Function at 0x446560
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x5fbfb8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x4c
push ebx
push ebp
push esi
push edi
lea eax, [esp + 0x13]
push eax
push str.fire
lea ecx, [esp + 0x1c]
call fcn.00402f20
mov ebp, dword [esp + 0x6c]
lea ecx, [esp + 0x14]
push ecx
xor esi, esi
mov ecx, ebp
mov dword [esp + 0x68], esi
call fcn.005bb000
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
sub eax, ecx
cmp ecx, esi
mov dword [esp + 0x64], 0xffffffff
mov edi, ecx
je 0x4465f2
cmp eax, 0x80
jbe 0x4465cc
push ecx
call fcn.005e05ca
jmp 0x4465ef
lea ebx, [eax - 1]
shr ebx, 3
push 0x655bd8
lea ebx, [ebx*4 + 0x655be0]
call fcn.00401450
mov edx, dword [ebx]
mov dword [edi], edx
mov dword [ebx], edi
mov dword [0x655bd8], esi
add esp, 4
lea eax, [esp + 0x13]
push eax
push 0x60c437
lea ecx, [esp + 0x34]
call fcn.00402f20
lea ecx, [esp + 0x13]
push ecx
push str.image
lea ecx, [esp + 0x28]
mov dword [esp + 0x6c], 1
call fcn.00402f20
lea edx, [esp + 0x13]
push edx
push str.fire
lea ecx, [esp + 0x1c]
mov byte [esp + 0x6c], 2
call fcn.00402f20
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x1c]
push edx
mov ecx, ebp
mov byte [esp + 0x70], 3
call fcn.005bb030
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
sub eax, ecx
cmp ecx, esi
mov edi, ecx
je 0x446698
cmp eax, 0x80
jbe 0x446672
push ecx
call fcn.005e05ca
jmp 0x446695
lea ebx, [eax - 1]
shr ebx, 3
push 0x655bd8
lea ebx, [ebx*4 + 0x655be0]
call fcn.00401450
mov eax, dword [ebx]
mov dword [edi], eax
mov dword [ebx], edi
mov dword [0x655bd8], esi
add esp, 4
mov ebx, dword [esp + 0x20]
mov eax, dword [esp + 0x28]
sub eax, ebx
cmp ebx, esi
je 0x4466db
cmp eax, 0x80
jbe 0x4466b5
push ebx
call fcn.005e05ca
jmp 0x4466d8
lea edi, [eax - 1]
shr edi, 3
push 0x655bd8
lea edi, [edi*4 + 0x655be0]
call fcn.00401450
mov ecx, dword [edi]
mov dword [ebx], ecx
mov dword [edi], ebx
mov dword [0x655bd8], esi
add esp, 4
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x34]
sub eax, ecx
cmp ecx, esi
mov dword [esp + 0x64], 0xffffffff
mov ebx, ecx
je 0x446728
cmp eax, 0x80
jbe 0x446702
push ecx
call fcn.005e05ca
jmp 0x446725
lea edi, [eax - 1]
shr edi, 3
push 0x655bd8
lea edi, [edi*4 + 0x655be0]
call fcn.00401450
mov edx, dword [edi]
mov dword [ebx], edx
mov dword [edi], ebx
mov dword [0x655bd8], esi
add esp, 4
lea eax, [esp + 0x13]
push eax
push 0x60c437
lea ecx, [esp + 0x1c]
call fcn.00402f20
lea ecx, [esp + 0x13]
push ecx
push str.image_on
lea ecx, [esp + 0x28]
mov dword [esp + 0x6c], 4
call fcn.00402f20
lea edx, [esp + 0x13]
push edx
push str.fire
lea ecx, [esp + 0x34]
mov byte [esp + 0x6c], 5
call fcn.00402f20
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x34]
push edx
mov ecx, ebp
mov byte [esp + 0x70], 6
call fcn.005bb030
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x34]
sub eax, ecx
cmp ecx, esi
mov edi, ecx
je 0x4467ce
cmp eax, 0x80
jbe 0x4467a8
push ecx
call fcn.005e05ca
jmp 0x4467cb
lea ebx, [eax - 1]
