Function at 0x4668e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x543062
mov eax, dword fs:[0]
push eax
sub esp, 0x40c
mov eax, dword [0x5914c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
lea ecx, [edi + 0x224]
mov dword [edi], vtable.BBOClient.0
call fcn.00453160
mov dword [edi + 0x298], 0
mov dword [edi + 0x29c], 0
mov dword [edi + 0x2a0], 0xffffffff
call fcn.004816d0
call fcn.00466560
mov dword [edi + 0x410], 0
mov ecx, edi
mov dword [edi + 0x418], 0
mov eax, dword [0x5939d8]
mov eax, dword [eax + 0x2a68c]
mov dword [eax], 0xbfc90fdb
mov eax, dword [0x5939d8]
mov eax, dword [eax + 0x2a68c]
mov dword [eax + 4], 0xbebd70a4
mov eax, dword [0x5939d8]
mov eax, dword [eax + 0x2a68c]
mov dword [eax + 0xc], 0x43250000
mov eax, dword [0x5939d8]
mov eax, dword [eax + 0x2a68c]
mov dword [eax + 0x10], 0xc2840000
mov eax, dword [0x5939d8]
mov eax, dword [eax + 0x2a68c]
mov dword [eax + 0x14], 0xc2fa0000
call fcn.00473680
push 0x174
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0
test eax, eax
je 0x4669e6
mov ecx, eax
call fcn.0045a070
mov ecx, eax
jmp 0x4669e8
xor ecx, ecx
mov dword [edi + 0xa8], ecx
mov eax, dword [0x5939d8]
push str.dat_skydome.ase
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.0045b960
mov eax, dword [0x5939d8]
mov ecx, dword [edi + 0xa8]
push 0
push str.dat_sky.png
push dword [eax + 0x2a3d8]
call fcn.0045c410
push 0x94074
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 1
test eax, eax
je 0x466a50
mov ecx, eax
call fcn.00486500
mov ecx, eax
jmp 0x466a52
xor ecx, ecx
push 0
mov dword [edi + 0x154], ecx
mov eax, dword [0x5939d8]
push 0x100
push 0x100
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00488500
mov eax, dword [0x5939d8]
mov ecx, dword [edi + 0x154]
push str.datgrassfull.png
push dword [eax + 0x2a3d8]
call fcn.0048af00
mov ecx, dword [edi + 0x154]
call fcn.004872b0
call fcn.004816d0
push 0x14
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 2
test eax, eax
je 0x466ad0
push dword [edi + 0x154]
mov ecx, eax
call fcn.00477aa0
jmp 0x466ad2
xor eax, eax
mov dword [edi + 0x15c], eax
mov dword [0x59415c], 0
mov dword [edi + 0x294], 0
mov dword [edi + 0x284], 0
mov dword [edi + 0x280], 0
mov dword [edi + 0x290], 0
mov dword [0x594160], 0
mov dword [0x594164], 0
mov dword [0x594168], 0
push 8
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 0x20c], 0xffffffff
mov dword [edi + 0x160], 0
mov dword [edi + 0x164], 0
mov dword [edi + 0x168], 0
mov dword [edi + 0x28c], 0
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 3
test eax, eax
je 0x466b85
mov ecx, eax
call fcn.00483950
jmp 0x466b87
xor eax, eax
push 0x4d8
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 4], eax
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 4
test eax, eax
je 0x466bbf
push str.PLAYER
push 0
mov ecx, eax
call fcn.00475e90
jmp 0x466bc1
xor eax, eax
mov ecx, dword [edi + 4]
push eax
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 0xc], eax
mov dword [edi + 8], eax
call fcn.00483aa0
mov ecx, eax
mov eax, dword [edi + 8]
mov dword [eax + 0x170], ecx
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push eax
push dword [eax + 0x170]
call fcn.00483a80
mov esi, eax
mov eax, dword [edi + 8]
mov dword [eax + 0x168], 0x28
mov eax, dword [edi + 8]
mov dword [eax + 0x164], 0x28
mov eax, dword [edi + 8]
mov dword [eax + 0x108], 0
mov eax, dword [edi + 8]
mov dword [eax + 0x10c], 0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 0x154]
push dword [eax + 0x164]
call fcn.0048a5f0
mov eax, dword [edi + 8]
fstp dword [eax + 0x114]
mov eax, dword [edi + 8]
mov ecx, dword [edi + 0x154]
push dword [eax + 0x168]
call fcn.0048a700
mov eax, dword [edi + 8]
sub esp, 8
mov ecx, edi
fstp dword [eax + 0x11c]
mov eax, dword [edi + 8]
movss xmm0, dword [eax + 0x11c]
movss dword [esp + 4], xmm0
movss xmm0, dword [eax + 0x114]
movss dword [esp], xmm0
call fcn.00472700
mov eax, dword [edi + 8]
fstp dword [ebp - 0x414]
movss xmm0, dword [ebp - 0x414]
push 0x10
