Function at 0x4fc320
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5b88fb
mov eax, dword fs:[0]
push eax
sub esp, 0x128
mov eax, dword [0x5f8800]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
movzx eax, word [ebp + 8]
push 0x78
mov dword [ebp - 0x108], eax
lea eax, [ebp - 0xc8]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push 0x40
lea eax, [ebp - 0x50]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movzx edx, word [edi + 0x141c82]
add esp, 0x18
movzx esi, word [edi + 0x141c7e]
movzx ecx, word [edi + 0x141c80]
mov eax, esi
mov dword [ebp - 0x120], edx
mov dl, byte [edi + 0x18bf91]
mov dword [ebp - 0x110], eax
movzx eax, cx
mov byte [ebp - 0xfd], dl
movsx edx, word [edi + 0x141d88]
mov dword [ebp - 0xfc], eax
cmp edx, 7
movzx eax, word [edi + 0x141c84]
mov edx, dword [ebp - 0x120]
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 0x104], eax
ja case.default.0x4fc3e1
movsx ecx, word [edi + 0x141d88]
jmp dword [ecx*4 + 0x4ff5ec]
cmp byte [ebp - 0xfd], 0
mov ecx, dword [ebp - 0x10c]
je 0x4fc440
add eax, ecx
push eax
lea eax, [edx + esi]
push eax
push ecx
push esi
mov ecx, edi
call fcn.00445ef0
mov eax, dword [ebp - 0x104]
mov ecx, edi
push eax
push dword [ebp - 0x120]
push dword [ebp - 0x10c]
push esi
call fcn.00445f40
mov eax, dword [ebp - 0x10c]
cwde
movsx esi, si
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0x108], esi
lea edx, [eax + 2]
add eax, 3
jmp 0x4fc46f
push 0
push 0
movsx eax, cx
mov ecx, edi
push 5
push eax
movsx esi, si
push esi
push 0x3d
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0x108], esi
call fcn.0043d1d0
mov eax, dword [ebp - 0xfc]
lea edx, [eax + 0x16]
add eax, 0x17
push 0
push 0x19192d
mov dword [ebp - 0x120], edx
mov ecx, edi
lea edx, [ebp - 0x50]
mov dword [ebp - 0x104], 0x21
push edx
push eax
mov eax, esi
mov dword [ebp - 0x110], esi
add eax, dword [ebp - 0x104]
push eax
call fcn.0045d450
push 0
push 0xffffff
lea eax, [ebp - 0x50]
mov ecx, edi
push eax
push dword [ebp - 0x120]
lea eax, [esi + 0x20]
push eax
call fcn.0045d450
push 0
lea eax, [ebp - 0x50]
mov ecx, edi
push eax
movzx eax, word [edi + 0x141c30]
push eax
call fcn.00449b90
mov eax, dword [edi + 0x141c30]
add eax, 0xffffffec
cmp eax, 0x5a
ja case.0x4fc4eb.21
movzx eax, byte [eax + 0x4ff618]
jmp dword [eax*4 + 0x4ff60c]
movsx ecx, word [ebp + 8]
lea eax, [esi + 0x19]
mov dword [ebp - 0x110], ecx
cmp ecx, eax
jle 0x4fc5cb
lea eax, [esi + 0x64]
cmp ecx, eax
jge 0x4fc5cb
mov ecx, dword [ebp - 0xfc]
movsx edx, word [ebp + 0xc]
lea eax, [ecx + 0x37]
cmp edx, eax
jle 0x4fc5cb
lea eax, [ecx + 0x46]
cmp edx, eax
jge 0x4fc5cb
push str.DRAW_DIALOGBOX_NPCACTION_QUERY13
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0xfc]
mov ecx, edi
add eax, 0x37
push eax
lea eax, [esi + 0x1c]
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_NPCACTION_QUERY13
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
mov dword [ebp - 4], 1
push 0
push 0xffffff
lea eax, [ebp - 0xe0]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
jmp 0x4fc94b
push str.DRAW_DIALOGBOX_NPCACTION_QUERY13
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 2
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov edx, eax
cmp dword [edx + 0x14], 0xf
jbe 0x4fc5fd
mov edx, dword [edx]
cmp byte [ebp - 0xfd], 0
mov eax, 0x320004
push 0
mov ecx, 0xaaaaaa
cmove ecx, eax
mov eax, dword [ebp - 0xfc]
push ecx
add eax, 0x37
mov dword [ebp - 0x118], ecx
push edx
push eax
lea eax, [esi + 0x1c]
mov ecx, edi
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_NPCACTION_QUERY13
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 3
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x4fc672
mov eax, dword [eax]
push 0
push dword [ebp - 0x118]
jmp 0x4fc94b
movsx ecx, word [ebp + 8]
lea eax, [esi + 0x19]
mov dword [ebp - 0x110], ecx
cmp ecx, eax
jle 0x4fc735
lea eax, [esi + 0x64]
cmp ecx, eax
jge 0x4fc735
mov ecx, dword [ebp - 0xfc]
movsx edx, word [ebp + 0xc]
lea eax, [ecx + 0x37]
cmp edx, eax
jle 0x4fc735
lea eax, [ecx + 0x46]
cmp edx, eax
jge 0x4fc735
push str.DRAW_DIALOGBOX_NPCACTION_QUERY17
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 4
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0xfc]
mov ecx, edi
add eax, 0x37
push eax
lea eax, [esi + 0x1c]
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_NPCACTION_QUERY17
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
mov dword [ebp - 4], 5
jmp 0x4fc5a7
push str.DRAW_DIALOGBOX_NPCACTION_QUERY17
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
cmp byte [ebp - 0xfd], 0
mov eax, 0x320004
mov esi, 0xaaaaaa
mov dword [ebp - 4], 6
cmove esi, eax
mov ecx, 0x5fd3c4
push 0
push esi
lea eax, [ebp - 0xe0]
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0xfc]
mov ecx, edi
add eax, 0x37
push eax
mov eax, dword [ebp - 0x108]
add eax, 0x1c
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_NPCACTION_QUERY17
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
push 0
push esi
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 7
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
mov esi, dword [ebp - 0x108]
jmp 0x4fc94b
movsx ecx, word [ebp + 8]
lea eax, [esi + 0x19]
mov dword [ebp - 0x110], ecx
cmp ecx, eax
jle 0x4fc89c
lea eax, [esi + 0x64]
cmp ecx, eax
jge 0x4fc89c
mov ecx, dword [ebp - 0xfc]
movsx edx, word [ebp + 0xc]
lea eax, [ecx + 0x37]
cmp edx, eax
jle 0x4fc89c
lea eax, [ecx + 0x46]
cmp edx, eax
jge 0x4fc89c
push str.DRAW_DIALOGBOX_NPCACTION_QUERY21
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 8
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0xfc]
mov ecx, edi
add eax, 0x37
push eax
lea eax, [esi + 0x1c]
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_NPCACTION_QUERY21
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
mov dword [ebp - 4], 9
jmp 0x4fc5a7
push str.DRAW_DIALOGBOX_NPCACTION_QUERY21
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0xa
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov edx, eax
cmp dword [edx + 0x14], 0xf
jbe 0x4fc8ce
mov edx, dword [edx]
cmp byte [ebp - 0xfd], 0
mov eax, 0x320004
push 0
mov ecx, 0xaaaaaa
cmove ecx, eax
mov eax, dword [ebp - 0xfc]
push ecx
add eax, 0x37
mov dword [ebp - 0x118], ecx
push edx
push eax
lea eax, [esi + 0x1c]
mov ecx, edi
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_NPCACTION_QUERY21
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0xb
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x4fc943
mov eax, dword [eax]