shr ebx, 3
push 0x655bd8
lea ebx, [ebx*4 + 0x655be0]
call fcn.00401450
mov eax, dword [ebx]
mov dword [edi], eax
mov dword [ebx], edi
mov dword [0x655bd8], esi
add esp, 4
mov ebx, dword [esp + 0x20]
mov eax, dword [esp + 0x28]
sub eax, ebx
cmp ebx, esi
je 0x446811
cmp eax, 0x80
jbe 0x4467eb
push ebx
call fcn.005e05ca
jmp 0x44680e
lea edi, [eax - 1]
shr edi, 3
push 0x655bd8
lea edi, [edi*4 + 0x655be0]
call fcn.00401450
mov ecx, dword [edi]
mov dword [ebx], ecx
mov dword [edi], ebx
mov dword [0x655bd8], esi
add esp, 4
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
sub eax, ecx
cmp ecx, esi
mov dword [esp + 0x64], 0xffffffff
mov ebx, ecx
je 0x44685e
cmp eax, 0x80
jbe 0x446838
push ecx
call fcn.005e05ca
jmp 0x44685b
lea edi, [eax - 1]
shr edi, 3
push 0x655bd8
lea edi, [edi*4 + 0x655be0]
call fcn.00401450
mov edx, dword [edi]
mov dword [ebx], edx
mov dword [edi], ebx
mov dword [0x655bd8], esi
add esp, 4
lea eax, [esp + 0x13]
push eax
push 0x60c437
lea ecx, [esp + 0x1c]
call fcn.00402f20
lea ecx, [esp + 0x13]
push ecx
push str.delay_0
lea ecx, [esp + 0x28]
mov dword [esp + 0x6c], 7
call fcn.00402f20
lea edx, [esp + 0x13]
push edx
push str.fire
lea ecx, [esp + 0x34]
mov byte [esp + 0x6c], 8
call fcn.00402f20
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x34]
push edx
mov ecx, ebp
mov byte [esp + 0x70], 9
call fcn.005bb030
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x34]
sub eax, ecx
cmp ecx, esi
mov edi, ecx
je 0x446904
cmp eax, 0x80
jbe 0x4468de
push ecx
call fcn.005e05ca
jmp 0x446901
lea ebx, [eax - 1]
shr ebx, 3
push 0x655bd8
lea ebx, [ebx*4 + 0x655be0]
call fcn.00401450
mov eax, dword [ebx]
mov dword [edi], eax
mov dword [ebx], edi
mov dword [0x655bd8], esi
add esp, 4
mov ebx, dword [esp + 0x20]
mov eax, dword [esp + 0x28]
sub eax, ebx
cmp ebx, esi
je 0x446947
cmp eax, 0x80
jbe 0x446921
push ebx
call fcn.005e05ca
jmp 0x446944
lea edi, [eax - 1]
shr edi, 3
push 0x655bd8
lea edi, [edi*4 + 0x655be0]
call fcn.00401450
mov ecx, dword [edi]
mov dword [ebx], ecx
mov dword [edi], ebx
mov dword [0x655bd8], esi
add esp, 4
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
sub eax, ecx
cmp ecx, esi
mov dword [esp + 0x64], 0xffffffff
mov ebx, ecx
je 0x446994
cmp eax, 0x80
jbe 0x44696e
push ecx
call fcn.005e05ca
jmp 0x446991
lea edi, [eax - 1]
shr edi, 3
push 0x655bd8
lea edi, [edi*4 + 0x655be0]
call fcn.00401450
mov edx, dword [edi]
mov dword [ebx], edx
mov dword [edi], ebx
mov dword [0x655bd8], esi
add esp, 4
lea eax, [esp + 0x13]
push eax
push 0x60c437
lea ecx, [esp + 0x1c]
call fcn.00402f20
lea ecx, [esp + 0x13]
push ecx
push str.cost_1
lea ecx, [esp + 0x28]
mov dword [esp + 0x6c], 0xa
call fcn.00402f20
lea edx, [esp + 0x13]
push edx
push str.fire
lea ecx, [esp + 0x34]
mov byte [esp + 0x6c], 0xb
call fcn.00402f20
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x34]
push edx
mov ecx, ebp
mov byte [esp + 0x70], 0xc
call fcn.005bb030
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x34]