movss dword [eax + 0x118], xmm0
mov eax, dword [edi + 8]
mov dword [edi + 0x1f8], 0xbea3d70a
movss xmm0, dword [eax + 0x108]
movss dword [esi + 0x118], xmm0
movss dword [esi + 0x11c], xmm0
mov dword [esi + 0x120], 0x3e75c28f
mov dword [esi + 0x124], 0x3e567750
mov eax, dword [edi + 8]
movss xmm0, dword [eax + 0x114]
movss dword [esi + 0x110], xmm0
movss dword [esi + 0x108], xmm0
mov eax, dword [edi + 8]
movss xmm0, dword [eax + 0x11c]
movss dword [esi + 0x114], xmm0
movss dword [esi + 0x10c], xmm0
mov dword [esi + 0x128], 0x3e99999a
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 5
test eax, eax
je 0x466d42
mov ecx, eax
call fcn.00449ec0
jmp 0x466d44
xor eax, eax
push 0x10
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 0x18], eax
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 6
test eax, eax
je 0x466d72
mov ecx, eax
call fcn.00449ec0
jmp 0x466d74
xor eax, eax
push 0x174
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 0x1c], eax
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 7
test eax, eax
je 0x466dae
push str.AVATAR_STAND
push 1
mov ecx, eax
call fcn.00456080
mov ecx, eax
jmp 0x466db0
xor ecx, ecx
mov dword [edi + 0x120], ecx
mov eax, dword [0x5939d8]
push 0xffffffffffffffff
push str.dat_avatar_stand.anc
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00456e80
mov eax, dword [0x5939d8]
mov ecx, dword [edi + 0x120]
push dword [eax + 0x2a3d8]
call fcn.004568f0
mov ecx, dword [edi + 0x120]
mov esi, eax
mov eax, dword [0x5939d8]
push esi
push 0
push dword [eax + 0x2a3d8]
call fcn.00459110
mov eax, dword [0x5939d8]
sub esp, 0xc
mov ecx, dword [edi + 0x120]
mov dword [esp + 8], 0
mov dword [esp + 4], 0xbdcccccd
mov dword [esp], 0
push 0
push dword [eax + 0x2a3d8]
call fcn.00456310
push 0x174
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 8
test eax, eax
je 0x466e67
push str.AVATAR_RUN
push 1
mov ecx, eax
call fcn.00456080
mov ecx, eax
jmp 0x466e69
xor ecx, ecx
mov dword [edi + 0x124], ecx
mov eax, dword [0x5939d8]
push 0xffffffffffffffff
push str.dat_avatar_run.anc
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00456e80
mov eax, dword [0x5939d8]
mov ecx, dword [edi + 0x124]
push esi
push 0
push dword [eax + 0x2a3d8]
call fcn.00459110
mov eax, dword [0x5939d8]
sub esp, 0xc
mov ecx, dword [edi + 0x124]
mov dword [esp + 8], 0
mov dword [esp + 4], 0xbdcccccd
mov dword [esp], 0
push 0
push dword [eax + 0x2a3d8]
call fcn.00456310
call fcn.004816d0
push 0x174
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 9
test eax, eax
je 0x466f0d
push str.AVATAR_ATTACK
push 1
mov ecx, eax
call fcn.00456080
mov ecx, eax
jmp 0x466f0f
xor ecx, ecx
mov dword [edi + 0x128], ecx
mov eax, dword [0x5939d8]
push 0xffffffffffffffff
push str.dat_avatar_attack.anc
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00456e80
mov eax, dword [0x5939d8]
mov ecx, dword [edi + 0x128]
push esi
push 0
push dword [eax + 0x2a3d8]
call fcn.00459110
mov eax, dword [0x5939d8]
sub esp, 0xc
mov ecx, dword [edi + 0x128]
mov dword [esp + 8], 0
mov dword [esp + 4], 0xbdcccccd
mov dword [esp], 0
push 0
push dword [eax + 0x2a3d8]
call fcn.00456310
push 0x174
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0xa
test eax, eax
je 0x466fae
push str.AVATAR_ATTACK2
push 1
mov ecx, eax
call fcn.00456080
mov ecx, eax
jmp 0x466fb0
xor ecx, ecx
mov dword [edi + 0x12c], ecx
mov eax, dword [0x5939d8]
push 0xffffffffffffffff
push str.dat_avatar_attack2.anc
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00456e80
mov eax, dword [0x5939d8]
mov ecx, dword [edi + 0x12c]
push esi
push 0
push dword [eax + 0x2a3d8]
call fcn.00459110
mov eax, dword [0x5939d8]
sub esp, 0xc
mov ecx, dword [edi + 0x12c]
mov dword [esp + 8], 0
mov dword [esp + 4], 0xbdcccccd
mov dword [esp], 0
push 0
push dword [eax + 0x2a3d8]
call fcn.00456310
push 0x174
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0xb
test eax, eax
je 0x46704f
push str.MERCHANT_ANIM
push 1
mov ecx, eax
call fcn.00456080
mov ecx, eax
jmp 0x467051
xor ecx, ecx