push 0
push dword [ebp - 0x118]
push eax
mov eax, dword [ebp - 0xfc]
mov ecx, edi
add eax, 0x37
push eax
lea eax, [esi + 0x1d]
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp byte [edi + 0x189614], 0
mov ecx, dword [ebp - 0x110]
jne case.default.0x4fc3e1
lea eax, [esi + 0x7d]
cmp ecx, eax
jle 0x4fca66
lea eax, [esi + 0xb4]
cmp ecx, eax
jge 0x4fca66
mov ecx, dword [ebp - 0xfc]
movsx edx, word [ebp + 0xc]
lea eax, [ecx + 0x37]
cmp edx, eax
jle 0x4fca66
lea eax, [ecx + 0x46]
cmp edx, eax
jge 0x4fca66
push str.DRAW_DIALOGBOX_NPCACTION_QUERY25
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0xc
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0xfc]
mov ecx, edi
add eax, 0x37
push eax
lea eax, [esi + 0x7d]
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_NPCACTION_QUERY25
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0xd
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0xfc]
add eax, 0x37
push eax
lea eax, [esi + 0x7e]
jmp 0x4ff4d6
push str.DRAW_DIALOGBOX_NPCACTION_QUERY25
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0xe
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
cmp dword [ecx + 0x14], 0xf
jbe 0x4fca98
mov ecx, dword [ecx]
cmp byte [ebp - 0xfd], 0
mov edx, 0x320004
push 0
mov eax, 0xaaaaaa
cmove eax, edx
push eax
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0xfc]
push ecx
add eax, 0x37
mov ecx, edi
push eax
lea eax, [esi + 0x7d]
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_NPCACTION_QUERY25
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0xf
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x4fcb0d
mov eax, dword [eax]
mov ecx, dword [ebp - 0x104]
push 0
push ecx
push eax
mov eax, dword [ebp - 0xfc]
add eax, 0x37
push eax
lea eax, [esi + 0x7e]
jmp 0x4ff4d6
cmp byte [ebp - 0xfd], 0
mov edx, dword [ebp - 0xfc]
mov ecx, dword [ebp - 0x10c]
movsx edx, dx
mov dword [ebp - 0xfc], edx
mov edx, dword [ebp - 0x110]
movsx edx, dx
mov dword [ebp - 0x110], edx
mov edx, dword [ebp - 0x120]
je 0x4fcb8f
add eax, ecx
push eax
lea eax, [edx + esi]
push eax
push ecx
push esi
mov ecx, edi
call fcn.00445ef0
mov eax, dword [ebp - 0x104]
mov ecx, edi
push eax
push dword [ebp - 0x120]
push dword [ebp - 0x10c]
push esi
call fcn.00445f40
mov esi, dword [ebp - 0x110]
jmp 0x4fcbab
mov esi, dword [ebp - 0x110]
mov ecx, edi
push 0
push 0
push 6
push dword [ebp - 0xfc]
push esi
push 0x3d
call fcn.0043d1d0
mov eax, dword [edi + 0x141c28]
mov ecx, edi
push dword [edi + 0x141c30]
push dword [edi + eax*4 + 0x18558c]
call fcn.0052fab0
xorps xmm0, xmm0
mov dword [ebp - 0xd0], 0
push 0x30
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xcc], 0
call fcn.005aa520
movups xmm0, xmmword [str.DRAW_DIALOGBOX_NPCACTION_QUERY29]
mov dword [ebp - 0xe0], eax
add esp, 4
mov dword [ebp - 0xd0], 0x20
mov dword [ebp - 0xcc], 0x2f
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x5d23a4]
movups xmmword [eax + 0x10], xmm0
mov byte [eax + 0x20], 0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x10
push eax
lea eax, [ebp - 0x12c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x4fcc4c
mov ecx, dword [ecx]
lea eax, [edi + 0x18966d]
push eax
push ecx
lea eax, [ebp - 0xc8]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe0]
call fcn.00411640
push 0
push 0x19192d
lea eax, [ebp - 0xc8]
add esi, 0x18
push eax
mov eax, dword [ebp - 0xfc]
mov ecx, edi
add eax, 0x19
push eax
push esi
call fcn.0045d450
push 0
push 0x19192d
lea eax, [edi + 0x141c88]
mov ecx, edi
push eax
mov eax, dword [ebp - 0xfc]
add eax, 0x28
push eax
push esi
call fcn.0045d450
mov ecx, dword [edi + 0x141c28]
mov ecx, dword [edi + ecx*4 + 0x18558c]
call fcn.00567d40
test al, al
je 0x4fcd76
push str.DRAW_DIALOGBOX_NPCACTION_QUERY30
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x11
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
cmp dword [ecx + 0x14], 0xf
jbe 0x4fcd05
mov ecx, dword [ecx]
mov eax, dword [ebp - 0xfc]
mov esi, dword [ebp - 0x110]
add eax, 0x37
push 0
push 0x19192d
push ecx
push eax
lea eax, [esi + 0x1c]
mov ecx, edi
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_NPCACTION_QUERY30
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x12
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x4fcd6a
mov eax, dword [eax]
push 0
push 0x19192d
jmp 0x4fcefe
mov esi, dword [ebp - 0x110]
movsx ecx, word [ebp + 8]
lea eax, [esi + 0x19]
cmp ecx, eax
jle 0x4fce4f
lea eax, [esi + 0x64]
cmp ecx, eax
jge 0x4fce4f
mov ecx, dword [ebp - 0xfc]
movsx edx, word [ebp + 0xc]
lea eax, [ecx + 0x37]
cmp edx, eax
jle 0x4fce4f
lea eax, [ecx + 0x46]
cmp edx, eax
jge 0x4fce4f
push str.DRAW_DIALOGBOX_NPCACTION_QUERY30
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x13
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0xfc]
mov ecx, edi
add eax, 0x37
push eax
lea eax, [esi + 0x1c]
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_NPCACTION_QUERY30
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x14
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
jmp 0x4fcefe
push str.DRAW_DIALOGBOX_NPCACTION_QUERY30
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x15
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
cmp dword [ecx + 0x14], 0xf
jbe 0x4fce81
mov ecx, dword [ecx]
cmp byte [ebp - 0xfd], 0
mov eax, 0x320004
push 0
mov edx, 0xaaaaaa
cmove edx, eax
mov eax, dword [ebp - 0xfc]
push edx
push ecx
add eax, 0x37
mov dword [ebp - 0x118], edx
push eax
lea eax, [esi + 0x1c]
mov ecx, edi
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_NPCACTION_QUERY30
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x16
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x4fcef6
mov eax, dword [eax]
push 0
push dword [ebp - 0x118]
push eax
mov eax, dword [ebp - 0xfc]
mov ecx, edi
add eax, 0x37
push eax
lea eax, [esi + 0x1d]
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [edi + 0x141c28]
mov ecx, dword [edi + ecx*4 + 0x18558c]
call fcn.00567d40
test al, al
jne 0x4fd0f0
mov ecx, dword [edi + 0x141c28]
mov ecx, dword [edi + ecx*4 + 0x18558c]
call fcn.00567e90
test al, al
jne 0x4fd0f0
lea eax, [esi + 0x9b]
mov esi, dword [ebp - 0x108]
movzx edx, si
mov esi, dword [ebp - 0x110]
movsx ecx, dx
cmp ecx, eax
jle 0x4fd04b
lea eax, [esi + 0xd2]
cmp ecx, eax
jge 0x4fd04b
mov ecx, dword [ebp - 0xfc]
movsx edx, word [ebp + 0xc]
lea eax, [ecx + 0x37]
cmp edx, eax
jle 0x4fd04b
lea eax, [ecx + 0x46]
cmp edx, eax
jge 0x4fd04b
push str.DRAW_DIALOGBOX_NPCACTION_QUERY34