sub eax, ecx
cmp ecx, esi
mov edi, ecx
je 0x446a3a
cmp eax, 0x80
jbe 0x446a14
push ecx
call fcn.005e05ca
jmp 0x446a37
lea ebx, [eax - 1]
shr ebx, 3
push 0x655bd8
lea ebx, [ebx*4 + 0x655be0]
call fcn.00401450
mov eax, dword [ebx]
mov dword [edi], eax
mov dword [ebx], edi
mov dword [0x655bd8], esi
add esp, 4
mov ebx, dword [esp + 0x20]
mov eax, dword [esp + 0x28]
sub eax, ebx
cmp ebx, esi
je 0x446a7d
cmp eax, 0x80
jbe 0x446a57
push ebx
call fcn.005e05ca
jmp 0x446a7a
lea edi, [eax - 1]
shr edi, 3
push 0x655bd8
lea edi, [edi*4 + 0x655be0]
call fcn.00401450
mov ecx, dword [edi]
mov dword [ebx], ecx
mov dword [edi], ebx
mov dword [0x655bd8], esi
add esp, 4
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
sub eax, ecx
cmp ecx, esi
mov dword [esp + 0x64], 0xffffffff
mov ebx, ecx
je 0x446aca
cmp eax, 0x80
jbe 0x446aa4
push ecx
call fcn.005e05ca
jmp 0x446ac7
lea edi, [eax - 1]
shr edi, 3
push 0x655bd8
lea edi, [edi*4 + 0x655be0]
call fcn.00401450
mov edx, dword [edi]
mov dword [ebx], edx
mov dword [edi], ebx
mov dword [0x655bd8], esi
add esp, 4
lea eax, [esp + 0x13]
push eax
push 0x60c437
lea ecx, [esp + 0x1c]
call fcn.00402f20
lea ecx, [esp + 0x13]
push ecx
push str.delay_1
lea ecx, [esp + 0x28]
mov dword [esp + 0x6c], 0xd
call fcn.00402f20
lea edx, [esp + 0x13]
push edx
push str.fire
lea ecx, [esp + 0x34]
mov byte [esp + 0x6c], 0xe
call fcn.00402f20
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x34]
push edx
mov ecx, ebp
mov byte [esp + 0x70], 0xf
call fcn.005bb030
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x34]
sub eax, ecx
cmp ecx, esi
mov edi, ecx
je 0x446b70
cmp eax, 0x80
jbe 0x446b4a
push ecx
call fcn.005e05ca
jmp 0x446b6d
lea ebx, [eax - 1]
shr ebx, 3
push 0x655bd8
lea ebx, [ebx*4 + 0x655be0]
call fcn.00401450
mov eax, dword [ebx]
mov dword [edi], eax
mov dword [ebx], edi
mov dword [0x655bd8], esi
add esp, 4
mov ebx, dword [esp + 0x20]
mov eax, dword [esp + 0x28]
sub eax, ebx
cmp ebx, esi
je 0x446bb3
cmp eax, 0x80
jbe 0x446b8d
push ebx
call fcn.005e05ca
jmp 0x446bb0
lea edi, [eax - 1]
shr edi, 3
push 0x655bd8
lea edi, [edi*4 + 0x655be0]
call fcn.00401450
mov ecx, dword [edi]
mov dword [ebx], ecx
mov dword [edi], ebx
mov dword [0x655bd8], esi
add esp, 4
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
sub eax, ecx
cmp ecx, esi
mov dword [esp + 0x64], 0xffffffff
mov ebx, ecx
je 0x446c00
cmp eax, 0x80
jbe 0x446bda
push ecx
call fcn.005e05ca
jmp 0x446bfd
lea edi, [eax - 1]
shr edi, 3
push 0x655bd8
lea edi, [edi*4 + 0x655be0]
call fcn.00401450
mov edx, dword [edi]
mov dword [ebx], edx
mov dword [edi], ebx
mov dword [0x655bd8], esi
add esp, 4
lea eax, [esp + 0x13]
push eax
push 0x60c437
lea ecx, [esp + 0x1c]
call fcn.00402f20
lea ecx, [esp + 0x13]
push ecx
push str.cost_2
lea ecx, [esp + 0x28]
mov dword [esp + 0x6c], 0x10
call fcn.00402f20
lea edx, [esp + 0x13]
push edx
push str.fire
lea ecx, [esp + 0x34]
mov byte [esp + 0x6c], 0x11
call fcn.00402f20
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x34]