mov dword [edi + 0x130], ecx
mov eax, dword [0x5939d8]
push 0xffffffffffffffff
push str.datmerchant.anc
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00456e80
push 0x174
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0xc
test eax, eax
je 0x4670a5
push str.WITCHSTAND_ANIM
push 1
mov ecx, eax
call fcn.00456080
mov ecx, eax
jmp 0x4670a7
xor ecx, ecx
mov dword [edi + 0x134], ecx
mov eax, dword [0x5939d8]
push 0xffffffffffffffff
push str.datwitch_idle.anc
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00456e80
mov eax, dword [0x5939d8]
mov ecx, dword [edi + 0x134]
push 0
push str.datwitch.PNG
push dword [eax + 0x2a3d8]
call fcn.00457ec0
push 0x174
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0xd
test eax, eax
je 0x467118
push str.WITCHTALK_ANIM
push 1
mov ecx, eax
call fcn.00456080
mov ecx, eax
jmp 0x46711a
xor ecx, ecx
mov dword [edi + 0x138], ecx
mov eax, dword [0x5939d8]
push 0xffffffffffffffff
push str.datwitch_talk.anc
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00456e80
mov eax, dword [0x5939d8]
mov ecx, dword [edi + 0x138]
push 0
push str.datwitch.PNG
push dword [eax + 0x2a3d8]
call fcn.00457ec0
mov dword [edi + 0x220], 0
call fcn.004816d0
push 0x174
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0xe
test eax, eax
je 0x467193
mov ecx, eax
call fcn.0045a070
mov ecx, eax
jmp 0x467195
xor ecx, ecx
mov dword [edi + 0xb0], ecx
mov eax, dword [0x5939d8]
push str.dat_sack.ase
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.0045b960
mov eax, dword [0x5939d8]
mov ecx, dword [edi + 0xb0]
push 0
push str.dat_sack.png
push dword [eax + 0x2a3d8]
call fcn.0045c410
mov eax, dword [0x5939d8]
sub esp, 0xc
mov ecx, dword [edi + 0xb0]
mov dword [esp + 8], 0x3b656042
mov dword [esp + 4], 0x3b656042
mov dword [esp], 0x3b656042
push dword [eax + 0x2a3d8]
call fcn.0045d290
push 0x174
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0xf
test eax, eax
je 0x46722d
mov ecx, eax
call fcn.0045a070
mov ecx, eax
jmp 0x46722f
xor ecx, ecx
mov dword [edi + 0x118], ecx
mov eax, dword [0x5939d8]
push str.dat_bomb.ase
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.0045b960
mov eax, dword [0x5939d8]
mov ecx, dword [edi + 0x118]
push 0
push str.dat_bomb.png
push dword [eax + 0x2a3d8]
call fcn.0045c410
mov eax, dword [0x5939d8]
sub esp, 0xc
mov ecx, dword [edi + 0x118]
mov dword [esp + 8], 0x3b449ba6
mov dword [esp + 4], 0x3b449ba6
mov dword [esp], 0x3b449ba6
push dword [eax + 0x2a3d8]
call fcn.0045d290
push 0x174
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0x10
test eax, eax
je 0x4672c7
mov ecx, eax
call fcn.0045a070
mov ecx, eax
jmp 0x4672c9
xor ecx, ecx
mov dword [edi + 0x11c], ecx
mov eax, dword [0x5939d8]
push str.dat_bomb.ase
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.0045b960
mov eax, dword [0x5939d8]
mov ecx, dword [edi + 0x11c]
push 0
push str.dat_bomb.png
push dword [eax + 0x2a3d8]
call fcn.0045c410
mov eax, dword [0x5939d8]
sub esp, 0xc
mov ecx, dword [edi + 0x11c]
mov dword [esp + 8], 0x3be56042
mov dword [esp + 4], 0x3be56042
mov dword [esp], 0x3be56042
push dword [eax + 0x2a3d8]
call fcn.0045d290
push 0x174
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0x11
test eax, eax
je 0x467361
mov ecx, eax
call fcn.0045a070
mov ecx, eax
jmp 0x467363
xor ecx, ecx
mov dword [edi + 0xd4], ecx
mov eax, dword [0x5939d8]
push str.dat_tree1.ase
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.0045b960
mov eax, dword [0x5939d8]
mov ecx, dword [edi + 0xd4]
push 1
push str.dat_f_tree.png
push dword [eax + 0x2a3d8]
call fcn.0045c410
mov eax, dword [0x5939d8]
sub esp, 0xc
mov ecx, dword [edi + 0xd4]
mov dword [esp + 8], 0x3cf5c28f
mov dword [esp + 4], 0x3cf5c28f
mov dword [esp], 0x3cf5c28f
push dword [eax + 0x2a3d8]
call fcn.0045d290
push 0x174
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0x12
test eax, eax
je 0x4673fb
mov ecx, eax
call fcn.0045a070
mov ecx, eax
jmp 0x4673fd
xor ecx, ecx
mov dword [edi + 0xe4], ecx
mov eax, dword [0x5939d8]
