Function at 0x433400
Capabilities:
Get common file path
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x47579d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x294
push ebx
push ebp
push esi
mov esi, dword [esp + 0x2b0]
push edi
mov edi, ecx
mov eax, dword [esi]
lea ecx, [esp + 0x80]
push 4
push ecx
mov ecx, esi
call dword [eax + 0x34]
mov edx, dword [esi]
lea eax, [esp + 0x78]
push 4
push eax
mov ecx, esi
call dword [edx + 0x34]
mov edx, dword [esi]
lea eax, [esp + 0x74]
push 4
push eax
mov ecx, esi
call dword [edx + 0x34]
mov edx, dword [esi]
lea ebp, [edi + 0xa4]
push 4
push ebp
mov ecx, esi
call dword [edx + 0x34]
mov edx, dword [esi]
lea eax, [edi + 0xa8]
push 4
push eax
mov ecx, esi
call dword [edx + 0x34]
mov edx, dword [esi]
lea eax, [edi + 0xac]
push 4
push eax
mov ecx, esi
call dword [edx + 0x34]
mov eax, dword [esi]
lea ebx, [edi + 0x94]
push 4
push ebx
mov ecx, esi
call dword [eax + 0x34]
mov edx, dword [esi]
lea eax, [edi + 0x98]
push 4
push eax
mov ecx, esi
mov dword [esp + 0x34], eax
call dword [edx + 0x34]
mov edx, dword [esi]
lea eax, [edi + 0x9c]
push 4
push eax
mov ecx, esi
call dword [edx + 0x34]
mov eax, dword [esi]
lea ecx, [esp + 0x68]
push 4
push ecx
mov ecx, esi
call dword [eax + 0x34]
mov edx, dword [esi]
lea eax, [edi + 0xdc]
push 4
push eax
mov ecx, esi
call dword [edx + 0x34]
mov edx, dword [esi]
lea eax, [edi + 0xe0]
push 4
push eax
mov ecx, esi
call dword [edx + 0x34]
mov ecx, edi
call fcn.00435e50
push 0x489224
lea ecx, [esp + 0x40]
mov dword [edi + 0xa0], eax
call fcn.004654a8
push str.Narration.wav
lea ecx, [esp + 0x34]
mov dword [esp + 0x2b0], 0
call fcn.004654a8
push str.Background.wav
lea ecx, [esp + 0x38]
mov byte [esp + 0x2b0], 1
call fcn.004654a8
push 0x4892b0
lea ecx, [esp + 0x3c]
mov byte [esp + 0x2b0], 2
call fcn.004654a8
mov eax, dword [esi]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ecx
mov ecx, esi
mov byte [esp + 0x2b4], 3
call dword [eax + 0x10]
lea edx, [esp + 0x2c]
push edx
call fcn.00437d90
add esp, 8
mov edx, dword [esi]
lea eax, [esp + 0x24]
push 3
push eax
push ecx
mov ecx, esi
mov eax, esp
mov dword [esp + 0x24], esp
push eax
mov byte [esp + 0x2bc], 4
call dword [edx + 0x10]
lea ecx, [esp + 0x20]
push ecx
call fcn.00437d90
add esp, 8
mov ecx, eax
mov byte [esp + 0x2b4], 5
call fcn.0045f960
mov edx, dword [esp + 0x3c]
mov eax, dword [eax]
push edx
push eax
call fcn.004509cd
add esp, 8
lea ecx, [esp + 0x24]
test eax, eax
setne byte [esp + 0x4f]
call fcn.0046543a
lea ecx, [esp + 0x14]
mov byte [esp + 0x2ac], 4
call fcn.0046543a
mov al, byte [esp + 0x4f]
test al, al
je 0x433615
lea eax, [esp + 0x28]
lea ecx, [esp + 0x3c]
push eax
lea edx, [esp + 0x28]
push ecx
push edx
call fcn.00465669
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x2b0], 6
call fcn.00465573
lea ecx, [esp + 0x24]
mov byte [esp + 0x2ac], 4
call fcn.0046543a
mov eax, dword [esp + 0x80]
test eax, eax
je 0x433661
mov eax, dword [esp + 0x78]
test eax, eax
je 0x433661
mov eax, dword [esp + 0x74]
test eax, eax
je 0x433637
push str._DistSound.wav
jmp 0x43363c
push str._DistNarration.wav
lea ecx, [esp + 0x34]
call fcn.004655c3
push str._DistBackground.wav
lea ecx, [esp + 0x38]
call fcn.004655c3
push str._Dist
lea ecx, [esp + 0x3c]
call fcn.004655c3
cmp dword [ebp], 0
je 0x433c76
mov eax, dword [esp + 0x68]
test eax, eax