push edx
mov ecx, ebp
mov byte [esp + 0x70], 0x12
call fcn.005bb030
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x34]
sub eax, ecx
cmp ecx, esi
mov edi, ecx
je 0x446ca6
cmp eax, 0x80
jbe 0x446c80
push ecx
call fcn.005e05ca
jmp 0x446ca3
lea ebx, [eax - 1]
shr ebx, 3
push 0x655bd8
lea ebx, [ebx*4 + 0x655be0]
call fcn.00401450
mov eax, dword [ebx]
mov dword [edi], eax
mov dword [ebx], edi
mov dword [0x655bd8], esi
add esp, 4
mov ebx, dword [esp + 0x20]
mov eax, dword [esp + 0x28]
sub eax, ebx
cmp ebx, esi
je 0x446ce9
cmp eax, 0x80
jbe 0x446cc3
push ebx
call fcn.005e05ca
jmp 0x446ce6
lea edi, [eax - 1]
shr edi, 3
push 0x655bd8
lea edi, [edi*4 + 0x655be0]
call fcn.00401450
mov ecx, dword [edi]
mov dword [ebx], ecx
mov dword [edi], ebx
mov dword [0x655bd8], esi
add esp, 4
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
sub eax, ecx
cmp ecx, esi
mov dword [esp + 0x64], 0xffffffff
mov ebx, ecx
je 0x446d36
cmp eax, 0x80
jbe 0x446d10
push ecx
call fcn.005e05ca
jmp 0x446d33
lea edi, [eax - 1]
shr edi, 3
push 0x655bd8
lea edi, [edi*4 + 0x655be0]
call fcn.00401450
mov edx, dword [edi]
mov dword [ebx], edx
mov dword [edi], ebx
mov dword [0x655bd8], esi
add esp, 4
lea eax, [esp + 0x13]
push eax
push 0x60c437
lea ecx, [esp + 0x1c]
call fcn.00402f20
lea ecx, [esp + 0x13]
push ecx
push str.delay_2
lea ecx, [esp + 0x28]
mov dword [esp + 0x6c], 0x13
call fcn.00402f20
lea edx, [esp + 0x13]
push edx
push str.fire
lea ecx, [esp + 0x34]
mov byte [esp + 0x6c], 0x14
call fcn.00402f20
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x34]
push edx
mov ecx, ebp
mov byte [esp + 0x70], 0x15
call fcn.005bb030
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x34]
sub eax, ecx
cmp ecx, esi
mov edi, ecx
je 0x446ddc
cmp eax, 0x80
jbe 0x446db6
push ecx
call fcn.005e05ca
jmp 0x446dd9
lea ebx, [eax - 1]
shr ebx, 3
push 0x655bd8
lea ebx, [ebx*4 + 0x655be0]
call fcn.00401450
mov eax, dword [ebx]
mov dword [edi], eax
mov dword [ebx], edi
mov dword [0x655bd8], esi
add esp, 4
mov ebx, dword [esp + 0x20]
mov eax, dword [esp + 0x28]
sub eax, ebx
cmp ebx, esi
je 0x446e1f
cmp eax, 0x80
jbe 0x446df9
push ebx
call fcn.005e05ca
jmp 0x446e1c
lea edi, [eax - 1]
shr edi, 3
push 0x655bd8
lea edi, [edi*4 + 0x655be0]
call fcn.00401450
mov ecx, dword [edi]
mov dword [ebx], ecx
mov dword [edi], ebx
mov dword [0x655bd8], esi
add esp, 4
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
sub eax, ecx
cmp ecx, esi
mov dword [esp + 0x64], 0xffffffff
mov ebx, ecx
je 0x446e6c
cmp eax, 0x80
jbe 0x446e46
push ecx
call fcn.005e05ca
jmp 0x446e69
lea edi, [eax - 1]
shr edi, 3
push 0x655bd8
lea edi, [edi*4 + 0x655be0]
call fcn.00401450
mov edx, dword [edi]
mov dword [ebx], edx
mov dword [edi], ebx
mov dword [0x655bd8], esi
add esp, 4
lea eax, [esp + 0x13]
push eax
push 0x60c437
lea ecx, [esp + 0x1c]
call fcn.00402f20
lea ecx, [esp + 0x13]
push ecx
push str.cost_3
lea ecx, [esp + 0x28]
mov dword [esp + 0x6c], 0x16
call fcn.00402f20
