, eax
push 0x10
mov dword [ebp - 4], 0xffffffff
mov dword [0x619a3c], eax
call fcn.00554883
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x29
test eax, eax
je 0x4a28b5
push 0x64
mov ecx, eax
call fcn.004f4c20
jmp 0x4a28b7
xor eax, eax
push 0x24
mov dword [ebp - 4], 0xffffffff
mov dword [0x619a40], eax
call fcn.00554883
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x2a
test eax, eax
je 0x4a28f9
push ecx
mov dword [esp], 0x3e4ccccd
mov ecx, eax
push str.datgrass_bill_1.png
push 0xc8
call fcn.0052c320
jmp 0x4a28fb
xor eax, eax
push 0x24
mov dword [ebp - 4], 0xffffffff
mov dword [0x619a44], eax
call fcn.00554883
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x2b
test eax, eax
je 0x4a293d
push ecx
mov dword [esp], 0x3e800000
mov ecx, eax
push str.datgrass_bill_2.png
push 0xc8
call fcn.0052c320
jmp 0x4a293f
xor eax, eax
push 0x24
mov dword [ebp - 4], 0xffffffff
mov dword [0x619a48], eax
call fcn.00554883
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x2c
test eax, eax
je 0x4a2981
push ecx
mov dword [esp], 0x3e99999a
mov ecx, eax
push str.datgrass_bill_3.png
push 0xc8
call fcn.0052c320
jmp 0x4a2983
xor eax, eax
push 0x24
mov dword [ebp - 4], 0xffffffff
mov dword [0x619a4c], eax
call fcn.00554883
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x2d
test eax, eax
je 0x4a29c5
push ecx
mov dword [esp], 0x3e99999a
mov ecx, eax
push str.datgrass_bill_4.png
push 0xc8
call fcn.0052c320
jmp 0x4a29c7
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [0x619a50], eax
call fcn.004f2230
lea eax, [edi + 0x13c]
push eax
mov eax, dword [0x6192d0]
push 0
push 0
push 0xff000000
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
push 0x15
push 0
push 0
push 0
push 0
push str.datmerchant.png
push dword [eax + 0x2a3d8]
call fcn.0040921a
lea eax, [edi + 0x140]
push eax
mov eax, dword [0x6192d0]
push 0
push 0
push 0xff000000
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
push 0x15
push 0
push 0
push 0
push 0
push str.dat_trainer.png
push dword [eax + 0x2a3d8]
call fcn.0040921a
lea eax, [edi + 0x144]
push eax
mov eax, dword [0x6192d0]
push 0
push 0
push 0xff000000
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
push 0x15
push 0
push 0
push 0
push 0
push str.dat_townmage.png
push dword [eax + 0x2a3d8]
call fcn.0040921a
lea eax, [edi + 0x148]
push eax
mov eax, dword [0x6192d0]
push 0
push 0
push 0xff000000
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
push 0x15
push 0
push 0
push 0
push 0
push str.dat_bar_red.png
push dword [eax + 0x2a3d8]
call fcn.0040921a
lea eax, [edi + 0x14c]
push eax
push 0
push 0
push 0xff000000
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
push 0x15
push 0
mov eax, dword [0x6192d0]
push 0
push 0
push 0
push str.dat_bar_green.png
push dword [eax + 0x2a3d8]
call fcn.0040921a
lea eax, [edi + 0x150]
push eax
mov eax, dword [0x6192d0]
push 0
push 0
push 0xff000000
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
push 0x15
push 0
push 0
push 0
push 0
push str.dat_specialDunSky.png
push dword [eax + 0x2a3d8]
call fcn.0040921a
call fcn.004f2230
lea ecx, [edi + 0x430]
call fcn.0046fba0
lea ecx, [edi + 0x464]
call fcn.0051e0e0
push 0x4c
call fcn.00554883
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x2e
test eax, eax
je 0x4a2b5a
push str.dat_footstep1.wav
mov ecx, eax
call fcn.00465f60
jmp 0x4a2b5c
xor eax, eax
push 0x4c
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 0x4dc], eax
call fcn.00554883