je 0x433861
lea eax, [esp + 0x9c]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
lea ecx, [esp + 0x9c]
push ecx
lea ecx, [esp + 0x14]
call fcn.004654a8
lea edx, [esp + 0x30]
lea eax, [esp + 0x28]
push edx
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
mov byte [esp + 0x2b8], 7
call fcn.004651af
lea ecx, [esp + 0x1c]
push ecx
call fcn.00437d00
add esp, 8
lea edx, [esp + 0x28]
push eax
push edx
mov byte [esp + 0x2b8], 8
call fcn.00465669
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x2b0], 9
call fcn.004657de
lea ecx, [esp + 0x24]
mov byte [esp + 0x2ac], 8
call fcn.0046543a
lea ecx, [esp + 0x14]
mov byte [esp + 0x2ac], 7
call fcn.0046543a
lea eax, [esp + 0x10]
lea ecx, [edi + 0xc8]
push eax
call fcn.00465573
lea ecx, [esp + 0x54]
call fcn.00402680
lea ecx, [esp + 0x10]
mov byte [esp + 0x2ac], 0xa
push ecx
call fcn.00438f40
add esp, 4
test eax, eax
jne 0x4337cd
mov edx, dword [esp + 0x10]
push eax
push 0x1002
push edx
lea ecx, [esp + 0x60]
call fcn.00466330
test eax, eax
je 0x433785
lea eax, [esp + 0x54]
push esi
push eax
mov ecx, edi
call fcn.00436470
lea ecx, [edi + 0x54]
mov dword [edi + 0x90], 1
lea edx, [esp + 0x10]
mov eax, dword [ecx + 8]
push edx
push eax
call fcn.00460ed7
jmp 0x4337d7
push 0
push 0
push 0x14a
call fcn.00438120
add esp, 4
mov ecx, edi
push eax
call fcn.00463559
lea ecx, [esp + 0x54]
mov dword [ebp], 0
mov dword [ebx], 0
mov byte [esp + 0x2ac], 7
call fcn.004026c0
mov byte [esp + 0x2ac], 4
lea ecx, [esp + 0x10]
jmp 0x433a5f
push esi
push 0
mov ecx, edi
call fcn.00436470
mov eax, dword [edi + 0x3c]
test eax, eax
jne 0x4337eb
mov ecx, edi
call fcn.00435e50
mov dword [edi + 0xa0], eax
mov eax, dword [edi + 0xa0]
test eax, eax
je 0x43383f
mov eax, dword [esp + 0x10]
mov ecx, dword [edi + 0x3c]
push eax
push 0
call fcn.00439be0
test eax, eax
jne 0x433828
push eax
push eax
push 0x17d
call fcn.00438120
add esp, 4
mov ecx, edi
push eax
call fcn.00463559
mov dword [ebp], 0
jmp 0x43382f
mov dword [ebp], 1
mov ecx, dword [edi + 0x3c]
push 0
call fcn.00439ae0
mov dword [edi + 0xd4], eax
lea ecx, [esp + 0x54]
mov byte [esp + 0x2ac], 7
call fcn.004026c0
mov byte [esp + 0x2ac], 4
lea ecx, [esp + 0x10]
jmp 0x433c71
cmp dword [ebx], 0
je 0x433b98
lea ecx, [esp + 0x9c]
push ecx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
lea edx, [esp + 0x9c]
lea ecx, [esp + 0x10]
push edx
call fcn.004654a8
lea eax, [esp + 0x30]
lea edx, [esp + 0x28]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
mov byte [esp + 0x2b8], 0xb
call fcn.004651af
lea eax, [esp + 0x1c]
push eax
call fcn.00437d00
add esp, 8
lea ecx, [esp + 0x28]
push eax
push ecx
mov byte [esp + 0x2b8], 0xc
call fcn.00465669
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x2b0], 0xd
call fcn.004657de
lea ecx, [esp + 0x24]
mov byte [esp + 0x2ac], 0xc
call fcn.0046543a
lea ecx, [esp + 0x14]
mov byte [esp + 0x2ac], 0xb
call fcn.0046543a
lea edx, [esp + 0x10]
lea ecx, [edi + 0xc8]
push edx
call fcn.00465573
lea ecx, [esp + 0x54]
call fcn.00402680
lea eax, [esp + 0x10]
mov byte [esp + 0x2ac], 0xe
push eax
call fcn.00438f40
add esp, 4
test eax, eax
jne 0x433ac3
mov ecx, dword [esp + 0x10]
push eax
push 0x1002
push ecx
lea ecx, [esp + 0x60]
call fcn.00466330
test eax, eax
je 0x433a1c
mov edx, dword [esi]
lea eax, [esp + 0x1c]
push 4
push eax
mov ecx, esi
call dword [edx + 0x34]