push str.dat_tower.ase
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.0045b960
mov eax, dword [0x5939d8]
mov ecx, dword [edi + 0xe4]
push 1
push str.dat_tower.png
push dword [eax + 0x2a3d8]
call fcn.0045c410
mov eax, dword [0x5939d8]
sub esp, 0xc
mov ecx, dword [edi + 0xe4]
mov dword [esp + 8], 0x3be56042
mov dword [esp + 4], 0x3ba3d70a
mov dword [esp], 0x3be56042
push dword [eax + 0x2a3d8]
call fcn.0045d290
push 0x174
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0x13
test eax, eax
je 0x467495
mov ecx, eax
call fcn.0045a070
mov ecx, eax
jmp 0x467497
xor ecx, ecx
mov dword [edi + 0x110], ecx
mov eax, dword [0x5939d8]
push str.dat_rop_tower.ase
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.0045b960
mov eax, dword [0x5939d8]
mov ecx, dword [edi + 0x110]
push 0
push str.dat_rop_tower.png
push dword [eax + 0x2a3d8]
call fcn.0045c410
mov eax, dword [0x5939d8]
sub esp, 0xc
mov ecx, dword [edi + 0x110]
mov dword [esp + 8], 0x3be56042
mov dword [esp + 4], 0x3ba3d70a
mov dword [esp], 0x3be56042
push dword [eax + 0x2a3d8]
call fcn.0045d290
push 0x174
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0x14
test eax, eax
je 0x46752f
mov ecx, eax
call fcn.0045a070
mov ecx, eax
jmp 0x467531
xor ecx, ecx
mov dword [edi + 0xb4], ecx
mov eax, dword [0x5939d8]
push str.datcave.MEC
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.0045b430
mov eax, dword [0x5939d8]
mov ecx, dword [edi + 0xb4]
push 0
push str.datcave.png
push dword [eax + 0x2a3d8]
call fcn.0045c410
push 0x174
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0x15
test eax, eax
je 0x467599
mov ecx, eax
call fcn.0045a070
mov ecx, eax
jmp 0x46759b
xor ecx, ecx
mov dword [edi + 0xb8], ecx
mov eax, dword [0x5939d8]
push str.datcave2.MEC
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.0045b430
mov eax, dword [0x5939d8]
mov ecx, dword [edi + 0xb8]
push 0
push str.datcave.png
push dword [eax + 0x2a3d8]
call fcn.0045c410
call fcn.004816d0
push 0x174
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0x16
test eax, eax
je 0x467608
mov ecx, eax
call fcn.0045a070
mov ecx, eax
jmp 0x46760a
xor ecx, ecx
mov dword [edi + 0xbc], ecx
mov eax, dword [0x5939d8]
push str.datcave.MEC
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.0045b430
mov eax, dword [0x5939d8]
mov ecx, dword [edi + 0xbc]
push 0
push str.datcaveRed.png
push dword [eax + 0x2a3d8]
call fcn.0045c410
push 0x174
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0x17
test eax, eax
je 0x467672
mov ecx, eax
call fcn.0045a070
mov ecx, eax
jmp 0x467674
xor ecx, ecx
mov dword [edi + 0xc0], ecx
mov eax, dword [0x5939d8]
push str.datcave2.MEC
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.0045b430
mov eax, dword [0x5939d8]
mov ecx, dword [edi + 0xc0]
push 0
push str.datcaveRed.png
push dword [eax + 0x2a3d8]
call fcn.0045c410
push 0x174
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0x18
test eax, eax
je 0x4676dc
mov ecx, eax
call fcn.0045a070
mov ecx, eax
jmp 0x4676de
xor ecx, ecx
mov dword [edi + 0xc4], ecx
mov eax, dword [0x5939d8]
push str.datcave.MEC
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.0045b430
mov eax, dword [0x5939d8]
mov ecx, dword [edi + 0xc4]
push 0
push str.datcaveBlack.png
push dword [eax + 0x2a3d8]
call fcn.0045c410
push 0x174
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0x19
test eax, eax
je 0x467746
mov ecx, eax
call fcn.0045a070
mov ecx, eax
jmp 0x467748
xor ecx, ecx
mov dword [edi + 0xc8], ecx
mov eax, dword [0x5939d8]
push str.dat_standin_box.ASE
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.0045b960
mov eax, dword [0x5939d8]
mov ecx, dword [edi + 0xc8]
push 0
push str.dat_bladeMetal.png
push dword [eax + 0x2a3d8]
call fcn.0045c410
mov eax, dword [0x5939d8]
sub esp, 0xc
mov ecx, dword [edi + 0xc8]
mov dword [esp + 8], 0x3ba3d70a
mov dword [esp + 4], 0x3ba3d70a
mov dword [esp], 0x3ba3d70a
push dword [eax + 0x2a3d8]
call fcn.0045d290
push 0x174
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0x1a