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x2f
test eax, eax
je 0x4a2b92
push str.dat_footstep2.wav
mov ecx, eax
call fcn.00465f60
jmp 0x4a2b94
xor eax, eax
push 0x4c
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 0x4e0], eax
call fcn.00554883
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x30
test eax, eax
je 0x4a2bca
push str.dat_footstep3.wav
mov ecx, eax
call fcn.00465f60
jmp 0x4a2bcc
xor eax, eax
push 0x4c
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 0x4e4], eax
call fcn.00554883
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x31
test eax, eax
je 0x4a2c02
push str.dat_footstep4.wav
mov ecx, eax
call fcn.00465f60
jmp 0x4a2c04
xor eax, eax
mov dword [ebp - 4], 0xffffffff
lea ebx, [edi + 0x4ec]
mov dword [edi + 0x4e8], eax
mov esi, 0x5fe9b8
nop dword [eax]
push 0x4c
call fcn.00554883
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x32
test eax, eax
je 0x4a2c45
push esi
mov ecx, eax
call fcn.00465f60
jmp 0x4a2c47
xor eax, eax
mov dword [ebx], eax
add esi, 0x20
add ebx, 4
mov dword [ebp - 4], 0xffffffff
cmp esi, str.datpuff.wav
jl 0x4a2c20
mov esi, str.datpuff.wav
lea ebx, [edi + 0x584]
nop dword [eax]
push 0x4c
call fcn.00554883
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x33
test eax, eax
je 0x4a2c95
push esi
mov ecx, eax
call fcn.00465f60
jmp 0x4a2c97
xor eax, eax
mov dword [ebx], eax
add esi, 0x20
add ebx, 4
mov dword [ebp - 4], 0xffffffff
cmp esi, str.dat_thunder1.wav
jl 0x4a2c70
mov esi, str.dat_thunder1.wav
lea ebx, [edi + 0x5a0]
nop dword [eax]
push 0x4c
call fcn.00554883
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x34
test eax, eax
je 0x4a2ce5
push esi
mov ecx, eax
call fcn.00465f60
jmp 0x4a2ce7
xor eax, eax
mov dword [ebx], eax
add esi, 0x20
add ebx, 4
mov dword [ebp - 4], 0xffffffff
cmp esi, 0x5fef38
jl 0x4a2cc0
push 0x4c
call fcn.00554883
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x35
test eax, eax
je 0x4a2d27
push str.dathurtAv.wav
mov ecx, eax
call fcn.00465f60
jmp 0x4a2d29
xor eax, eax
push 0x4c
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 0x574], eax
call fcn.00554883
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x36
test eax, eax
je 0x4a2d5f
push str.dat_teleport.wav
mov ecx, eax
call fcn.00465f60
jmp 0x4a2d61
xor eax, eax
push 0x4c
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 0x578], eax
call fcn.00554883
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x37
test eax, eax
je 0x4a2d97
push str.datheal.wav
mov ecx, eax
call fcn.00465f60
jmp 0x4a2d99
xor eax, eax
push 0x4c
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 0x57c], eax
call fcn.00554883
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x38
test eax, eax
je 0x4a2dcf
push str.dat_thief.wav
mov ecx, eax
call fcn.00465f60
jmp 0x4a2dd1
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 0x580], eax
call fcn.004f2230
mov dword [edi + 0x5b0], 0x447a0000
mov dword [edi + 0x5bc], 0x447a0000
mov dword [edi + 0x5c8], 0x447a0000
mov dword [edi + 0x5d4], 0x447a0000
mov dword [edi + 0x5e0], 0x447a0000
mov dword [edi + 0x60c], 5
mov dword [edi + 0x420], 0
mov dword [edi + 0x424], 0
mov dword [edi + 0x754], 0x100
mov dword [edi + 0x758], 0x100
mov dword [edi + 0x750], 0
mov dword [edi + 0x74c], 0
call dword [sym.imp.WINMM.dll_timeGetTime]
mov dword [edi + 0x428], eax
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005548c1
mov esp, ebp
pop ebp
ret
call fcn.00588be3
int3