mov edx, dword [esi]
lea eax, [esp + 0x14]
push 4
push eax
mov ecx, esi
call dword [edx + 0x34]
mov ecx, dword [esp + 0x14]
push ecx
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov ecx, dword [esp + 0x14]
mov edx, dword [esi]
push ecx
push eax
mov ecx, esi
mov dword [esp + 0x4c], eax
call dword [edx + 0x34]
mov edx, dword [esp + 0x1c]
push edx
call fcn.00450390
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x24]
mov dword [esp + 0x24], ecx
push ecx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x50], eax
push ecx
push edx
push eax
call fcn.0043df20
add esp, 0x14
test eax, eax
je 0x4339c8
push 0x10
push 0x489150
push 0x149
jmp 0x433a25
mov eax, dword [esp + 0x44]
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x48]
push ecx
push edx
lea ecx, [esp + 0x5c]
call fcn.004026d0
lea ecx, [esp + 0x54]
call fcn.0046654b
mov eax, dword [esp + 0x48]
push eax
call fcn.004502a7
lea ecx, [edi + 0x54]
add esp, 4
mov dword [edi + 0x90], 1
lea edx, [esp + 0x10]
mov eax, dword [ecx + 8]
push edx
push eax
call fcn.00460ed7
jmp 0x433b08
push 0
push 0
push 0x14a
call fcn.00438120
add esp, 4
mov ecx, edi
push eax
call fcn.00463559
lea ecx, [esp + 0x54]
mov dword [ebp], 0
mov dword [ebx], 0
mov byte [esp + 0x2ac], 0xb
call fcn.004026c0
mov byte [esp + 0x2ac], 4
lea ecx, [esp + 0x10]
call fcn.0046543a
lea ecx, [esp + 0x28]
mov byte [esp + 0x2ac], 3
call fcn.0046543a
lea ecx, [esp + 0x38]
mov byte [esp + 0x2ac], 2
call fcn.0046543a
lea ecx, [esp + 0x34]
mov byte [esp + 0x2ac], 1
call fcn.0046543a
lea ecx, [esp + 0x30]
mov byte [esp + 0x2ac], 0
call fcn.0046543a
lea ecx, [esp + 0x3c]
mov dword [esp + 0x2ac], 0xffffffff
call fcn.0046543a
xor eax, eax
jmp 0x434826
mov eax, dword [esi]
lea ecx, [esp + 0x18]
push 4
push ecx
mov ecx, esi
call dword [eax + 0x34]
mov edx, dword [esi]
lea eax, [esp + 0x14]
push 4
push eax
mov ecx, esi
call dword [edx + 0x34]
mov ecx, dword [esp + 0x14]
push ecx
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov ecx, dword [esp + 0x14]
mov edx, dword [esi]
push ecx
push eax
mov ecx, esi
mov dword [esp + 0x28], eax
call dword [edx + 0x34]
mov edx, dword [esp + 0x20]
push edx
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, dword [edi + 0x3c]
test eax, eax
jne 0x433b1c
mov ecx, edi
call fcn.00435e50
mov dword [edi + 0xa0], eax
mov eax, dword [edi + 0xa0]
test eax, eax
je 0x433b76
mov eax, dword [esp + 0x10]
mov ecx, dword [edi + 0x3c]
push eax
push 0
call fcn.00439be0
test eax, eax
jne 0x433b5f
push eax
push eax
push 0x17d
call fcn.00438120
add esp, 4
mov ecx, edi
push eax
call fcn.00463559
mov dword [ebp], 0
mov dword [ebx], 0
jmp 0x433b66
mov dword [ebp], 1
mov ecx, dword [edi + 0x3c]
push 0
call fcn.00439ae0
mov dword [edi + 0xd4], eax
lea ecx, [esp + 0x54]
mov byte [esp + 0x2ac], 0xb
call fcn.004026c0
mov byte [esp + 0x2ac], 4
lea ecx, [esp + 0x10]
jmp 0x433c71
mov edx, dword [esi]
lea ecx, [esp + 0x30]
push ecx
push ecx
mov eax, esp
mov dword [esp + 0x20], esp
push eax
mov ecx, esi
call dword [edx + 0x18]
lea ecx, [esp + 0x28]
push ecx
call fcn.00437d00
add esp, 8
lea edx, [esp + 0x20]
push eax
push edx
mov byte [esp + 0x2b8], 0xf
call fcn.00465669
lea ecx, [esp + 0x20]
mov byte [esp + 0x2ac], 0x11
call fcn.0046543a
lea eax, [esp + 0x1c]
lea ecx, [edi + 0xc8]
push eax
call fcn.00465573
mov eax, dword [edi + 0x3c]