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x19
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0xfc]
mov ecx, edi
add eax, 0x37
push eax
lea eax, [esi + 0x9b]
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_NPCACTION_QUERY34
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x1a
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0xfc]
jmp 0x4ff4cc
push str.DRAW_DIALOGBOX_NPCACTION_QUERY34
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x1b
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x4fd07b
mov eax, dword [eax]
push 0
push 0x320004
push eax
mov eax, dword [ebp - 0xfc]
mov ecx, edi
add eax, 0x37
push eax
lea eax, [esi + 0x9b]
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_NPCACTION_QUERY34
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x1c
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x4fd0dd
mov eax, dword [eax]
push 0
push 0x320004
push eax
mov eax, dword [ebp - 0xfc]
jmp 0x4ff4cc
push str.DRAW_DIALOGBOX_NPCACTION_QUERY34
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x17
push eax
lea eax, [ebp - 0x12c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4fd12c
mov eax, dword [eax]
push 0
push 0x19192d
push eax
mov eax, dword [ebp - 0xfc]
mov ecx, edi
add eax, 0x37
push eax
lea eax, [esi + 0x9b]
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_NPCACTION_QUERY34
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x18
push eax
lea eax, [ebp - 0x12c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4fd19a
mov eax, dword [eax]
push 0
push 0x19192d
push eax
mov eax, dword [ebp - 0xfc]
jmp 0x4ff4cc
cmp byte [ebp - 0xfd], 0
mov edx, dword [ebp - 0xfc]
mov ecx, dword [ebp - 0x10c]
movsx edx, dx
mov dword [ebp - 0xfc], edx
mov edx, dword [ebp - 0x110]
movsx edx, dx
mov dword [ebp - 0x110], edx
mov edx, dword [ebp - 0x120]
je 0x4fd213
add eax, ecx
push eax
lea eax, [edx + esi]
push eax
push ecx
push esi
mov ecx, edi
call fcn.00445ef0
mov eax, dword [ebp - 0x104]
mov ecx, edi
push eax
push dword [ebp - 0x120]
push dword [ebp - 0x10c]
push esi
call fcn.00445f40
mov esi, dword [ebp - 0x110]
jmp 0x4fd22f
mov esi, dword [ebp - 0x110]
mov ecx, edi
push 0
push 0
push 6
push dword [ebp - 0xfc]
push esi
push 0x3d
call fcn.0043d1d0
mov eax, dword [edi + 0x141c28]
mov ecx, edi
push dword [edi + 0x141c30]
push dword [edi + eax*4 + 0x18558c]
call fcn.0052fab0
xorps xmm0, xmm0
mov dword [ebp - 0xd0], 0
push 0x30
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xcc], 0
call fcn.005aa520
movups xmm0, xmmword [str.DRAW_DIALOGBOX_NPCACTION_QUERY29]
mov dword [ebp - 0xe0], eax
add esp, 4
mov dword [ebp - 0xd0], 0x20
mov dword [ebp - 0xcc], 0x2f
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x5d23a4]
movups xmmword [eax + 0x10], xmm0
mov byte [eax + 0x20], 0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x1d
push eax
lea eax, [ebp - 0x12c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x4fd2d0
mov ecx, dword [ecx]
lea eax, [edi + 0x18966d]
push eax
push ecx
lea eax, [ebp - 0xc8]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe0]
call fcn.00411640
push 0
push 0x19192d
lea eax, [ebp - 0xc8]
add esi, 0x18
push eax
mov eax, dword [ebp - 0xfc]
mov ecx, edi
add eax, 0x14
push eax
push esi
call fcn.0045d450
push 0
push 0x19192d
lea eax, [edi + 0x141c88]
mov ecx, edi
push eax
mov eax, dword [ebp - 0xfc]
add eax, 0x23
push eax
push esi
call fcn.0045d450
mov ecx, dword [edi + 0x141c28]
mov ecx, dword [edi + ecx*4 + 0x18558c]
call fcn.00567d40
test al, al
jne 0x4fd4fe
mov ecx, dword [edi + 0x141c28]
mov ecx, dword [edi + ecx*4 + 0x18558c]
call fcn.00567e90
test al, al
jne 0x4fd4fe
mov esi, dword [ebp - 0x110]
movsx ecx, word [ebp + 8]
lea eax, [esi + 0x19]
cmp ecx, eax
jle 0x4fd44a
lea eax, [esi + 0x37]
cmp ecx, eax
jge 0x4fd44a
mov ecx, dword [ebp - 0xfc]
movsx edx, word [ebp + 0xc]
lea eax, [ecx + 0x37]
cmp edx, eax
jle 0x4fd44a
lea eax, [ecx + 0x46]
cmp edx, eax
jge 0x4fd44a
push str.DRAW_DIALOGBOX_NPCACTION_QUERY39
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x20
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0xfc]
mov ecx, edi
add eax, 0x37
push eax
lea eax, [esi + 0x1c]
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_NPCACTION_QUERY39
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x21
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
jmp 0x4fd5b2
push str.DRAW_DIALOGBOX_NPCACTION_QUERY39
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x22
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov edx, eax
cmp dword [edx + 0x14], 0xf
jbe 0x4fd47c
mov edx, dword [edx]
cmp byte [ebp - 0xfd], 0
mov eax, 0x320004
push 0
mov ecx, 0xaaaaaa
cmove ecx, eax
mov eax, dword [ebp - 0xfc]
push ecx
add eax, 0x37
mov dword [ebp - 0x118], ecx
push edx
push eax
lea eax, [esi + 0x1c]
mov ecx, edi
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_NPCACTION_QUERY39
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x23
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x4fd4f1
mov eax, dword [eax]
push 0
push dword [ebp - 0x118]
jmp 0x4fd5b2
push str.DRAW_DIALOGBOX_NPCACTION_QUERY39
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x1e
push eax
lea eax, [ebp - 0x12c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x4fd53a
mov ecx, dword [ecx]
mov eax, dword [ebp - 0xfc]
mov esi, dword [ebp - 0x110]
add eax, 0x37
push 0
push 0x19192d
push ecx
push eax
lea eax, [esi + 0x1c]
mov ecx, edi
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_NPCACTION_QUERY39
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x1f
push eax
lea eax, [ebp - 0x12c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4fd5ab
mov eax, dword [eax]
push 0
push 0x19192d
push eax
mov eax, dword [ebp - 0xfc]
mov ecx, edi
add eax, 0x37
push eax
lea eax, [esi + 0x1d]
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x108]
movzx eax, ax
movsx ecx, ax
mov eax, dword [edi + 0x141c28]
mov eax, dword [edi + eax*4 + 0x18558c]
mov al, byte [eax + 0x19]
cmp al, 5
je case.default.0x4fc3e1
cmp al, 6
je case.default.0x4fc3e1
lea eax, [esi + 0x7d]
cmp ecx, eax
jle 0x4fd6ec
lea eax, [esi + 0xa5]
cmp ecx, eax
jge 0x4fd6ec
mov ecx, dword [ebp - 0xfc]
movsx edx, word [ebp + 0xc]
lea eax, [ecx + 0x37]
cmp edx, eax
jle 0x4fd6ec
lea eax, [ecx + 0x46]
cmp edx, eax
jge 0x4fd6ec
push str.DRAW_DIALOGBOX_NPCACTION_QUERY43
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x24
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0xfc]
mov ecx, edi
add eax, 0x37