lea edx, [esp + 0x13]
push edx
push str.fire
lea ecx, [esp + 0x34]
mov byte [esp + 0x6c], 0x17
call fcn.00402f20
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x34]
push edx
mov ecx, ebp
mov byte [esp + 0x70], 0x18
call fcn.005bb030
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x34]
sub eax, ecx
cmp ecx, esi
mov edi, ecx
je 0x446f12
cmp eax, 0x80
jbe 0x446eec
push ecx
call fcn.005e05ca
jmp 0x446f0f
lea ebx, [eax - 1]
shr ebx, 3
push 0x655bd8
lea ebx, [ebx*4 + 0x655be0]
call fcn.00401450
mov eax, dword [ebx]
mov dword [edi], eax
mov dword [ebx], edi
mov dword [0x655bd8], esi
add esp, 4
mov ebx, dword [esp + 0x20]
mov eax, dword [esp + 0x28]
sub eax, ebx
cmp ebx, esi
je 0x446f55
cmp eax, 0x80
jbe 0x446f2f
push ebx
call fcn.005e05ca
jmp 0x446f52
lea edi, [eax - 1]
shr edi, 3
push 0x655bd8
lea edi, [edi*4 + 0x655be0]
call fcn.00401450
mov ecx, dword [edi]
mov dword [ebx], ecx
mov dword [edi], ebx
mov dword [0x655bd8], esi
add esp, 4
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
sub eax, ecx
cmp ecx, esi
mov dword [esp + 0x64], 0xffffffff
mov ebx, ecx
je 0x446fa2
cmp eax, 0x80
jbe 0x446f7c
push ecx
call fcn.005e05ca
jmp 0x446f9f
lea edi, [eax - 1]
shr edi, 3
push 0x655bd8
lea edi, [edi*4 + 0x655be0]
call fcn.00401450
mov edx, dword [edi]
mov dword [ebx], edx
mov dword [edi], ebx
mov dword [0x655bd8], esi
add esp, 4
lea eax, [esp + 0x13]
push eax
push 0x60c437
lea ecx, [esp + 0x1c]
call fcn.00402f20
lea ecx, [esp + 0x13]
push ecx
push str.delay_3
lea ecx, [esp + 0x28]
mov dword [esp + 0x6c], 0x19
call fcn.00402f20
lea edx, [esp + 0x13]
push edx
push str.fire
lea ecx, [esp + 0x34]
mov byte [esp + 0x6c], 0x1a
call fcn.00402f20
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x34]
push edx
mov ecx, ebp
mov byte [esp + 0x70], 0x1b
call fcn.005bb030
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x34]
sub eax, ecx
cmp ecx, esi
mov edi, ecx
je 0x447048
cmp eax, 0x80
jbe 0x447022
push ecx
call fcn.005e05ca
jmp 0x447045
lea ebx, [eax - 1]
shr ebx, 3
push 0x655bd8
lea ebx, [ebx*4 + 0x655be0]
call fcn.00401450
mov eax, dword [ebx]
mov dword [edi], eax
mov dword [ebx], edi
mov dword [0x655bd8], esi
add esp, 4
mov ebx, dword [esp + 0x20]
mov eax, dword [esp + 0x28]
sub eax, ebx
cmp ebx, esi
je 0x44708b
cmp eax, 0x80
jbe 0x447065
push ebx
call fcn.005e05ca
jmp 0x447088
lea edi, [eax - 1]
shr edi, 3
push 0x655bd8
lea edi, [edi*4 + 0x655be0]
call fcn.00401450
mov ecx, dword [edi]
mov dword [ebx], ecx
mov dword [edi], ebx
mov dword [0x655bd8], esi
add esp, 4
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
sub eax, ecx
cmp ecx, esi
mov dword [esp + 0x64], 0xffffffff
mov ebx, ecx
je 0x4470d8
cmp eax, 0x80
jbe 0x4470b2
push ecx
call fcn.005e05ca
jmp 0x4470d5
lea edi, [eax - 1]
shr edi, 3
push 0x655bd8
lea edi, [edi*4 + 0x655be0]
call fcn.00401450
mov edx, dword [edi]
mov dword [ebx], edx
mov dword [edi], ebx
mov dword [0x655bd8], esi
add esp, 4
lea eax, [esp + 0x13]
push eax
push 0x60c437