test eax, eax
jne 0x433c01
mov ecx, edi
call fcn.00435e50
mov dword [edi + 0xa0], eax
mov eax, dword [edi + 0xa0]
test eax, eax
je 0x433c65
mov ecx, dword [esp + 0x1c]
push ecx
mov ecx, dword [edi + 0x3c]
push 0
call fcn.00439be0
test eax, eax
jne 0x433c44
push eax
push eax
push 0x17d
call fcn.00438120
add esp, 4
mov ecx, edi
push eax
call fcn.00463559
mov dword [ebp], 0
mov dword [ebx], 0
jmp 0x433c65
mov ecx, dword [edi + 0x3c]
push 0
mov dword [ebp], 1
mov dword [edi + 0x90], 1
call fcn.00439ae0
mov dword [edi + 0xd4], eax
mov byte [esp + 0x2ac], 4
lea ecx, [esp + 0x1c]
call fcn.0046543a
mov eax, dword [edi + 0xa8]
lea ebp, [edi + 0xa8]
test eax, eax
mov dword [esp + 0x44], ebp
je 0x43435e
mov eax, dword [esp + 0x68]
test eax, eax
je 0x433edc
lea edx, [esp + 0x9c]
push edx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
lea eax, [esp + 0x9c]
lea ecx, [esp + 0x10]
push eax
call fcn.004654a8
lea ecx, [esp + 0x34]
lea edx, [esp + 0x28]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
mov byte [esp + 0x2b8], 0x12
call fcn.004651af
lea eax, [esp + 0x2c]
push eax
call fcn.00437d00
add esp, 8
lea ecx, [esp + 0x24]
mov bl, 0x13
push eax
push ecx
mov byte [esp + 0x2b8], bl
call fcn.00465669
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x2b0], 0x14
call fcn.004657de
lea ecx, [esp + 0x20]
mov byte [esp + 0x2ac], bl
call fcn.0046543a
lea ecx, [esp + 0x24]
mov byte [esp + 0x2ac], 0x12
call fcn.0046543a
lea edx, [esp + 0x10]
lea ecx, [edi + 0xcc]
push edx
call fcn.00465573
lea ecx, [esp + 0x54]
call fcn.00402680
lea eax, [esp + 0x10]
mov byte [esp + 0x2ac], 0x15
push eax
call fcn.00438f40
add esp, 4
test eax, eax
jne 0x433e56
mov ecx, dword [esp + 0x10]
push eax
push 0x1002
push ecx
lea ecx, [esp + 0x60]
call fcn.00466330
test eax, eax
je 0x433dab
lea edx, [esp + 0x54]
push esi
push edx
mov ecx, edi
call fcn.00436470
lea ecx, [edi + 0x54]
mov dword [edi + 0x8c], 1
lea edx, [esp + 0x10]
mov eax, dword [ecx + 8]
push edx
push eax
call fcn.00460ed7
jmp 0x433e60
push 0
push 0
push 0x17f
call fcn.00438120
add esp, 4
mov ecx, edi
push eax
call fcn.00463559
mov eax, dword [esp + 0x2c]
lea ecx, [esp + 0x54]
mov dword [ebp], 0
mov byte [esp + 0x2ac], 0x12
mov dword [eax], 0
call fcn.004026c0
lea ecx, [esp + 0x10]
mov byte [esp + 0x2ac], 4
call fcn.0046543a
lea ecx, [esp + 0x28]
mov byte [esp + 0x2ac], 3
call fcn.0046543a
lea ecx, [esp + 0x38]
mov byte [esp + 0x2ac], 2
call fcn.0046543a
lea ecx, [esp + 0x34]
mov byte [esp + 0x2ac], 1
call fcn.0046543a
lea ecx, [esp + 0x30]
mov byte [esp + 0x2ac], 0
call fcn.0046543a
lea ecx, [esp + 0x3c]
mov dword [esp + 0x2ac], 0xffffffff
call fcn.0046543a
xor eax, eax
jmp 0x434826
push esi
push 0
mov ecx, edi
call fcn.00436470
mov eax, dword [edi + 0x3c]
test eax, eax
je 0x433e81
push ecx
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
call fcn.004651af
mov ecx, edi
call fcn.00436210
jmp 0x433eba
mov ecx, edi
call fcn.00435e50
test eax, eax
je 0x433eb0
push ecx
lea eax, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
mov dword [edi + 0xa0], 1
call fcn.004651af
mov ecx, edi
call fcn.00436210
jmp 0x433eba
mov dword [edi + 0xa0], 0
lea ecx, [esp + 0x54]
mov byte [esp + 0x2ac], 0x12
call fcn.004026c0
mov byte [esp + 0x2ac], 4
lea ecx, [esp + 0x10]
jmp 0x434359
mov ecx, dword [esp + 0x2c]
cmp dword [ecx], 0
je 0x434294