push eax
lea eax, [esi + 0x80]
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_NPCACTION_QUERY43
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x25
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0xfc]
add eax, 0x37
push eax
lea eax, [esi + 0x81]
jmp 0x4ff4d6
push str.DRAW_DIALOGBOX_NPCACTION_QUERY43
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x26
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
cmp dword [ecx + 0x14], 0xf
jbe 0x4fd71e
mov ecx, dword [ecx]
cmp byte [ebp - 0xfd], 0
mov edx, 0x320004
push 0
mov eax, 0xaaaaaa
cmove eax, edx
push eax
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0xfc]
push ecx
add eax, 0x37
mov ecx, edi
push eax
lea eax, [esi + 0x80]
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_NPCACTION_QUERY43
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x27
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x4fd796
mov eax, dword [eax]
mov ecx, dword [ebp - 0x104]
push 0
push ecx
push eax
mov eax, dword [ebp - 0xfc]
add eax, 0x37
push eax
lea eax, [esi + 0x81]
jmp 0x4ff4d6
cmp byte [ebp - 0xfd], 0
mov ecx, dword [ebp - 0x10c]
je 0x4fd80f
add eax, ecx
push eax
lea eax, [edx + esi]
push eax
push ecx
push esi
mov ecx, edi
call fcn.00445ef0
mov eax, dword [ebp - 0x104]
mov ecx, edi
push eax
push dword [ebp - 0x120]
push dword [ebp - 0x10c]
push esi
call fcn.00445f40
mov edx, dword [ebp - 0xfc]
movsx eax, dx
mov edx, dword [ebp - 0x110]
movsx esi, dx
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x108], esi
jmp 0x4fd832
push 0
push 0
movsx eax, cx
mov ecx, edi
push 6
push eax
movsx esi, si
push esi
push 0x3d
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x108], esi
call fcn.0043d1d0
mov eax, dword [edi + 0x141c28]
mov ecx, edi
push dword [edi + 0x141c30]
push dword [edi + eax*4 + 0x18558c]
call fcn.0052fab0
xorps xmm0, xmm0
mov dword [ebp - 0xd0], 0
push 0x30
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xcc], 0
call fcn.005aa520
movups xmm0, xmmword [str.DRAW_DIALOGBOX_NPCACTION_QUERY29]
mov dword [ebp - 0xe0], eax
add esp, 4
mov dword [ebp - 0xd0], 0x20
mov dword [ebp - 0xcc], 0x2f
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x5d23a4]
movups xmmword [eax + 0x10], xmm0
mov byte [eax + 0x20], 0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x28
push eax
lea eax, [ebp - 0x12c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x4fd8d3
mov ecx, dword [ecx]
lea eax, [edi + 0x18966d]
push eax
push ecx
lea eax, [ebp - 0xc8]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov ecx, dword [ebp - 0xcc]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x4fd92c
mov edx, dword [ebp - 0xe0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4fd922
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4ff5c8
push ecx
push edx
call fcn.005aa4e8
add esp, 8
push 0
push 0x19
push 0x19
push 0x2d
lea eax, [ebp - 0xc8]
add esi, 0xf0
push eax
mov eax, dword [ebp - 0x104]
mov ecx, edi
add eax, 0x14
push eax
push esi
push dword [ebp - 0x108]
call fcn.0045d060
push 0
push 0x19
push 0x19
push 0x2d
lea eax, [edi + 0x141c88]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x104]
add eax, 0x23
push eax
push esi
mov esi, dword [ebp - 0x108]
push esi
call fcn.0045d060
movsx ecx, word [ebp + 8]
lea eax, [esi + 0x19]
cmp ecx, eax
jle 0x4fda60
lea eax, [esi + 0x64]
cmp ecx, eax
jge 0x4fda60
mov eax, dword [ebp - 0x104]
movsx ecx, word [ebp + 0xc]
lea edx, [eax + 0x37]
mov dword [ebp - 0x108], edx
cmp ecx, edx
jle 0x4fda60
add eax, 0x46
cmp ecx, eax
jge 0x4fda60
push str.DRAW_DIALOGBOX_NPCACTION_QUERY48
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x29
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x108]
lea eax, [esi + 0x1c]
mov ecx, edi
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_NPCACTION_QUERY48
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x2a
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x108]
lea eax, [esi + 0x1d]
jmp 0x4ff4d6
push 0x20
xorps xmm0, xmm0
mov dword [ebp - 0xd0], 0
push str.DRAW_DIALOGBOX_NPCACTION_QUERY48
lea ecx, [ebp - 0xe0]
mov dword [ebp - 0xcc], 0
movups xmmword [ebp - 0xe0], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x2b
push eax
lea eax, [ebp - 0x12c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x4fdabc
mov ecx, dword [ecx]
cmp byte [ebp - 0xfd], 0
mov eax, 0x320004
push 0
mov edx, 0xaaaaaa
cmove edx, eax
mov eax, dword [ebp - 0x104]
push edx
add eax, 0x37
mov dword [ebp - 0x118], edx
push ecx
push eax
mov dword [ebp - 0x108], eax
mov ecx, edi
lea eax, [esi + 0x1c]
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0x20
xorps xmm0, xmm0
mov dword [ebp - 0xd0], 0
push str.DRAW_DIALOGBOX_NPCACTION_QUERY48
lea ecx, [ebp - 0xe0]
mov dword [ebp - 0xcc], 0
movups xmmword [ebp - 0xe0], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x2c
push eax
lea eax, [ebp - 0x114]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4fdb63
mov eax, dword [eax]
push 0
push dword [ebp - 0x118]
push eax
push dword [ebp - 0x108]
lea eax, [esi + 0x1d]
jmp 0x4ff4d6
cmp byte [ebp - 0xfd], 0
mov edx, dword [ebp - 0xfc]
mov ecx, dword [ebp - 0x10c]
movsx edx, dx
mov dword [ebp - 0xfc], edx
mov edx, dword [ebp - 0x110]
movsx edx, dx
mov dword [ebp - 0x108], edx
mov edx, dword [ebp - 0x120]
je 0x4fdbe0
add eax, ecx
push eax
lea eax, [edx + esi]
push eax
push ecx
push esi
mov ecx, edi
call fcn.00445ef0
mov eax, dword [ebp - 0x104]
mov ecx, edi
push eax
push dword [ebp - 0x120]
push dword [ebp - 0x10c]
push esi
call fcn.00445f40
mov esi, dword [ebp - 0x108]
jmp 0x4fdbfc
mov esi, dword [ebp - 0x108]
mov ecx, edi
push 0
push 0
push 5
push dword [ebp - 0xfc]
push esi
push 0x3d
call fcn.0043d1d0
push 0
lea eax, [ebp - 0x50]
mov ecx, edi
push eax
movzx eax, word [edi + 0x141c30]
push eax
call fcn.00449b90
push 0
push 0x19192d
lea eax, [ebp - 0x50]
mov ecx, edi
push eax
mov eax, dword [ebp - 0xfc]
add eax, 0x17
push eax
lea eax, [esi + 0x21]
push eax
call fcn.0045d450
push 0
push 0xffffff
lea eax, [ebp - 0x50]
mov ecx, edi
push eax
mov eax, dword [ebp - 0xfc]
add eax, 0x16
push eax
lea eax, [esi + 0x20]
push eax
call fcn.0045d450
cmp byte [edi + 0x189614], 0
jne case.default.0x4fc3e1
movsx ecx, word [ebp + 8]
lea edx, [esi + 0x7d]
cmp ecx, edx
jle 0x4fdd40
lea eax, [esi + 0xb4]
cmp ecx, eax
jge 0x4fdd40
mov eax, dword [ebp - 0xfc]
movsx ecx, word [ebp + 0xc]
lea edx, [eax + 0x37]
mov dword [ebp - 0x108], edx
cmp ecx, edx
jle 0x4fdd40
add eax, 0x46