lea ecx, [esp + 0x1c]
call fcn.00402f20
lea ecx, [esp + 0x13]
push ecx
push str.fireplace_image
lea ecx, [esp + 0x28]
mov dword [esp + 0x6c], 0x1c
call fcn.00402f20
lea edx, [esp + 0x13]
push edx
push str.fire
lea ecx, [esp + 0x34]
mov byte [esp + 0x6c], 0x1d
call fcn.00402f20
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x34]
push edx
mov ecx, ebp
mov byte [esp + 0x70], 0x1e
call fcn.005bb030
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x34]
sub eax, ecx
cmp ecx, esi
mov edi, ecx
je 0x44717e
cmp eax, 0x80
jbe 0x447158
push ecx
call fcn.005e05ca
jmp 0x44717b
lea ebx, [eax - 1]
shr ebx, 3
push 0x655bd8
lea ebx, [ebx*4 + 0x655be0]
call fcn.00401450
mov eax, dword [ebx]
mov dword [edi], eax
mov dword [ebx], edi
mov dword [0x655bd8], esi
add esp, 4
mov ebx, dword [esp + 0x20]
mov eax, dword [esp + 0x28]
sub eax, ebx
cmp ebx, esi
je 0x4471c1
cmp eax, 0x80
jbe 0x44719b
push ebx
call fcn.005e05ca
jmp 0x4471be
lea edi, [eax - 1]
shr edi, 3
push 0x655bd8
lea edi, [edi*4 + 0x655be0]
call fcn.00401450
mov ecx, dword [edi]
mov dword [ebx], ecx
mov dword [edi], ebx
mov dword [0x655bd8], esi
add esp, 4
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
sub eax, ecx
cmp ecx, esi
mov dword [esp + 0x64], 0xffffffff
mov ebx, ecx
je 0x44720e
cmp eax, 0x80
jbe 0x4471e8
push ecx
call fcn.005e05ca
jmp 0x44720b
lea edi, [eax - 1]
shr edi, 3
push 0x655bd8
lea edi, [edi*4 + 0x655be0]
call fcn.00401450
mov edx, dword [edi]
mov dword [ebx], edx
mov dword [edi], ebx
mov dword [0x655bd8], esi
add esp, 4
lea eax, [esp + 0x13]
push eax
push 0x60c437
lea ecx, [esp + 0x1c]
call fcn.00402f20
lea ecx, [esp + 0x13]
push ecx
push str.fireplace_offset
lea ecx, [esp + 0x28]
mov dword [esp + 0x6c], 0x1f
call fcn.00402f20
lea edx, [esp + 0x13]
push edx
push str.fire
lea ecx, [esp + 0x34]
mov byte [esp + 0x6c], 0x20
call fcn.00402f20
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x34]
push edx
mov ecx, ebp
mov byte [esp + 0x70], 0x21
call fcn.005bb030
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x34]
sub eax, ecx
cmp ecx, esi
mov edi, ecx
je 0x4472b4
cmp eax, 0x80
jbe 0x44728e
push ecx
call fcn.005e05ca
jmp 0x4472b1
lea ebx, [eax - 1]
shr ebx, 3
push 0x655bd8
lea ebx, [ebx*4 + 0x655be0]
call fcn.00401450
mov eax, dword [ebx]
mov dword [edi], eax
mov dword [ebx], edi
mov dword [0x655bd8], esi
add esp, 4
mov ebx, dword [esp + 0x20]
mov eax, dword [esp + 0x28]
sub eax, ebx
cmp ebx, esi
je 0x4472f7
cmp eax, 0x80
jbe 0x4472d1
push ebx
call fcn.005e05ca
jmp 0x4472f4
lea edi, [eax - 1]
shr edi, 3
push 0x655bd8
lea edi, [edi*4 + 0x655be0]
call fcn.00401450
mov ecx, dword [edi]
mov dword [ebx], ecx
mov dword [edi], ebx
mov dword [0x655bd8], esi
add esp, 4
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
sub eax, ecx
cmp ecx, esi
mov dword [esp + 0x64], 0xffffffff
mov ebx, ecx
je 0x447344
cmp eax, 0x80
jbe 0x44731e
push ecx
call fcn.005e05ca
jmp 0x447341
lea edi, [eax - 1]
shr edi, 3
push 0x655bd8
lea edi, [edi*4 + 0x655be0]
