Function at 0x471330
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4c4cd3
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x340
mov eax, dword [0x51eea4]
xor eax, dword [ebp + 4]
push ebx
push esi
mov ebx, ecx
push edi
mov dword [esp + 0x344], eax
mov dword [esp + 0x1c], ebx
call fcn.004151d0
xor edi, edi
lea esi, [ebx + 0xc0]
mov dword [ebx], 0x4f67cc
mov dword [esp + 0x354], edi
mov dword [esi + 4], edi
mov dword [esi + 8], edi
mov dword [esi + 0xc], edi
mov dword [ebx + 0xd8], edi
mov dword [ebx + 0xe0], edi
mov dword [ebx + 0xe4], edi
mov dword [ebx + 0xe8], edi
push 0x15
mov ecx, esi
mov byte [esp + 0x358], 3
call fcn.00471190
mov eax, dword [esi + 4]
cmp eax, edi
je 0x4713d4
mov ecx, dword [esi + 8]
push ecx
push eax
mov ecx, esi
call fcn.00426230
mov eax, dword [esi + 4]
push eax
call fcn.004ade5d
add esp, 4
lea edx, [esp + 0x2c]
push edx
mov dword [esi + 4], edi
mov dword [esi + 8], edi
mov dword [esi + 0xc], edi
call fcn.0040d4d0
mov ecx, eax
call fcn.00401650
mov ecx, dword [eax]
mov byte [esp + 0x354], 4
call fcn.00401120
mov dword [ebx + 0xd0], eax
mov eax, dword [esp + 0x2c]
cmp eax, edi
mov dword [ebx + 0xd4], edx
mov byte [esp + 0x354], 3
je 0x471432
mov edx, dword [eax + 4]
mov ecx, eax
add eax, 4
dec edx
mov dword [eax], edx
mov eax, edx
mov dword [esp + 0x14], eax
jne 0x471432
mov edx, dword [ecx]
push 1
call dword [edx]
push 0x1e8
call fcn.004ad909
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, edi
mov byte [esp + 0x354], 5
je 0x471458
mov ecx, eax
call fcn.0042dd20
jmp 0x47145a
xor eax, eax
cmp eax, edi
mov byte [esp + 0x354], 3
je 0x471469
inc dword [eax + 4]
mov ecx, dword [ebx + 0xd8]
cmp ecx, edi
mov dword [ebx + 0xd8], eax
je 0x47148c
mov edx, dword [ecx + 4]
dec edx
mov eax, edx
cmp eax, edi
mov dword [ecx + 4], edx
jne 0x47148c
mov eax, dword [ecx]
push 1
call dword [eax]
mov esi, dword [ebx + 0xd8]
push 0xbf800000
push 0xbf800000
push 0x44160000
push 0x44480000
lea ecx, [esp + 0x2e8]
call fcn.00422f90
push eax
mov ecx, esi
call fcn.0042adf0
mov eax, str.data_texture_game_bg_winter1.dds
mov dword [esp + 0x7c], 0xf
mov dword [esp + 0x78], edi
mov byte [esp + 0x68], 0
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4714d3
sub eax, ecx
push eax
push str.data_texture_game_bg_winter1.dds
lea ecx, [esp + 0x6c]
call fcn.00402cd0
mov ecx, dword [ebx + 0xd8]
lea edx, [esp + 0x64]
push edx
mov byte [esp + 0x358], 6
call fcn.0042c070
cmp dword [esp + 0x7c], 0x10
mov byte [esp + 0x354], 3
jb 0x47151f
mov eax, dword [esp + 0x68]
push eax
call fcn.004ade5d
add esp, 4
mov ecx, dword [ebx + 0xd8]
push 0x447a0000
push edi
push edi
call fcn.00424870
mov eax, dword [ebx + 0xd8]
cmp eax, edi
push 1
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
mov dword [ecx], eax
je 0x47154b
inc dword [eax + 4]
mov byte [esp + 0x360], 7
call fcn.0040e220
mov edx, dword [eax]
mov ecx, eax
mov byte [esp + 0x360], 3
call dword [edx + 0x10]
lea esi, [ebx + 0xdc]