test eax, eax
je 0x4677e0
mov ecx, eax
call fcn.0045a070
mov ecx, eax
jmp 0x4677e2
xor ecx, ecx
mov dword [edi + 0xcc], ecx
mov eax, dword [0x5939d8]
push str.datchestClosed.ase
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.0045b960
mov eax, dword [0x5939d8]
sub esp, 0xc
mov ecx, dword [edi + 0xcc]
mov dword [esp + 8], 0x3b83126f
mov dword [esp + 4], 0x3b83126f
mov dword [esp], 0x3b83126f
push dword [eax + 0x2a3d8]
call fcn.0045d290
mov eax, dword [0x5939d8]
mov ecx, dword [edi + 0xcc]
push 0
push str.datchest.png
push dword [eax + 0x2a3d8]
call fcn.0045c410
push 0x174
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0x1b
test eax, eax
je 0x46787a
mov ecx, eax
call fcn.0045a070
mov ecx, eax
jmp 0x46787c
xor ecx, ecx
mov dword [edi + 0xd0], ecx
mov eax, dword [0x5939d8]
push str.datchestOpen.ase
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.0045b960
mov eax, dword [0x5939d8]
sub esp, 0xc
mov ecx, dword [edi + 0xd0]
mov dword [esp + 8], 0x3b83126f
mov dword [esp + 4], 0x3b83126f
mov dword [esp], 0x3b83126f
push dword [eax + 0x2a3d8]
call fcn.0045d290
mov eax, dword [0x5939d8]
mov ecx, dword [edi + 0xd0]
push 0
push str.datchest.png
push dword [eax + 0x2a3d8]
call fcn.0045c410
call fcn.004816d0
mov dword [ebp - 0x414], 0
lea ebx, [edi + 0xe8]
mov esi, str.BEAR
push 0x174
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x1c
test eax, eax
je 0x46792e
mov ecx, eax
call fcn.0045a070
mov ecx, eax
jmp 0x467930
xor ecx, ecx
mov dword [ebx], ecx
mov eax, dword [0x5939d8]
push str.dat_token.MEC
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.0045b430
cmp eax, 0x7c36e076
je 0x467962
cmp dword [edi + 0x29c], 0
je 0x468645
cmp dword [ebp - 0x414], 9
lea eax, [ebp - 0x410]
jge 0x467982
push esi
push str.dat_token__s.png
push eax
call fcn.00448d60
add esp, 0xc
jmp 0x467990
push str.dat_token_ctf.png
push eax
call fcn.00448d60
add esp, 8
mov ecx, dword [ebx]
lea eax, [ebp - 0x410]
push 0
push eax
mov eax, dword [0x5939d8]
push dword [eax + 0x2a3d8]
call fcn.0045c410
inc dword [ebp - 0x414]
add esi, 0xc
add ebx, 4
cmp esi, 0x57bf74
jle 0x467905
movsd xmm0, qword [0x54dfc0]
sub esp, 8
movsd qword [esp], xmm0
call fcn.00449820
fstp dword [ebp - 0x414]
movss xmm0, dword [ebp - 0x414]
movss dword [edi + 0x1f4], xmm0
movss dword [edi + 0x1f0], xmm0
call fcn.004816d0
mov eax, dword [edi + 0x154]
mov dword [edi + 0x208], 0
mov ecx, dword [eax + 0x10c]
imul ecx, dword [eax + 0x108]
push ecx
call fcn.004b31f7
mov dword [edi + 0x16c], eax
add esp, 0xc
mov eax, dword [edi + 0x154]
xor edx, edx
mov ecx, dword [eax + 0x10c]
imul ecx, dword [eax + 0x108]
test ecx, ecx
jle 0x467a62
mov eax, dword [edi + 0x16c]
mov byte [edx + eax], 0
inc edx
mov eax, dword [edi + 0x154]
mov ecx, dword [eax + 0x10c]
imul ecx, dword [eax + 0x108]
cmp edx, ecx
jl 0x467a40
push 0x58
mov dword [edi + 0x14], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x27c], 0
mov dword [edi + 0x288], 0
mov dword [edi + 0x40c], 0
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x1d
test eax, eax
je 0x467ac4
push ecx
mov dword [esp], 0x3f19999a
mov ecx, eax
push str.dat_flare_white.png
push 0x12c
call fcn.004a2db0
jmp 0x467ac6
xor eax, eax
mov dword [0x594114], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0x40c90fdb
mov dword [eax + 0x44], 0xbfc90fdb
mov dword [eax + 0x40], 0x3fc90fdb
mov dword [eax + 0x50], 0x42a00000
mov dword [eax + 0x54], 0x42700000
mov dword [eax + 0x4c], 0x3ca3d70a
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3d75c28f
call fcn.004816d0
push 0x58
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x1e
test eax, eax
je 0x467b45
push ecx
mov dword [esp], 0x3dcccccd
mov ecx, eax
push str.dat_flare_white.png
push 0x258
call fcn.004a2db0
jmp 0x467b47
xor eax, eax
mov dword [0x594118], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0
mov dword [eax + 0x44], 0x3fc90fdb
mov dword [eax + 0x40], 0x3fc90fdb
mov dword [eax + 0x50], 0x42a00000
mov dword [eax + 0x54], 0x42700000
mov dword [eax + 0x4c], 0x3c23d70a