call fcn.00401450
mov edx, dword [edi]
mov dword [ebx], edx
mov dword [edi], ebx
mov dword [0x655bd8], esi
add esp, 4
lea eax, [esp + 0x13]
push eax
push 0x60c437
lea ecx, [esp + 0x1c]
call fcn.00402f20
lea ecx, [esp + 0x13]
push ecx
push str.fireplace_image_1
lea ecx, [esp + 0x28]
mov dword [esp + 0x6c], 0x22
call fcn.00402f20
lea edx, [esp + 0x13]
push edx
push str.fire
lea ecx, [esp + 0x34]
mov byte [esp + 0x6c], 0x23
call fcn.00402f20
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x34]
push edx
mov ecx, ebp
mov byte [esp + 0x70], 0x24
call fcn.005bb030
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x34]
sub eax, ecx
cmp ecx, esi
mov edi, ecx
je 0x4473ea
cmp eax, 0x80
jbe 0x4473c4
push ecx
call fcn.005e05ca
jmp 0x4473e7
lea ebx, [eax - 1]
shr ebx, 3
push 0x655bd8
lea ebx, [ebx*4 + 0x655be0]
call fcn.00401450
mov eax, dword [ebx]
mov dword [edi], eax
mov dword [ebx], edi
mov dword [0x655bd8], esi
add esp, 4
lea ecx, [esp + 0x20]
call fcn.0041d780
or esi, 0xffffffff
lea ecx, [esp + 0x14]
mov dword [esp + 0x64], esi
call fcn.0041d780
lea ecx, [esp + 0x13]
push ecx
push 0x60c437
lea ecx, [esp + 0x1c]
call fcn.00402f20
lea edx, [esp + 0x13]
push edx
push str.fireplace_image_2
lea ecx, [esp + 0x28]
mov dword [esp + 0x6c], 0x25
call fcn.00402f20
lea eax, [esp + 0x13]
push eax
push str.fire
lea ecx, [esp + 0x34]
mov byte [esp + 0x6c], 0x26
call fcn.00402f20
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x34]
push eax
mov ecx, ebp
mov byte [esp + 0x70], 0x27
call fcn.005bb030
lea ecx, [esp + 0x2c]
call fcn.0041d780
lea ecx, [esp + 0x20]
call fcn.0041d780
lea ecx, [esp + 0x14]
mov dword [esp + 0x64], esi
call fcn.0041d780
lea ecx, [esp + 0x13]
push ecx
push 0x60c437
lea ecx, [esp + 0x1c]
call fcn.00402f20
lea edx, [esp + 0x13]
push edx
push str.fireplace_image_3
lea ecx, [esp + 0x28]
mov dword [esp + 0x6c], 0x28
call fcn.00402f20
lea eax, [esp + 0x13]
push eax
push str.fire
lea ecx, [esp + 0x34]
mov byte [esp + 0x6c], 0x29
call fcn.00402f20
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x34]
push eax
mov ecx, ebp
mov byte [esp + 0x70], 0x2a
call fcn.005bb030
lea ecx, [esp + 0x2c]
call fcn.0041d780
lea ecx, [esp + 0x20]
call fcn.0041d780
lea ecx, [esp + 0x14]
mov dword [esp + 0x64], esi
call fcn.0041d780
lea ecx, [esp + 0x13]
push ecx
push 0x60c437
lea ecx, [esp + 0x1c]
call fcn.00402f20
lea edx, [esp + 0x13]
push edx
push str.wood_image
lea ecx, [esp + 0x28]
mov dword [esp + 0x6c], 0x2b
call fcn.00402f20
lea eax, [esp + 0x13]
push eax
push str.fire
lea ecx, [esp + 0x34]
mov byte [esp + 0x6c], 0x2c
call fcn.00402f20
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x34]
push eax
mov ecx, ebp
mov byte [esp + 0x70], 0x2d
call fcn.005bb030
lea ecx, [esp + 0x2c]
call fcn.0041d780
lea ecx, [esp + 0x20]
call fcn.0041d780
lea ecx, [esp + 0x14]
mov dword [esp + 0x64], esi
call fcn.0041d780
lea ecx, [esp + 0x13]
push ecx
push 0x60c437
lea ecx, [esp + 0x1c]
call fcn.00402f20