mov byte [ebx + 0xec], 1
mov eax, dword [esi + 4]
cmp eax, edi
je 0x471593
mov ecx, dword [esi + 8]
push ecx
push eax
mov ecx, esi
call fcn.00426230
mov eax, dword [esi + 4]
push eax
call fcn.004ade5d
add esp, 4
mov eax, str._gui_treasuryscreen.xml
mov dword [esi + 4], edi
mov dword [esi + 8], edi
mov dword [esi + 0xc], edi
mov dword [esp + 0x7c], 0xf
mov dword [esp + 0x78], edi
mov byte [esp + 0x68], 0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4715b5
sub eax, edx
push eax
push str._gui_treasuryscreen.xml
lea ecx, [esp + 0x6c]
call fcn.00402cd0
mov esi, dword [esp + 0x1c]
lea edx, [esp + 0x64]
push edx
mov ecx, esi
mov byte [esp + 0x358], 8
call fcn.0041b630
mov bl, al
cmp dword [esp + 0x7c], 0x10
mov byte [esp + 0x354], 3
jb 0x471603
mov eax, dword [esp + 0x68]
push eax
call fcn.004ade5d
add esp, 4
test bl, bl
je 0x472b48
mov ebx, 0xf
mov eax, str.closebutton
mov dword [esp + 0x134], ebx
mov dword [esp + 0x130], edi
mov byte [esp + 0x120], 0
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x471630
sub eax, edx
push eax
push str.closebutton
lea ecx, [esp + 0x124]
call fcn.00402cd0
lea ecx, [esp + 0x11c]
push ecx
lea edx, [esp + 0x10]
push edx
mov ecx, esi
mov byte [esp + 0x35c], 9
call fcn.0040fff0
cmp dword [esp + 0x134], 0x10
mov byte [esp + 0x354], 0xb
jb 0x471689
mov eax, dword [esp + 0x120]
push eax
call fcn.004ade5d
add esp, 4
mov ecx, dword [esp + 0xc]
push 0x470840
push 1
mov dword [esp + 0x13c], ebx
mov dword [esp + 0x138], edi
mov byte [esp + 0x128], 0
call fcn.0040d960
lea ecx, [esp + 0xc0]
push ecx
call fcn.00437070
mov ecx, eax
call fcn.00437010
mov eax, dword [eax]
lea edx, [esp + 0x20]
push edx
mov ecx, eax
call fcn.00437210
mov eax, dword [esp + 0xc0]
cmp eax, edi
mov byte [esp + 0x354], 0xc
je 0x4716fd
mov edx, dword [eax + 4]
mov ecx, eax
add eax, 4
dec edx
mov dword [eax], edx
mov eax, edx
mov dword [esp + 0x14], eax
jne 0x4716fd
mov edx, dword [ecx]
push 1
call dword [edx]
xor esi, esi
mov dword [esp + 0x2c], esi
push esi
push 0x4f4a0c
lea eax, [esp + 0x254]
push str._s_d
push eax
call fcn.004ae68f
lea eax, [esp + 0x25c]
add esp, 0x10
mov dword [esp + 0xac], ebx
mov dword [esp + 0xa8], edi
mov byte [esp + 0x98], 0
lea ecx, [eax + 1]
mov edi, edi
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x471740
sub eax, ecx
push eax
lea ecx, [esp + 0x250]
push ecx
lea ecx, [esp + 0x9c]
call fcn.00402cd0
mov ecx, dword [esp + 0x1c]
lea edx, [esp + 0x94]
push edx
lea eax, [esp + 0xdc]
push eax
mov byte [esp + 0x35c], 0xd
call fcn.0040fff0
mov eax, dword [eax]
cmp eax, edi
mov byte [esp + 0x354], 0xe
je 0x471790
inc dword [eax + 4]
mov ecx, dword [esp + 0xc]
cmp ecx, edi
mov dword [esp + 0xc], eax
je 0x4717af
mov edx, dword [ecx + 4]
dec edx
mov eax, edx
cmp eax, edi
mov dword [ecx + 4], edx
jne 0x4717af
mov edx, dword [ecx]
push 1
call dword [edx]
mov ecx, dword [esp + 0xd8]
cmp ecx, edi
mov byte [esp + 0x354], 0xd
je 0x4717d9
mov edx, dword [ecx + 4]
lea eax, [ecx + 4]