push 0x58
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3c23d70a
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x1f
test eax, eax
je 0x467bc1
push ecx
mov dword [esp], 0x3d75c28f
mov ecx, eax
push str.dat_flare_white.png
push 0x12c
call fcn.004a2db0
jmp 0x467bc3
xor eax, eax
mov dword [0x59411c], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0x40c90fdb
mov dword [eax + 0x44], 0x3f860a92
mov dword [eax + 0x40], 0x3fc90fdb
mov dword [eax + 0x50], 0x41a00000
mov dword [eax + 0x54], 0x40a00000
mov dword [eax + 0x4c], 0x3c23d70a
push 0x58
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3c23d70a
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x20
test eax, eax
je 0x467c3d
push ecx
mov dword [esp], 0x3dcccccd
mov ecx, eax
push str.dat_flare_white.png
push 0x12c
call fcn.004a2db0
jmp 0x467c3f
xor eax, eax
mov dword [0x594120], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0
mov dword [eax + 0x44], 0xbfc90fdb
mov dword [eax + 0x40], 0xbfc90fdb
mov dword [eax + 0x50], 0x42c80000
mov dword [eax + 0x54], 0x42700000
mov dword [eax + 0x4c], 0x3c83126f
push 0x58
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3c83126f
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x21
test eax, eax
je 0x467cb6
push ecx
mov dword [esp], 0x3e99999a
mov ecx, eax
push str.dat_flare_white.png
push 0x64
call fcn.004a2db0
jmp 0x467cb8
xor eax, eax
mov dword [0x594124], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0x40c90fdb
mov dword [eax + 0x44], 0
mov dword [eax + 0x40], 0
mov dword [eax + 0x50], 0x43340000
mov dword [eax + 0x54], 0x43200000
mov dword [eax + 0x4c], 0x3c23d70a
push 0x58
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3ca3d70a
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x22
test eax, eax
je 0x467d2f
push ecx
mov dword [esp], 0x3e19999a
mov ecx, eax
push str.dat_flare_white.png
push 0x64
call fcn.004a2db0
jmp 0x467d31
xor eax, eax
mov dword [0x594128], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0x40c90fdb
mov dword [eax + 0x44], 0
mov dword [eax + 0x40], 0
mov dword [eax + 0x50], 0x42a00000
mov dword [eax + 0x54], 0x42200000
mov dword [eax + 0x4c], 0x3ca3d70a
push 0x58
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3cf5c28f
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x23
test eax, eax
je 0x467dab
push ecx
mov dword [esp], 0x3f800000
mov ecx, eax
push str.dat_flare_white.png
push 0x12c
call fcn.004a2db0
jmp 0x467dad
xor eax, eax
mov dword [0x59412c], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0x40c90fdb
mov dword [eax + 0x44], 0
mov dword [eax + 0x40], 0x3f490fdb
mov dword [eax + 0x50], 0x43340000
mov dword [eax + 0x54], 0x42c80000
mov dword [eax + 0x4c], 0x3ca3d70a
push 0x58
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3da3d70a
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x24
test eax, eax
je 0x467e24
push ecx
mov dword [esp], 0x3f666666
mov ecx, eax
push str.datmist1.png
push 0x64
call fcn.004a3e90
jmp 0x467e26
xor eax, eax
mov dword [0x594130], eax
mov dword [eax + 0x3c], 0x3f800000
mov dword [eax + 0x38], 0x3f8ccccd
mov dword [eax + 0x44], 0
mov dword [eax + 0x40], 0
mov dword [eax + 0x50], 0x43520000
mov dword [eax + 0x54], 0x43520000
mov dword [eax + 0x4c], 0x3ca3d70a
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3cf5c28f
call fcn.004816d0
push 0x58
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x25
test eax, eax
je 0x467ea2
push ecx
mov dword [esp], 0
mov ecx, eax
push str.dat_bombFire.png
push 0x64
call fcn.004a6250
jmp 0x467ea4
xor eax, eax
mov dword [0x594134], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0x40c90fdb
mov dword [eax + 0x44], 0xbfc90fdb
mov dword [eax + 0x40], 0x3fc90fdb
mov dword [eax + 0x50], 0x42a00000
mov dword [eax + 0x54], 0x42700000
mov dword [eax + 0x4c], 0x3e4ccccd
push 0x5c
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3ecccccd
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x26
test eax, eax
je 0x467f25
sub esp, 8
mov ecx, eax