lea edx, [esp + 0x13]
push edx
push str.wood_offset
lea ecx, [esp + 0x28]
mov dword [esp + 0x6c], 0x2e
call fcn.00402f20
lea eax, [esp + 0x13]
push eax
push str.fire
lea ecx, [esp + 0x34]
mov byte [esp + 0x6c], 0x2f
call fcn.00402f20
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x34]
push eax
mov ecx, ebp
mov byte [esp + 0x70], 0x30
call fcn.005bb030
lea ecx, [esp + 0x2c]
call fcn.0041d780
lea ecx, [esp + 0x20]
call fcn.0041d780
lea ecx, [esp + 0x14]
mov dword [esp + 0x64], esi
call fcn.0041d780
lea ecx, [esp + 0x13]
push ecx
push 0x60c437
lea ecx, [esp + 0x1c]
call fcn.00402f20
lea edx, [esp + 0x13]
push edx
push str.wood_image_1
lea ecx, [esp + 0x28]
mov dword [esp + 0x6c], 0x31
call fcn.00402f20
lea eax, [esp + 0x13]
push eax
push str.fire
lea ecx, [esp + 0x34]
mov byte [esp + 0x6c], 0x32
call fcn.00402f20
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x34]
push eax
mov ecx, ebp
mov byte [esp + 0x70], 0x33
call fcn.005bb030
lea ecx, [esp + 0x2c]
call fcn.0041d780
lea ecx, [esp + 0x20]
call fcn.0041d780
lea ecx, [esp + 0x14]
mov dword [esp + 0x64], esi
call fcn.0041d780
lea ecx, [esp + 0x13]
push ecx
push 0x60c437
lea ecx, [esp + 0x1c]
call fcn.00402f20
lea edx, [esp + 0x13]
push edx
push str.wood_image_2
lea ecx, [esp + 0x28]
mov dword [esp + 0x6c], 0x34
call fcn.00402f20
lea eax, [esp + 0x13]
push eax
push str.fire
lea ecx, [esp + 0x34]
mov byte [esp + 0x6c], 0x35
call fcn.00402f20
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x34]
push eax
mov ecx, ebp
mov byte [esp + 0x70], 0x36
call fcn.005bb030
lea ecx, [esp + 0x2c]
call fcn.0041d780
lea ecx, [esp + 0x20]
call fcn.0041d780
lea ecx, [esp + 0x14]
mov dword [esp + 0x64], esi
call fcn.0041d780
lea ecx, [esp + 0x13]
push ecx
push 0x60c437
lea ecx, [esp + 0x1c]
call fcn.00402f20
lea edx, [esp + 0x13]
push edx
push str.wood_image_3
lea ecx, [esp + 0x28]
mov dword [esp + 0x6c], 0x37
call fcn.00402f20
lea eax, [esp + 0x13]
push eax
push str.fire
lea ecx, [esp + 0x34]
mov byte [esp + 0x6c], 0x38
call fcn.00402f20
mov byte [esp + 0x64], 0x39
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x34]
push eax
mov ecx, ebp
call fcn.005bb030
lea ecx, [esp + 0x2c]
call fcn.0041d780
lea ecx, [esp + 0x20]
call fcn.0041d780
lea ecx, [esp + 0x14]
mov dword [esp + 0x64], esi
call fcn.0041d780
lea ecx, [esp + 0x13]
push ecx
push 0x60c437
lea ecx, [esp + 0x58]
call fcn.00402f20
lea edx, [esp + 0x13]
push edx
push str.wood_light
lea ecx, [esp + 0x4c]
mov dword [esp + 0x6c], 0x3a
call fcn.00402f20
lea eax, [esp + 0x13]
push eax
push str.fire
lea ecx, [esp + 0x40]
mov byte [esp + 0x6c], 0x3b
call fcn.00402f20
lea ecx, [esp + 0x50]
push ecx
lea edx, [esp + 0x48]
push edx
lea eax, [esp + 0x40]
push eax
mov ecx, ebp
mov byte [esp + 0x70], 0x3c
call fcn.005bb030
lea ecx, [esp + 0x38]
call fcn.0041d780
lea ecx, [esp + 0x44]
call fcn.0041d780
lea ecx, [esp + 0x50]
call fcn.0041d780
mov ecx, dword [esp + 0x5c]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x58
ret