cmp ecx, eax
jge 0x4fdd40
push str.DRAW_DIALOGBOX_NPCACTION_QUERY25
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x2d
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x108]
lea eax, [esi + 0x7d]
mov ecx, edi
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_NPCACTION_QUERY25
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x2e
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x108]
lea eax, [esi + 0x7e]
jmp 0x4ff4d6
push str.DRAW_DIALOGBOX_NPCACTION_QUERY25
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x2f
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
cmp dword [ecx + 0x14], 0xf
jbe 0x4fdd72
mov ecx, dword [ecx]
cmp byte [ebp - 0xfd], 0
mov eax, 0x320004
push 0
mov edx, 0xaaaaaa
cmove edx, eax
mov eax, dword [ebp - 0xfc]
push edx
add eax, 0x37
mov dword [ebp - 0x118], edx
push ecx
push eax
mov dword [ebp - 0x108], eax
mov ecx, edi
lea eax, [esi + 0x7d]
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_NPCACTION_QUERY25
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x30
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x4fdded
mov eax, dword [eax]
push 0
push dword [ebp - 0x118]
push eax
push dword [ebp - 0x108]
lea eax, [esi + 0x7e]
jmp 0x4ff4d6
cmp byte [ebp - 0xfd], 0
mov eax, dword [ebp - 0xfc]
mov ecx, dword [ebp - 0x10c]
cwde
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0x110]
cwde
mov dword [ebp - 0x108], eax
je 0x4fde65
mov eax, dword [ebp - 0x104]
add eax, ecx
push eax
lea eax, [edx + esi]
push eax
push ecx
push esi
mov ecx, edi
call fcn.00445ef0
push dword [ebp - 0x104]
mov ecx, edi
push dword [ebp - 0x120]
push dword [ebp - 0x10c]
push esi
call fcn.00445f40
mov esi, dword [ebp - 0x108]
jmp 0x4fde7d
push 0
push 0
push 6
push dword [ebp - 0xfc]
mov esi, eax
mov ecx, edi
push esi
push 0x3d
call fcn.0043d1d0
push 0
lea eax, [ebp - 0x50]
mov ecx, edi
push eax
movzx eax, word [edi + 0x141c30]
push eax
call fcn.00449b90
push 0
push 0x19192d
lea eax, [ebp - 0x50]
mov ecx, edi
push eax
mov eax, dword [ebp - 0xfc]
add eax, 0x17
push eax
lea eax, [esi + 0x21]
push eax
call fcn.0045d450
push 0
push 0xffffff
lea eax, [ebp - 0x50]
mov ecx, edi
push eax
mov eax, dword [ebp - 0xfc]
add eax, 0x16
push eax
lea eax, [esi + 0x20]
push eax
call fcn.0045d450
movsx ecx, word [ebp + 8]
lea eax, [esi + 0x14]
mov dword [ebp - 0x108], ecx
cmp ecx, eax
jle 0x4fdfe0
lea eax, [esi + 0x37]
cmp ecx, eax
jge 0x4fdfe0
mov edx, dword [ebp - 0xfc]
movsx ecx, word [ebp + 0xc]
mov dword [ebp - 0x120], ecx
lea eax, [edx + 0x37]
cmp ecx, eax
jle 0x4fdfe0
lea eax, [edx + 0x46]
cmp ecx, eax
jge 0x4fdfe0
push str.DRAW_DIALOGBOX_NPCACTION_QUERY21
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x31
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0xfc]
mov ecx, edi
add eax, 0x37
push eax
lea eax, [esi + 0x17]
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_NPCACTION_QUERY21
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x32
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x4fdfa6
mov eax, dword [eax]
push 0
push 0xffffff
push eax
mov eax, dword [ebp - 0xfc]
mov ecx, edi
add eax, 0x37
push eax
lea eax, [esi + 0x18]
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x120]
jmp 0x4fe171
push 0x20
xorps xmm0, xmm0
mov dword [ebp - 0xd0], 0
push str.DRAW_DIALOGBOX_NPCACTION_QUERY21
lea ecx, [ebp - 0xe0]
mov dword [ebp - 0xcc], 0
movups xmmword [ebp - 0xe0], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x33
push eax
lea eax, [ebp - 0x12c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x4fe03c
mov ecx, dword [ecx]
cmp byte [ebp - 0xfd], 0
mov eax, 0x320004
push 0
mov edx, 0xaaaaaa
cmove edx, eax
mov eax, dword [ebp - 0xfc]
push edx
push ecx
add eax, 0x37
mov dword [ebp - 0x118], edx
push eax
lea eax, [esi + 0x17]
mov ecx, edi
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
xorps xmm0, xmm0
mov dword [ebp - 0xd0], 0
push 0x30
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xcc], 0
call fcn.005aa520
movups xmm0, xmmword [str.DRAW_DIALOGBOX_NPCACTION_QUERY21]
mov dword [ebp - 0xe0], eax
add esp, 4
mov dword [ebp - 0xd0], 0x20
mov dword [ebp - 0xcc], 0x2f
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x5d235c]
movups xmmword [eax + 0x10], xmm0
mov byte [eax + 0x20], 0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x34
push eax
lea eax, [ebp - 0x114]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4fe108
mov eax, dword [eax]
push 0
push dword [ebp - 0x118]
mov ecx, edi
push eax
mov eax, dword [ebp - 0xfc]
add eax, 0x37
push eax
lea eax, [esi + 0x18]
push eax
call fcn.0045d450
mov ecx, dword [ebp - 0xcc]
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x4fe167
mov edx, dword [ebp - 0xe0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4fe15d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4ff5cd
push ecx
push edx
call fcn.005aa4e8
add esp, 8
movsx ecx, word [ebp + 0xc]
mov dword [ebp - 0x120], ecx
mov edx, dword [ebp - 0xfc]
lea eax, [esi + 0x50]
cmp dword [ebp - 0x108], eax
jle 0x4fe2bb
lea eax, [esi + 0x6e]
cmp dword [ebp - 0x108], eax
jge 0x4fe2bb
lea eax, [edx + 0x37]
cmp ecx, eax
jle 0x4fe2bb
lea eax, [edx + 0x46]
cmp ecx, eax
jge 0x4fe2bb
push str.DRAW_DIALOGBOX_NPCACTION_QUERY39
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x35
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x4fe1db
mov eax, dword [eax]
push 0
push 0xffffff
push eax
mov eax, dword [ebp - 0xfc]
mov ecx, edi
add eax, 0x37
push eax
lea eax, [esi + 0x53]
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_NPCACTION_QUERY39
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x36
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x4fe23a
mov eax, dword [eax]
push 0
push 0xffffff
push eax
mov eax, dword [ebp - 0xfc]
mov ecx, edi
add eax, 0x37
push eax
lea eax, [esi + 0x54]
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov cl, byte [ebp - 0xfd]
mov edx, 0xaa
test cl, cl
mov dword [ebp - 0x118], 0x32
mov eax, edx
cmove eax, dword [ebp - 0x118]
mov dword [ebp - 0x104], eax
mov eax, edx
mov dword [ebp - 0x118], 0
cmove eax, dword [ebp - 0x118]
mov dword [ebp - 0x110], eax
mov eax, 4
cmove edx, eax
mov dword [ebp - 0x10c], edx
jmp 0x4fe4a5
xorps xmm0, xmm0
mov dword [ebp - 0xd0], 0
push 0x30
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xcc], 0
call fcn.005aa520
movups xmm0, xmmword [str.DRAW_DIALOGBOX_NPCACTION_QUERY39]
mov dword [ebp - 0xe0], eax
add esp, 4
mov dword [ebp - 0xd0], 0x20
mov dword [ebp - 0xcc], 0x2f