dec edx
mov dword [eax], edx
mov eax, edx
mov dword [esp + 0x10], eax
jne 0x4717d9
mov edx, dword [ecx]
push 1
call dword [edx]
mov eax, dword [esp + 0xc]
mov byte [eax + 0xc4], 1
mov ecx, dword [esp + 0xc]
push edi
call fcn.004198f0
lea ecx, [esp + 0x94]
push ecx
mov ecx, dword [esp + 0x24]
add ecx, 0x240
call fcn.0043b390
test al, al
mov ecx, dword [esp + 0xc]
jne 0x471a26
lea edx, [esp + 0xd0]
push edx
call fcn.0040df80
mov ecx, dword [eax]
mov byte [esp + 0x354], 0xf
call fcn.0040d980
push eax
lea ecx, [esp + 0x2dc]
call fcn.0040de60
mov eax, dword [esp + 0xd0]
cmp eax, edi
mov byte [esp + 0x354], 0xd
je 0x471866
mov edx, dword [eax + 4]
mov ecx, eax
add eax, 4
dec edx
mov dword [eax], edx
mov eax, edx
mov dword [esp + 0x10], eax
jne 0x471866
mov edx, dword [ecx]
push 1
call dword [edx]
push 0x77ffffff
lea ecx, [esp + 0x2dc]
call fcn.004221c0
mov ecx, dword [esp + 0xc]
lea eax, [esp + 0xbc]
push eax
call fcn.0040df80
mov eax, dword [eax]
lea ecx, [esp + 0x2d8]
push ecx
mov ecx, eax
mov byte [esp + 0x358], 0x10
call fcn.0042adf0
mov eax, dword [esp + 0xbc]
cmp eax, edi
mov byte [esp + 0x354], 0xd
je 0x4718cb
mov edx, dword [eax + 4]
mov ecx, eax
add eax, 4
dec edx
mov dword [eax], edx
mov dword [esp + 0x10], edx
jne 0x4718cb
mov eax, dword [ecx]
push 1
call dword [eax]
lea ecx, [esp + 0xc4]
push ecx
mov ecx, dword [esp + 0x10]
call fcn.0040df80
mov eax, dword [eax]
push edi
push 1
mov ecx, eax
mov byte [esp + 0x35c], 0x11
call fcn.00424a40
mov eax, dword [esp + 0xc4]
cmp eax, edi
mov byte [esp + 0x354], 0xd
je 0x47191a
mov edx, dword [eax + 4]
mov ecx, eax
add eax, 4
dec edx
mov dword [eax], edx
mov dword [esp + 0x10], edx
jne 0x47191a
mov eax, dword [ecx]
push 1
call dword [eax]
lea ecx, [esp + 0x94]
push ecx
lea edx, [esp + 0x18c]
push str.hierarchy.Screen.Treasury.
push edx
call fcn.00403a40
push str.LockHint
push eax
lea eax, [esp + 0x174]
push eax
mov byte [esp + 0x36c], 0x12
call fcn.00402f70
add esp, 0x18
cmp dword [esp + 0x1a0], 0x10
mov byte [esp + 0x354], 0x14
jb 0x471974
mov ecx, dword [esp + 0x18c]
push ecx
call fcn.004ade5d
add esp, 4
lea edx, [esp + 0x160]
push edx
lea eax, [esp + 0x218]
push eax
mov dword [esp + 0x1a8], ebx
mov dword [esp + 0x1a4], edi
mov byte [esp + 0x194], 0
call fcn.00416de0
mov ecx, eax
call fcn.004118f0
mov ecx, dword [esp + 0xc]
push 0xffffffffffffffff
push edi
push eax
add ecx, 0x98
mov byte [esp + 0x360], 0x15
call fcn.00402aa0
cmp dword [esp + 0x22c], 0x10
jb 0x4719db
mov ecx, dword [esp + 0x218]
push ecx
call fcn.004ade5d
add esp, 4
cmp dword [esp + 0x178], 0x10
mov dword [esp + 0x22c], ebx
mov dword [esp + 0x228], edi
mov byte [esp + 0x218], 0
jb 0x471a0b
mov edx, dword [esp + 0x164]
push edx
call fcn.004ade5d
add esp, 4
mov dword [esp + 0x178], ebx
mov dword [esp + 0x174], edi
mov byte [esp + 0x164], 0
jmp 0x4726d9
push 1
call fcn.0040f5b0
lea eax, [esp + 0x94]
push eax
lea ecx, [esp + 0x1c4]
push str.hierarchy.Screen.Treasury.