lea edx, [esp + 0x9c]
push edx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
lea eax, [esp + 0x9c]
lea ecx, [esp + 0x10]
push eax
call fcn.004654a8
lea ecx, [esp + 0x34]
lea edx, [esp + 0x28]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
mov byte [esp + 0x2b8], 0x16
call fcn.004651af
lea eax, [esp + 0x2c]
push eax
call fcn.00437d00
add esp, 8
lea ecx, [esp + 0x24]
mov bl, 0x17
push eax
push ecx
mov byte [esp + 0x2b8], bl
call fcn.00465669
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x2b0], 0x18
call fcn.004657de
lea ecx, [esp + 0x20]
mov byte [esp + 0x2ac], bl
call fcn.0046543a
lea ecx, [esp + 0x24]
mov byte [esp + 0x2ac], 0x16
call fcn.0046543a
lea edx, [esp + 0x10]
lea ecx, [edi + 0xcc]
push edx
call fcn.00465573
lea ecx, [esp + 0x54]
call fcn.00402680
lea eax, [esp + 0x10]
mov byte [esp + 0x2ac], 0x19
push eax
call fcn.00438f40
add esp, 4
test eax, eax
jne 0x4341d9
mov ecx, dword [esp + 0x10]
push eax
push 0x1002
push ecx
lea ecx, [esp + 0x60]
call fcn.00466330
test eax, eax
je 0x43412e
mov edx, dword [esi]
lea eax, [esp + 0x1c]
push 4
push eax
mov ecx, esi
call dword [edx + 0x34]
mov edx, dword [esi]
lea eax, [esp + 0x14]
push 4
push eax
mov ecx, esi
call dword [edx + 0x34]
mov ecx, dword [esp + 0x14]
push ecx
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov edx, dword [esi]
mov ebp, eax
mov eax, dword [esp + 0x14]
mov ecx, esi
push eax
push ebp
call dword [edx + 0x34]
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.00450390
mov ebx, eax
mov eax, dword [esp + 0x20]
push eax
lea edx, [esp + 0x28]
push ebp
push edx
push ebx
mov dword [esp + 0x34], eax
call fcn.0043df20
add esp, 0x14
test eax, eax
je 0x4340e6
push 0x10
push 0x489150
push 0x149
call fcn.00438120
add esp, 4
mov ecx, edi
push eax
call fcn.00463559
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x44]
mov byte [esp + 0x2ac], 0x16
mov dword [ecx], 0
lea ecx, [esp + 0x54]
mov dword [eax], 0
call fcn.004026c0
lea ecx, [esp + 0x10]
mov byte [esp + 0x2ac], 4
call fcn.0046543a
lea ecx, [esp + 0x28]
mov byte [esp + 0x2ac], 3
call fcn.0046543a
lea ecx, [esp + 0x38]
mov byte [esp + 0x2ac], 2
call fcn.0046543a
lea ecx, [esp + 0x34]
mov byte [esp + 0x2ac], 1
call fcn.0046543a
lea ecx, [esp + 0x30]
mov byte [esp + 0x2ac], 0
call fcn.0046543a
lea ecx, [esp + 0x3c]
mov dword [esp + 0x2ac], 0xffffffff
call fcn.0046543a
xor eax, eax
jmp 0x434826
push ebp
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov edx, dword [esp + 0x1c]
lea ecx, [esp + 0x54]
push edx
push ebx
call fcn.004026d0
lea ecx, [esp + 0x54]
call fcn.0046654b
push ebx
call fcn.004502a7
lea ecx, [edi + 0x54]
add esp, 4
mov dword [edi + 0x8c], 1
lea edx, [esp + 0x10]
mov eax, dword [ecx + 8]
push edx
push eax
call fcn.00460ed7
jmp 0x434218
push 0
push 0
push 0x17f
call fcn.00438120
add esp, 4
mov ecx, edi
push eax
call fcn.00463559
mov eax, dword [esp + 0x2c]
lea ecx, [esp + 0x54]
mov dword [ebp], 0
mov byte [esp + 0x2ac], 0x16
mov dword [eax], 0
call fcn.004026c0
lea ecx, [esp + 0x10]
mov byte [esp + 0x2ac], 4
call fcn.0046543a
lea ecx, [esp + 0x28]
mov byte [esp + 0x2ac], 3
call fcn.0046543a
lea ecx, [esp + 0x38]
mov byte [esp + 0x2ac], 2
call fcn.0046543a
lea ecx, [esp + 0x34]
mov byte [esp + 0x2ac], 1
call fcn.0046543a
lea ecx, [esp + 0x30]
mov byte [esp + 0x2ac], 0
call fcn.0046543a