mov dword [esp + 4], 0x3e4ccccd
mov dword [esp], 0x3b449ba6
push str.dat_smoke.png
push 0x64
call fcn.004a7300
jmp 0x467f27
xor eax, eax
mov dword [0x594138], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0x3f860a92
mov dword [eax + 0x44], 0xbfc90fdb
mov dword [eax + 0x40], 0x3fc90fdb
mov dword [eax + 0x50], 0x42a00000
mov dword [eax + 0x54], 0x42700000
mov dword [eax + 0x4c], 0x3c23d70a
push 0x70
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3ca3d70a
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x27
test eax, eax
je 0x467f9e
push ecx
mov dword [esp], 0x3dcccccd
mov ecx, eax
push str.dat_flare_white.png
push 0x64
call fcn.004a4fd0
jmp 0x467fa0
xor eax, eax
mov dword [0x59413c], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0
mov dword [eax + 0x44], 0
mov dword [eax + 0x40], 0
mov dword [eax + 0x50], 0x428c0000
mov dword [eax + 0x54], 0x42200000
mov dword [eax + 0x4c], 0
mov dword [eax + 0x48], 0
mov dword [eax + 0x68], 0x3f333333
mov dword [eax + 0x6c], 0x3ecccccd
mov dword [eax + 0x60], 0
mov dword [eax + 0x64], 0
mov dword [eax + 0x58], 0x3d23d70a
push 0x18
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x5c], 0x3cf5c28f
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x28
test eax, eax
je 0x468041
push ecx
mov dword [esp], 0x3e99999a
mov ecx, eax
push str.dat_flare_white.png
push 0x1e
call fcn.004ab590
jmp 0x468043
xor eax, eax
push 0x10
mov dword [ebp - 4], 0xffffffff
mov dword [0x594140], eax
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x29
test eax, eax
je 0x468075
push 0x64
mov ecx, eax
call fcn.00484160
jmp 0x468077
xor eax, eax
push 0x24
mov dword [ebp - 4], 0xffffffff
mov dword [0x594144], eax
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x2a
test eax, eax
je 0x4680b9
push ecx
mov dword [esp], 0x3e4ccccd
mov ecx, eax
push str.datgrass_bill_1.png
push 0xc8
call fcn.004aedc0
jmp 0x4680bb
xor eax, eax
push 0x24
mov dword [ebp - 4], 0xffffffff
mov dword [0x594148], eax
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x2b
test eax, eax
je 0x4680fd
push ecx
mov dword [esp], 0x3e800000
mov ecx, eax
push str.datgrass_bill_2.png
push 0xc8
call fcn.004aedc0
jmp 0x4680ff
xor eax, eax
push 0x24
mov dword [ebp - 4], 0xffffffff
mov dword [0x59414c], eax
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x2c
test eax, eax
je 0x468141
push ecx
mov dword [esp], 0x3e99999a
mov ecx, eax
push str.datgrass_bill_3.png
push 0xc8
call fcn.004aedc0
jmp 0x468143
xor eax, eax
push 0x24
mov dword [ebp - 4], 0xffffffff
mov dword [0x594150], eax
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x2d
test eax, eax
je 0x468185
push ecx
mov dword [esp], 0x3e99999a
mov ecx, eax
push str.datgrass_bill_4.png
push 0xc8
call fcn.004aedc0
jmp 0x468187
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [0x594154], eax
call fcn.004816d0
lea eax, [edi + 0x13c]
push eax
mov eax, dword [0x5939d8]
push 0
push 0
push 0xff000000
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
push 0x15
push 0
push 0
push 0
push 0
push str.datmerchant.png
push dword [eax + 0x2a3d8]
call fcn.0040921a
lea eax, [edi + 0x140]
push eax
mov eax, dword [0x5939d8]
push 0
push 0
push 0xff000000
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
push 0x15
push 0
push 0
push 0
push 0
push str.dat_trainer.png
push dword [eax + 0x2a3d8]
call fcn.0040921a
lea eax, [edi + 0x144]
push eax
mov eax, dword [0x5939d8]
push 0
push 0
push 0xff000000
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
push 0x15
push 0
push 0
push 0
push 0
push str.dat_townmage.png
push dword [eax + 0x2a3d8]
call fcn.0040921a
lea eax, [edi + 0x148]
push eax
mov eax, dword [0x5939d8]
push 0
push 0
push 0xff000000
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
push 0x15
push 0
push 0
push 0
push 0
push str.dat_bar_red.png
push dword [eax + 0x2a3d8]
call fcn.0040921a
lea eax, [edi + 0x14c]
push eax
push 0
push 0
push 0xff000000
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
push 0x15
push 0
mov eax, dword [0x5939d8]