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x5d2410]
movups xmmword [eax + 0x10], xmm0
mov byte [eax + 0x20], 0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x37
push eax
lea eax, [ebp - 0x134]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
mov dword [ebp - 0x118], eax
cmp dword [eax + 0x14], 0xf
jbe 0x4fe34e
mov eax, dword [eax]
mov dword [ebp - 0x118], eax
mov cl, byte [ebp - 0xfd]
mov edx, 0xaa
test cl, cl
mov dword [ebp - 0x110], 0x32
mov eax, edx
mov dword [ebp - 0x10c], 4
cmove eax, dword [ebp - 0x110]
mov dword [ebp - 0x104], eax
mov eax, edx
cmove edx, dword [ebp - 0x10c]
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x110], 0
cmove eax, dword [ebp - 0x110]
shl ecx, 8
or ecx, eax
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0xfc]
shl ecx, 8
add eax, 0x37
push 0
or ecx, edx
mov dword [ebp - 0x10c], edx
push ecx
push dword [ebp - 0x118]
mov dword [ebp - 0x128], ecx
mov ecx, edi
push eax
lea eax, [esi + 0x53]
push eax
call fcn.0045d450
mov ecx, dword [ebp - 0xcc]
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x4fe419
mov edx, dword [ebp - 0xe0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4fe40f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4ff5d2
push ecx
push edx
call fcn.005aa4e8
add esp, 8
push 0x20
xorps xmm0, xmm0
mov dword [ebp - 0xd0], 0
push str.DRAW_DIALOGBOX_NPCACTION_QUERY39
lea ecx, [ebp - 0xe0]
mov dword [ebp - 0xcc], 0
movups xmmword [ebp - 0xe0], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x38
push eax
lea eax, [ebp - 0x134]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4fe475
mov eax, dword [eax]
push 0
push dword [ebp - 0x128]
mov ecx, edi
push eax
mov eax, dword [ebp - 0xfc]
add eax, 0x37
push eax
lea eax, [esi + 0x54]
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x108]
lea eax, [esi + 0x82]
cmp ecx, eax
jle 0x4fe5b8
lea eax, [esi + 0xb9]
cmp ecx, eax
jge 0x4fe5b8
mov edx, dword [ebp - 0xfc]
mov ecx, dword [ebp - 0x120]
lea eax, [edx + 0x37]
cmp ecx, eax
jle 0x4fe5b8
lea eax, [edx + 0x46]
cmp ecx, eax
jge 0x4fe5b8
push str.DRAW_DIALOGBOX_NPCACTION_QUERY50
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x39
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x4fe519
mov eax, dword [eax]
push 0
push 0xffffff
push eax
mov eax, dword [ebp - 0xfc]
mov ecx, edi
add eax, 0x37
push eax
lea eax, [esi + 0x85]
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_NPCACTION_QUERY50
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x3a
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0xfc]
mov ecx, edi
add eax, 0x37
push eax
lea eax, [esi + 0x86]
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
shl dword [ebp - 0x104], 8
jmp 0x4fe6f5
push 0x20
xorps xmm0, xmm0
mov dword [ebp - 0xd0], 0
push str.DRAW_DIALOGBOX_NPCACTION_QUERY50
lea ecx, [ebp - 0xe0]
mov dword [ebp - 0xcc], 0
movups xmmword [ebp - 0xe0], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x3b
push eax
lea eax, [ebp - 0x134]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x4fe614
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x104]
shl eax, 8
mov dword [ebp - 0x104], eax
or eax, dword [ebp - 0x110]
shl eax, 8
or eax, dword [ebp - 0x10c]
push 0
push eax
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0xfc]
push ecx
add eax, 0x37
mov ecx, edi
push eax
lea eax, [esi + 0x85]
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0x20
xorps xmm0, xmm0
mov dword [ebp - 0xd0], 0
push str.DRAW_DIALOGBOX_NPCACTION_QUERY50
lea ecx, [ebp - 0xe0]
mov dword [ebp - 0xcc], 0
movups xmmword [ebp - 0xe0], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x3c
push eax
lea eax, [ebp - 0x11c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4fe6c2
mov eax, dword [eax]
push 0
push dword [ebp - 0x128]
mov ecx, edi
push eax
mov eax, dword [ebp - 0xfc]
add eax, 0x37
push eax
lea eax, [esi + 0x86]
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp byte [edi + 0x189614], 0
jne case.default.0x4fc3e1
mov ecx, dword [ebp - 0x108]
lea eax, [esi + 0xc8]
cmp ecx, eax
jle 0x4fe7f3
lea eax, [esi + 0xe6]
cmp ecx, eax
jge 0x4fe7f3
mov edx, dword [ebp - 0xfc]
mov ecx, dword [ebp - 0x120]
lea eax, [edx + 0x37]
cmp ecx, eax
jle 0x4fe7f3
lea eax, [edx + 0x46]
cmp ecx, eax
jge 0x4fe7f3
push str.DRAW_DIALOGBOX_NPCACTION_QUERY25
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x3d
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0xfc]
mov ecx, edi
add eax, 0x37
push eax
lea eax, [esi + 0xcb]
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_NPCACTION_QUERY25
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x3e
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0xfc]
add eax, 0x37
push eax
lea eax, [esi + 0xcc]
jmp 0x4ff4d6
push str.DRAW_DIALOGBOX_NPCACTION_QUERY25
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x3f
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
cmp dword [ecx + 0x14], 0xf
jbe 0x4fe825
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x110]
or eax, dword [ebp - 0x104]
shl eax, 8
or eax, dword [ebp - 0x10c]
push 0
push eax
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0xfc]
push ecx
add eax, 0x37
mov ecx, edi
push eax
lea eax, [esi + 0xcb]
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_NPCACTION_QUERY25
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x40
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
cmp dword [eax + 0x14], 0xf
jbe 0x4fe89e
mov eax, dword [eax]
push 0
push dword [ebp - 0x110]
push eax
mov eax, dword [ebp - 0xfc]
add eax, 0x37
push eax
lea eax, [esi + 0xcc]
jmp 0x4ff4d6
cmp byte [ebp - 0xfd], 0
mov ecx, dword [ebp - 0x10c]
je 0x4fe915
add eax, ecx
push eax
lea eax, [edx + esi]
push eax
push ecx
push esi
mov ecx, edi
call fcn.00445ef0
push dword [ebp - 0x104]
mov ecx, edi
push dword [ebp - 0x120]
push dword [ebp - 0x10c]
push esi
call fcn.00445f40
mov edx, dword [ebp - 0xfc]
movsx eax, dx
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x110]
movsx esi, ax
mov dword [ebp - 0x108], esi
jmp 0x4fe938
push 0
push 0
movsx eax, cx
mov ecx, edi
push 6
push eax
movsx esi, si
push esi
push 0x3d
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x108], esi
call fcn.0043d1d0
mov eax, dword [edi + 0x141c28]
mov ecx, edi
push dword [edi + 0x141c30]
push dword [edi + eax*4 + 0x18558c]
call fcn.0052fab0
xorps xmm0, xmm0
mov dword [ebp - 0xd0], 0
push 0x30
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xcc], 0
call fcn.005aa520