lea ecx, [esp + 0x3c]
mov dword [esp + 0x2ac], 0xffffffff
call fcn.0046543a
xor eax, eax
jmp 0x434826
mov edx, dword [esi]
lea eax, [esp + 0x18]
push 4
push eax
mov ecx, esi
call dword [edx + 0x34]
mov edx, dword [esi]
lea eax, [esp + 0x14]
push 4
push eax
mov ecx, esi
call dword [edx + 0x34]
mov ecx, dword [esp + 0x14]
push ecx
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov edx, dword [esi]
mov ebx, eax
mov eax, dword [esp + 0x14]
mov ecx, esi
push eax
push ebx
call dword [edx + 0x34]
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, dword [edi + 0x3c]
test eax, eax
je 0x434239
push ecx
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
call fcn.004651af
mov ecx, edi
call fcn.00436210
jmp 0x434272
mov ecx, edi
call fcn.00435e50
test eax, eax
je 0x434268
push ecx
lea eax, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
mov dword [edi + 0xa0], 1
call fcn.004651af
mov ecx, edi
call fcn.00436210
jmp 0x434272
mov dword [edi + 0xa0], 0
lea ecx, [esp + 0x54]
mov byte [esp + 0x2ac], 0x16
call fcn.004026c0
mov byte [esp + 0x2ac], 4
lea ecx, [esp + 0x10]
jmp 0x434359
mov edx, dword [esi]
lea ecx, [esp + 0x34]
push ecx
push ecx
mov eax, esp
mov dword [esp + 0x20], esp
push eax
mov ecx, esi
call dword [edx + 0x18]
lea ecx, [esp + 0x28]
push ecx
call fcn.00437d00
add esp, 8
lea edx, [esp + 0x30]
push eax
push edx
mov byte [esp + 0x2b8], 0x1a
call fcn.00465669
lea ecx, [esp + 0x20]
mov byte [esp + 0x2ac], 0x1c
call fcn.0046543a
lea eax, [esp + 0x2c]
lea ecx, [edi + 0xcc]
push eax
call fcn.00465573
mov eax, dword [edi + 0x3c]
test eax, eax
je 0x43430a
push ecx
lea edx, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
call fcn.004651af
mov ecx, edi
call fcn.00436210
jmp 0x434343
mov ecx, edi
call fcn.00435e50
test eax, eax
je 0x434339
push ecx
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
mov dword [edi + 0xa0], 1
call fcn.004651af
mov ecx, edi
call fcn.00436210
jmp 0x434343
mov dword [edi + 0xa0], 0
mov dword [edi + 0x8c], 1
mov byte [esp + 0x2ac], 4
lea ecx, [esp + 0x2c]
call fcn.0046543a
mov eax, dword [edi + 0xac]
test eax, eax
je 0x4347b4
mov eax, dword [edi + 0x3c]
test eax, eax
jne 0x434386
mov ecx, edi
call fcn.00435e50
neg eax
sbb eax, eax
neg eax
mov dword [edi + 0xa0], eax
mov eax, dword [0x48b464]
mov dword [esp + 0x44], eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x40], eax
mov edx, dword [esi]
lea eax, [esp + 0x64]
push 4
push eax
mov ecx, esi
mov byte [esp + 0x2b4], 0x1f
call dword [edx + 0x34]
mov eax, dword [edi + 0x9c]
test eax, eax
jne 0x4344c5
mov eax, dword [esp + 0x64]
xor ebp, ebp
test eax, eax
jle 0x4344b6
mov bl, 0x21
mov edx, dword [esi]
lea eax, [esp + 0x20]
push 4
push eax
mov ecx, esi
call dword [edx + 0x34]
mov eax, dword [esp + 0x20]
test eax, eax
je 0x434499
push ebp
lea ecx, [esp + 0x54]
push str.Effect_d.wav
push ecx
call fcn.0045fd47
add esp, 0xc
lea edx, [esp + 0x50]
lea eax, [esp + 0x38]
push edx
mov edx, dword [esi]
push eax
push ecx
mov eax, esp
mov dword [esp + 0x24], esp
push eax
mov ecx, esi
call dword [edx + 0x18]
lea ecx, [esp + 0x28]
push ecx
call fcn.00437d00
add esp, 8
lea edx, [esp + 0x1c]
push eax
push edx
mov byte [esp + 0x2bc], 0x20
call fcn.00465669
push eax
lea eax, [esp + 0x2c]
push eax
mov byte [esp + 0x2b8], bl
call fcn.00465669
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x2b0], 0x22