push 0
push 0
push 0
push str.dat_bar_green.png
push dword [eax + 0x2a3d8]
call fcn.0040921a
lea eax, [edi + 0x150]
push eax
mov eax, dword [0x5939d8]
push 0
push 0
push 0xff000000
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
push 0x15
push 0
push 0
push 0
push 0
push str.dat_specialDunSky.png
push dword [eax + 0x2a3d8]
call fcn.0040921a
call fcn.004816d0
lea ecx, [edi + 0x430]
call fcn.00466160
lea ecx, [edi + 0x464]
call fcn.004a83c0
push 0x4c
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x2e
test eax, eax
je 0x46831a
push str.dat_footstep1.wav
mov ecx, eax
call fcn.0045e400
jmp 0x46831c
xor eax, eax
push 0x4c
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 0x4dc], eax
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x2f
test eax, eax
je 0x468352
push str.dat_footstep2.wav
mov ecx, eax
call fcn.0045e400
jmp 0x468354
xor eax, eax
push 0x4c
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 0x4e0], eax
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x30
test eax, eax
je 0x46838a
push str.dat_footstep3.wav
mov ecx, eax
call fcn.0045e400
jmp 0x46838c
xor eax, eax
push 0x4c
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 0x4e4], eax
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x31
test eax, eax
je 0x4683c2
push str.dat_footstep4.wav
mov ecx, eax
call fcn.0045e400
jmp 0x4683c4
xor eax, eax
mov dword [ebp - 4], 0xffffffff
lea ebx, [edi + 0x4ec]
mov dword [edi + 0x4e8], eax
mov esi, 0x57d328
nop dword [eax]
push 0x4c
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x32
test eax, eax
je 0x468405
push esi
mov ecx, eax
call fcn.0045e400
jmp 0x468407
xor eax, eax
mov dword [ebx], eax
add esi, 0x20
add ebx, 4
mov dword [ebp - 4], 0xffffffff
cmp esi, str.datpuff.wav
jl 0x4683e0
mov esi, str.datpuff.wav
lea ebx, [edi + 0x584]
nop dword [eax]
push 0x4c
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x33
test eax, eax
je 0x468455
push esi
mov ecx, eax
call fcn.0045e400
jmp 0x468457
xor eax, eax
mov dword [ebx], eax
add esi, 0x20
add ebx, 4
mov dword [ebp - 4], 0xffffffff
cmp esi, str.dat_thunder1.wav
jl 0x468430
mov esi, str.dat_thunder1.wav
lea ebx, [edi + 0x5a0]
nop dword [eax]
push 0x4c
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x34
test eax, eax
je 0x4684a5
push esi
mov ecx, eax
call fcn.0045e400
jmp 0x4684a7
xor eax, eax
mov dword [ebx], eax
add esi, 0x20
add ebx, 4
mov dword [ebp - 4], 0xffffffff
cmp esi, 0x57d8a8
jl 0x468480
push 0x4c
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x35
test eax, eax
je 0x4684e7
push str.dathurtAv.wav
mov ecx, eax
call fcn.0045e400
jmp 0x4684e9
xor eax, eax
push 0x4c
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 0x574], eax
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x36
test eax, eax
je 0x46851f
push str.dat_teleport.wav
mov ecx, eax
call fcn.0045e400
jmp 0x468521
xor eax, eax
push 0x4c
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 0x578], eax
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x37
test eax, eax
je 0x468557
push str.datheal.wav
mov ecx, eax
call fcn.0045e400
jmp 0x468559
xor eax, eax
push 0x4c
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 0x57c], eax
call fcn.004b31b9
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x38
test eax, eax
je 0x46858f
push str.dat_thief.wav
mov ecx, eax
call fcn.0045e400
jmp 0x468591
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 0x580], eax
call fcn.004816d0
mov dword [edi + 0x5b0], 0x447a0000
mov dword [edi + 0x5bc], 0x447a0000
mov dword [edi + 0x5c8], 0x447a0000
mov dword [edi + 0x5d4], 0x447a0000
mov dword [edi + 0x5e0], 0x447a0000
mov dword [edi + 0x60c], 5
mov dword [edi + 0x420], 0
mov dword [edi + 0x424], 0
mov dword [edi + 0x754], 0x100
mov dword [edi + 0x758], 0x100
mov dword [edi + 0x750], 0
mov dword [edi + 0x74c], 0
call dword [sym.imp.WINMM.dll_timeGetTime]
mov dword [edi + 0x428], eax
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004b2e95
mov esp, ebp
pop ebp
ret
call fcn.005186d2
int3