movups xmm0, xmmword [str.DRAW_DIALOGBOX_NPCACTION_QUERY29]
mov dword [ebp - 0xe0], eax
add esp, 4
mov dword [ebp - 0xd0], 0x20
mov dword [ebp - 0xcc], 0x2f
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x5d23a4]
movups xmmword [eax + 0x10], xmm0
mov byte [eax + 0x20], 0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x41
push eax
lea eax, [ebp - 0x134]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x4fe9d9
mov ecx, dword [ecx]
lea eax, [edi + 0x18966d]
push eax
push ecx
lea eax, [ebp - 0xc8]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov ecx, dword [ebp - 0xcc]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x4fea32
mov edx, dword [ebp - 0xe0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4fea28
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4ff5d7
push ecx
push edx
call fcn.005aa4e8
add esp, 8
push 0
push 0x19
push 0x19
push 0x2d
lea eax, [ebp - 0xc8]
add esi, 0xf0
push eax
mov eax, dword [ebp - 0x104]
mov ecx, edi
add eax, 0x14
push eax
push esi
push dword [ebp - 0x108]
call fcn.0045d060
push 0
push 0x19
push 0x19
push 0x2d
lea eax, [edi + 0x141c88]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x104]
add eax, 0x23
push eax
push esi
mov esi, dword [ebp - 0x108]
push esi
call fcn.0045d060
movsx ecx, word [ebp + 8]
lea eax, [esi + 0x19]
cmp ecx, eax
jle 0x4feb66
lea eax, [esi + 0x64]
cmp ecx, eax
jge 0x4feb66
mov eax, dword [ebp - 0x104]
movsx ecx, word [ebp + 0xc]
lea edx, [eax + 0x37]
mov dword [ebp - 0x118], edx
cmp ecx, edx
jle 0x4feb66
add eax, 0x46
cmp ecx, eax
jge 0x4feb66
push str.DRAW_DIALOGBOX_NPCACTION_QUERY30
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x42
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x118]
lea eax, [esi + 0x1c]
mov ecx, edi
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_NPCACTION_QUERY30
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x43
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x118]
lea eax, [esi + 0x1d]
jmp 0x4ff4d6
xorps xmm0, xmm0
mov dword [ebp - 0xd0], 0
push 0x30
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xcc], 0
call fcn.005aa520
movups xmm0, xmmword [str.DRAW_DIALOGBOX_NPCACTION_QUERY30]
mov dword [ebp - 0xe0], eax
add esp, 4
mov dword [ebp - 0xd0], 0x20
mov dword [ebp - 0xcc], 0x2f
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x5d23c8]
movups xmmword [eax + 0x10], xmm0
mov byte [eax + 0x20], 0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x44
push eax
lea eax, [ebp - 0x134]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x4febed
mov ecx, dword [ecx]
cmp byte [ebp - 0xfd], 0
mov eax, 0x320004
push 0
mov edx, 0xaaaaaa
cmove edx, eax
mov eax, dword [ebp - 0x104]
push edx
add eax, 0x37
mov dword [ebp - 0x128], edx
push ecx
push eax
mov dword [ebp - 0x118], eax
mov ecx, edi
lea eax, [esi + 0x1c]
push eax
call fcn.0045d450
mov ecx, dword [ebp - 0xcc]
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x4fec67
mov edx, dword [ebp - 0xe0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4fec5d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4ff5dc
push ecx
push edx
call fcn.005aa4e8
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0xd0], 0
push 0x30
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xcc], 0
call fcn.005aa520
movups xmm0, xmmword [str.DRAW_DIALOGBOX_NPCACTION_QUERY30]
mov dword [ebp - 0xe0], eax
add esp, 4
mov dword [ebp - 0xd0], 0x20
mov dword [ebp - 0xcc], 0x2f
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x5d23c8]
movups xmmword [eax + 0x10], xmm0
mov byte [eax + 0x20], 0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x45
push eax
lea eax, [ebp - 0x134]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4fecee
mov eax, dword [eax]
push 0
push dword [ebp - 0x128]
push eax
push dword [ebp - 0x118]
lea eax, [esi + 0x1d]
jmp 0x4ff4d6
cmp byte [ebp - 0xfd], 0
mov edx, dword [ebp - 0xfc]
mov ecx, dword [ebp - 0x10c]
movsx edx, dx
mov dword [ebp - 0xfc], edx
mov edx, dword [ebp - 0x110]
movsx edx, dx
mov dword [ebp - 0x118], edx
mov edx, dword [ebp - 0x120]
je 0x4fed6a
add eax, ecx
push eax
lea eax, [edx + esi]
push eax
push ecx
push esi
mov ecx, edi
call fcn.00445ef0
push dword [ebp - 0x104]
mov ecx, edi
push dword [ebp - 0x120]
push dword [ebp - 0x10c]
push esi
call fcn.00445f40
mov esi, dword [ebp - 0x118]
jmp 0x4fed86
mov esi, dword [ebp - 0x118]
mov ecx, edi
push 0
push 0
push 5
push dword [ebp - 0xfc]
push esi
push 0x3d
call fcn.0043d1d0
push 0
lea eax, [ebp - 0x50]
mov ecx, edi
push eax
movzx eax, word [edi + 0x141c30]
push eax
call fcn.00449b90
push 0
push 0x19192d
lea eax, [ebp - 0x50]
mov ecx, edi
push eax
mov eax, dword [ebp - 0xfc]
add eax, 0x17
push eax
lea eax, [esi + 0x21]
push eax
call fcn.0045d450
push 0
push 0xffffff
lea eax, [ebp - 0x50]
mov ecx, edi
push eax
mov eax, dword [ebp - 0xfc]
add eax, 0x16
push eax
lea eax, [esi + 0x20]
push eax
call fcn.0045d450
movsx ecx, word [ebp + 8]
lea eax, [esi + 0x19]
mov dword [ebp - 0x108], ecx
cmp ecx, eax
jle 0x4feee8
lea eax, [esi + 0x64]
cmp ecx, eax
jge 0x4feee8
mov edx, dword [ebp - 0xfc]
movsx ecx, word [ebp + 0xc]
mov dword [ebp - 0x104], ecx
lea eax, [edx + 0x37]
cmp ecx, eax
jle 0x4feee8
lea eax, [edx + 0x46]
cmp ecx, eax
jge 0x4feee8
push str.DRAW_DIALOGBOX_NPCACTION_QUERY51
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x46
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0xfc]
mov ecx, edi
add eax, 0x37
push eax
lea eax, [esi + 0x1c]
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_NPCACTION_QUERY51
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x47
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0xfc]
mov ecx, edi
add eax, 0x37
push eax
lea eax, [esi + 0x1d]
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x104]
jmp 0x4ff075
xorps xmm0, xmm0
mov dword [ebp - 0xd0], 0
push 0x30
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xcc], 0
call fcn.005aa520
movups xmm0, xmmword [str.DRAW_DIALOGBOX_NPCACTION_QUERY51]
mov dword [ebp - 0xe0], eax
add esp, 4
mov dword [ebp - 0xd0], 0x20
mov dword [ebp - 0xcc], 0x2f
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x5d24a0]
movups xmmword [eax + 0x10], xmm0
mov byte [eax + 0x20], 0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x48
push eax
lea eax, [ebp - 0x134]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov edx, dword [eax]
add edx, 0x20
cmp dword [edx + 0x14], 0xf
jbe 0x4fef6f
mov edx, dword [edx]
cmp byte [ebp - 0xfd], 0
mov eax, 0x320004
push 0