call fcn.00465573
lea ecx, [esp + 0x24]
mov byte [esp + 0x2ac], bl
call fcn.0046543a
lea ecx, [esp + 0x14]
mov byte [esp + 0x2ac], 0x20
call fcn.0046543a
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2ac], 0x1f
call fcn.0046543a
mov edx, dword [edi + 0x44]
lea ecx, [esp + 0x40]
push ecx
lea ecx, [edx + ebp*4]
call fcn.00465573
jmp 0x4344a9
mov eax, dword [edi + 0x44]
push 0x48f490
lea ecx, [eax + ebp*4]
call fcn.004655c3
mov eax, dword [esp + 0x64]
inc ebp
cmp ebp, eax
jl 0x4343cb
mov dword [edi + 0x88], 1
jmp 0x434781
lea ecx, [esp + 0x84]
call fcn.00402680
lea ecx, [esp + 0x1a0]
mov byte [esp + 0x2ac], 0x23
push ecx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
lea edx, [esp + 0x1a0]
lea ecx, [esp + 0x48]
push edx
call fcn.004654a8
mov eax, dword [esp + 0x64]
xor ebp, ebp
test eax, eax
mov byte [esp + 0x2ac], 0x24
mov dword [esp + 0x1c], ebp
jle 0x43475c
mov eax, dword [esi]
lea ecx, [esp + 0x70]
push 4
push ecx
mov ecx, esi
call dword [eax + 0x34]
mov eax, dword [esp + 0x70]
test eax, eax
je 0x43474b
push ebp
lea edx, [esp + 0x54]
push str.Effect_d.wav
push edx
call fcn.0045fd47
add esp, 0xc
lea eax, [esp + 0x50]
lea ecx, [esp + 0x38]
lea edx, [esp + 0x28]
push eax
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0xa0], esp
push edx
call fcn.004651af
lea eax, [esp + 0x24]
push eax
call fcn.00437d00
add esp, 8
lea ecx, [esp + 0x50]
push eax
lea edx, [esp + 0x78]
push ecx
push edx
mov byte [esp + 0x2c0], 0x25
call fcn.00465669
push eax
lea eax, [esp + 0x88]
push eax
mov byte [esp + 0x2bc], 0x26
call fcn.00465669
lea ecx, [esp + 0x24]
push eax
push ecx
mov byte [esp + 0x2b8], 0x27
call fcn.00465669
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x2b0], 0x28
call fcn.00465573
lea ecx, [esp + 0x20]
mov byte [esp + 0x2ac], 0x27
call fcn.0046543a
lea ecx, [esp + 0x7c]
mov byte [esp + 0x2ac], 0x26
call fcn.0046543a
lea ecx, [esp + 0x6c]
mov byte [esp + 0x2ac], 0x25
call fcn.0046543a
lea ecx, [esp + 0x18]
mov byte [esp + 0x2ac], 0x24
call fcn.0046543a
mov eax, dword [edi + 0x44]
lea edx, [esp + 0x40]
push edx
lea ecx, [eax + ebp*4]
call fcn.00465573
lea ecx, [esp + 0x40]
push ecx
call fcn.00438f40
add esp, 4
test eax, eax
jne 0x434709
mov edx, dword [esp + 0x40]
push eax
push 0x1002
push edx
lea ecx, [esp + 0x90]
call fcn.00466330
test eax, eax
je 0x434928
mov eax, dword [esi]
lea ecx, [esp + 0x2c]
push 4
push ecx
mov ecx, esi
call dword [eax + 0x34]
mov edx, dword [esi]
lea eax, [esp + 0x14]
push 4
push eax
mov ecx, esi
call dword [edx + 0x34]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x2c]
cmp ecx, eax
ja 0x434676
mov dword [esp + 0x2c], eax
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov edx, dword [esi]
mov ebp, eax
mov eax, dword [esp + 0x14]
mov ecx, esi
push eax
push ebp
call dword [edx + 0x34]
mov ecx, dword [esp + 0x2c]
push ecx
call fcn.00450390
mov ebx, eax
mov eax, dword [esp + 0x30]
push eax
lea edx, [esp + 0x18]
push ebp
push edx
push ebx
mov dword [esp + 0x24], eax
call fcn.0043df20
add esp, 0x14
test eax, eax
jne 0x434841
push ebp
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x84]
push eax
push ebx
call fcn.004026d0
lea ecx, [esp + 0x84]
call fcn.0046654b
push ebx
call fcn.004502a7
lea ecx, [edi + 0x54]
add esp, 4
mov dword [edi + 0x88], 1
lea edx, [esp + 0x40]
mov eax, dword [ecx + 8]