mov ecx, 0xaaaaaa
cmove ecx, eax
mov eax, dword [ebp - 0xfc]
push ecx
add eax, 0x37
mov dword [ebp - 0x128], ecx
push edx
push eax
lea eax, [esi + 0x1c]
mov ecx, edi
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
xorps xmm0, xmm0
mov dword [ebp - 0xd0], 0
push 0x30
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xcc], 0
call fcn.005aa520
movups xmm0, xmmword [str.DRAW_DIALOGBOX_NPCACTION_QUERY51]
mov dword [ebp - 0xe0], eax
add esp, 4
mov dword [ebp - 0xd0], 0x20
mov dword [ebp - 0xcc], 0x2f
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x5d24a0]
movups xmmword [eax + 0x10], xmm0
mov byte [eax + 0x20], 0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x49
push eax
lea eax, [ebp - 0x11c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4ff03b
mov eax, dword [eax]
push 0
push dword [ebp - 0x128]
mov ecx, edi
push eax
mov eax, dword [ebp - 0xfc]
add eax, 0x37
push eax
lea eax, [esi + 0x1d]
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
movsx ecx, word [ebp + 0xc]
mov dword [ebp - 0x104], ecx
mov edx, dword [ebp - 0xfc]
lea eax, [esi + 0x68]
cmp dword [ebp - 0x108], eax
jle 0x4ff274
lea eax, [esi + 0x9b]
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x108], eax
jge 0x4ff274
lea eax, [edx + 0x37]
cmp ecx, eax
jle 0x4ff274
lea eax, [edx + 0x46]
cmp ecx, eax
jge 0x4ff274
push str.DRAW_DIALOGBOX_NPCACTION_QUERY39
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x4a
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0xfc]
mov ecx, edi
add eax, 0x37
push eax
lea eax, [esi + 0x67]
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_NPCACTION_QUERY39
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x4b
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0xfc]
mov ecx, edi
add eax, 0x37
push eax
lea eax, [esi + 0x68]
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
xorps xmm0, xmm0
mov dword [ebp - 0xd0], 0
push 0x30
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xcc], 0
call fcn.005aa520
movups xmm0, xmmword [str.DRAW_DIALOGBOX_NPCACTION_QUERY25]
mov dword [ebp - 0xe0], eax
add esp, 4
mov dword [ebp - 0xd0], 0x20
mov dword [ebp - 0xcc], 0x2f
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x5d2380]
movups xmmword [eax + 0x10], xmm0
mov byte [eax + 0x20], 0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x50
push eax
lea eax, [ebp - 0x134]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x4ff1fb
mov ecx, dword [ecx]
cmp byte [ebp - 0xfd], 0
mov edx, 0x320004
push 0
mov eax, 0xaaaaaa
cmove eax, edx
push eax
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0xfc]
push ecx
add eax, 0x37
mov ecx, edi
push eax
push dword [ebp - 0x110]
call fcn.0045d450
mov ecx, dword [ebp - 0xcc]
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x4ff4f8
mov edx, dword [ebp - 0xe0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4ff4ee
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4ff5e1
jmp 0x4ff4ee
xorps xmm0, xmm0
mov dword [ebp - 0xd0], 0
push 0x30
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xcc], 0
call fcn.005aa520
movups xmm0, xmmword [str.DRAW_DIALOGBOX_NPCACTION_QUERY39]
mov dword [ebp - 0xe0], eax
add esp, 4
mov dword [ebp - 0xd0], 0x20
mov dword [ebp - 0xcc], 0x2f
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x5d2410]
movups xmmword [eax + 0x10], xmm0
mov byte [eax + 0x20], 0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x4c
push eax
lea eax, [ebp - 0x134]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4ff2fb
mov eax, dword [eax]
cmp byte [ebp - 0xfd], 0
mov edx, 0x320004
push 0
mov ecx, 0xaaaaaa
cmove ecx, edx
push ecx
push eax
mov eax, dword [ebp - 0xfc]
add eax, 0x37
mov dword [ebp - 0x128], ecx
push eax
lea eax, [esi + 0x67]
mov ecx, edi
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0x20
xorps xmm0, xmm0
mov dword [ebp - 0xd0], 0
push str.DRAW_DIALOGBOX_NPCACTION_QUERY39
lea ecx, [ebp - 0xe0]
mov dword [ebp - 0xcc], 0
movups xmmword [ebp - 0xe0], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x4d
push eax
lea eax, [ebp - 0x11c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4ff39c
mov eax, dword [eax]
push 0
push dword [ebp - 0x128]
mov ecx, edi
push eax
mov eax, dword [ebp - 0xfc]
add eax, 0x37
push eax
lea eax, [esi + 0x68]
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov edx, dword [ebp - 0x108]
lea ecx, [esi + 0x9b]
mov dword [ebp - 0x110], ecx
cmp edx, ecx
jle 0x4ff174
lea eax, [esi + 0xd2]
mov dword [ebp - 0x110], ecx
cmp edx, eax
jge 0x4ff174
mov edx, dword [ebp - 0xfc]
mov dword [ebp - 0x110], ecx
mov ecx, dword [ebp - 0x104]
lea eax, [edx + 0x37]
cmp ecx, eax
jle 0x4ff174
lea eax, [esi + 0x9b]
mov dword [ebp - 0x110], eax
lea eax, [edx + 0x46]
cmp ecx, eax
jge 0x4ff174
push str.DRAW_DIALOGBOX_NPCACTION_QUERY25
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x4e
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0xfc]
mov ecx, edi
add eax, 0x37
push eax
lea eax, [esi + 0x9b]
push eax
call fcn.0045d450
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push str.DRAW_DIALOGBOX_NPCACTION_QUERY25
lea ecx, [ebp - 0xe0]
call fcn.0040f9f0
push 0
push 0xffffff
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0x4f
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0xfc]
add eax, 0x37
push eax
lea eax, [esi + 0x9c]
push eax
mov ecx, edi
call fcn.0045d450
lea ecx, [ebp - 0xe0]
call fcn.00411640
jmp case.default.0x4fc3e1
push ecx
push edx
call fcn.005aa4e8
add esp, 8
push 0x20
xorps xmm0, xmm0
mov dword [ebp - 0xe8], 0
push str.DRAW_DIALOGBOX_NPCACTION_QUERY25
lea ecx, [ebp - 0xf8]
mov dword [ebp - 0xe4], 0
movups xmmword [ebp - 0xf8], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0xf8]
mov dword [ebp - 4], 0x51
push eax
lea eax, [ebp - 0x124]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4ff554
mov eax, dword [eax]
push 0
push dword [ebp - 0x104]
mov ecx, edi
push eax
mov eax, dword [ebp - 0xfc]
add eax, 0x37
push eax
lea eax, [esi + 0x9c]
push eax
call fcn.0045d450
mov ecx, dword [ebp - 0xe4]
cmp ecx, 0xf
jbe case.default.0x4fc3e1
mov edx, dword [ebp - 0xf8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4ff5a1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4ff5e6
push ecx
push edx
call fcn.005aa4e8
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005aa550
mov esp, ebp
pop ebp
ret 8
call fcn.005ac169
call fcn.005ac169
call fcn.005ac169
call fcn.005ac169
call fcn.005ac169
call fcn.005ac169
call fcn.005ac169
nop
call 0x295045b4
retf