push edx
push eax
call fcn.00460ed7
mov ebp, dword [esp + 0x1c]
jmp 0x43474b
mov eax, dword [esi]
lea ecx, [esp + 0x98]
push 4
push ecx
mov ecx, esi
call dword [eax + 0x34]
mov edx, dword [esi]
lea eax, [esp + 0x24]
push 4
push eax
mov ecx, esi
call dword [edx + 0x34]
mov ecx, dword [esp + 0x24]
push ecx
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov edx, dword [esi]
mov ebx, eax
mov eax, dword [esp + 0x24]
mov ecx, esi
push eax
push ebx
call dword [edx + 0x34]
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, dword [esp + 0x64]
inc ebp
cmp ebp, eax
mov dword [esp + 0x1c], ebp
jl 0x434517
lea ecx, [esp + 0x48]
mov byte [esp + 0x2ac], 0x23
call fcn.0046543a
lea ecx, [esp + 0x84]
mov byte [esp + 0x2ac], 0x1f
call fcn.004026c0
lea ecx, [esp + 0x40]
mov byte [esp + 0x2ac], 0x1e
call fcn.0046543a
lea ecx, [esp + 0x50]
mov byte [esp + 0x2ac], 0x1d
call fcn.0046543a
lea ecx, [esp + 0x44]
mov byte [esp + 0x2ac], 4
call fcn.0046543a
mov ecx, dword [edi + 0xe0]
mov edx, dword [edi + 0xdc]
push ecx
push edx
mov ecx, edi
call fcn.00436140
lea ecx, [esp + 0x28]
mov byte [esp + 0x2ac], 3
call fcn.0046543a
lea ecx, [esp + 0x38]
mov byte [esp + 0x2ac], 2
call fcn.0046543a
lea ecx, [esp + 0x34]
mov byte [esp + 0x2ac], 1
call fcn.0046543a
lea ecx, [esp + 0x30]
mov byte [esp + 0x2ac], 0
call fcn.0046543a
lea ecx, [esp + 0x3c]
mov dword [esp + 0x2ac], 0xffffffff
call fcn.0046543a
mov eax, 1
mov ecx, dword [esp + 0x2a4]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x2a0
ret 4
push 0x10
push 0x489150
push 0x149
call fcn.00438120
add esp, 4
mov ecx, edi
push eax
call fcn.00463559
mov ecx, dword [edi + 0x44]
mov edx, dword [esp + 0x1c]
push 0x48f490
lea ecx, [ecx + edx*4]
call fcn.004655c3
lea ecx, [esp + 0x48]
mov byte [esp + 0x2ac], 0x23
call fcn.0046543a
lea ecx, [esp + 0x84]
mov byte [esp + 0x2ac], 0x1f
call fcn.004026c0
lea ecx, [esp + 0x40]
mov byte [esp + 0x2ac], 0x1e
call fcn.0046543a
lea ecx, [esp + 0x50]
mov byte [esp + 0x2ac], 0x1d
call fcn.0046543a
lea ecx, [esp + 0x44]
mov byte [esp + 0x2ac], 4
call fcn.0046543a
lea ecx, [esp + 0x28]
mov byte [esp + 0x2ac], 3
call fcn.0046543a
lea ecx, [esp + 0x38]
mov byte [esp + 0x2ac], 2
call fcn.0046543a
lea ecx, [esp + 0x34]
mov byte [esp + 0x2ac], 1
call fcn.0046543a
lea ecx, [esp + 0x30]
mov byte [esp + 0x2ac], 0
call fcn.0046543a
lea ecx, [esp + 0x3c]
mov dword [esp + 0x2ac], 0xffffffff
call fcn.0046543a
xor eax, eax
jmp 0x434826
push 0
push 0
push 0x180
call fcn.00438120
add esp, 4
mov ecx, edi
push eax
call fcn.00463559
mov eax, dword [edi + 0x44]
push 0x48f490
lea ecx, [eax + ebp*4]
call fcn.004655c3
lea ecx, [esp + 0x48]
mov byte [esp + 0x2ac], 0x23
call fcn.0046543a
lea ecx, [esp + 0x84]
mov byte [esp + 0x2ac], 0x1f
call fcn.004026c0
lea ecx, [esp + 0x40]
mov byte [esp + 0x2ac], 0x1e
call fcn.0046543a
lea ecx, [esp + 0x50]
mov byte [esp + 0x2ac], 0x1d
call fcn.0046543a
lea ecx, [esp + 0x44]
mov byte [esp + 0x2ac], 4
call fcn.0046543a
lea ecx, [esp + 0x28]
mov byte [esp + 0x2ac], 3
call fcn.0046543a
lea ecx, [esp + 0x38]
mov byte [esp + 0x2ac], 2
call fcn.0046543a
lea ecx, [esp + 0x34]
mov byte [esp + 0x2ac], 1
call fcn.0046543a
lea ecx, [esp + 0x30]
mov byte [esp + 0x2ac], 0
call fcn.0046543a
lea ecx, [esp + 0x3c]
mov dword [esp + 0x2ac], 0xffffffff
call fcn.0046543a
xor eax, eax
jmp 0x434826