push ecx
call fcn.00403a40
push str.UnlockHint
push eax
lea edx, [esp + 0x4c]
push edx
mov byte [esp + 0x36c], 0x16
call fcn.00402f70
add esp, 0x18
mov eax, dword [esp + 0x1d8]
mov esi, 0x10
cmp eax, esi
mov byte [esp + 0x354], 0x18
jb 0x471a8a
mov eax, dword [esp + 0x1c4]
push eax
call fcn.004ade5d
add esp, 4
lea ecx, [esp + 0x38]
push ecx
lea edx, [esp + 0x1a8]
push edx
mov dword [esp + 0x1e0], ebx
mov dword [esp + 0x1dc], edi
mov byte [esp + 0x1cc], 0
call fcn.00416de0
mov ecx, eax
call fcn.004118f0
mov ecx, dword [esp + 0xc]
push 0xffffffffffffffff
push edi
push eax
add ecx, 0x98
mov byte [esp + 0x360], 0x19
call fcn.00402aa0
cmp dword [esp + 0x1bc], esi
mov byte [esp + 0x354], 0x18
jb 0x471af5
mov eax, dword [esp + 0x1a8]
push eax
call fcn.004ade5d
add esp, 4
push 0x38
mov dword [esp + 0x1c0], ebx
mov dword [esp + 0x1bc], edi
mov byte [esp + 0x1ac], 0
call fcn.004ad909
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov byte [esp + 0x354], 0x1a
je 0x471b32
push 1
mov ecx, eax
call fcn.00443e90
mov esi, eax
jmp 0x471b34
xor esi, esi
cmp esi, edi
mov dword [esp + 0x8c], esi
je 0x471b42
inc dword [esi + 4]
lea ecx, [esp + 0xcc]
push ecx
mov ecx, dword [esp + 0x10]
call fcn.0040df80
mov ecx, dword [eax]
mov byte [esp + 0x354], 0x1c
call fcn.00481fe0
push eax
lea ecx, [esp + 0x180]
call fcn.0040dc60
mov eax, dword [esp + 0xcc]
cmp eax, edi
mov byte [esp + 0x354], 0x1b
je 0x471b99
mov edx, dword [eax + 4]
mov ecx, eax
add eax, 4
dec edx
mov dword [eax], edx
mov dword [esp + 0x10], edx
jne 0x471b99
mov eax, dword [ecx]
push 1
call dword [eax]
push 2
lea ecx, [esp + 0x180]
call fcn.0040dc90
fld dword [eax]
fadd dword [0x4f2588]
push 0x40c00000
push 0x3e4ccccd
sub esp, 0x1c
fstp dword [eax]
mov ecx, esp
xor ebx, ebx
mov eax, str._texture_effect_yellow.png
mov dword [ecx + 0x18], 0xf
mov dword [ecx + 0x14], ebx
mov dword [esp + 0x34], esp
mov byte [ecx + 4], bl
lea edi, [eax + 1]
jmp 0x471be0
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x471be0
sub eax, edi
push eax
push str._texture_effect_yellow.png
call fcn.00402cd0
sub esp, 0xc
lea edx, [esp + 0x1ac]
mov ecx, esp
mov dword [esp + 0x40], esp
push edx
call fcn.0040dc60
mov ecx, esi
call fcn.00443c70
push 0x3fc00000
push 0x3f800000
mov ecx, esi
call fcn.004439b0
mov ecx, dword [esp + 0xc]
lea eax, [esp + 0xb4]
push eax
call fcn.0040df80
mov ecx, dword [eax]
mov byte [esp + 0x354], 0x1d
call fcn.004222f0
push eax
mov ecx, esi
call fcn.004439e0
mov eax, dword [esp + 0xb4]
cmp eax, ebx
mov byte [esp + 0x354], 0x1b
je 0x471c74
mov edx, dword [eax + 4]
mov ecx, eax
add eax, 4
dec edx
mov dword [eax], edx
mov dword [esp + 0x10], edx
jne 0x471c74
mov eax, dword [ecx]
push 1
call dword [eax]
lea ecx, [esp + 0x8c]
push ecx
mov ecx, dword [esp + 0x20]
add ecx, 0xc0
call fcn.004712c0
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 0x2b8]
add eax, 0x240
cmp ecx, ebx
mov dword [esp + 0x54], ebx
jle 0x472683
mov ebx, dword [esp + 0xa8]
lea ecx, [ecx]
mov edx, dword [esp + 0x54]
mov eax, dword [esp + 0x20]
imul edx, edx, 0x1c
mov ecx, dword [esp + 0xac]
mov edi, dword [esp + 0x98]
add eax, 0x240
mov esi, 0x10
cmp ecx, esi
lea eax, [edx + eax + 8]
jae 0x471ce2
lea edi, [esp + 0x98]
mov edx, dword [eax + 0x14]
test edx, edx
je 0x471d11
cmp edx, ebx
mov ecx, edx
jb 0x471cf1
mov ecx, ebx
cmp dword [eax + 0x18], esi
jb 0x471cfb
mov esi, dword [eax + 4]
jmp 0x471cfe
lea esi, [eax + 4]
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x471d09
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x472660
cmp edx, ebx
jb 0x472660
xor eax, eax
cmp edx, ebx
setne al
test eax, eax
jne 0x472660
mov esi, 0xf
xor edi, edi
mov eax, str._gui_component_treasuryscreen_unlock_effect.xml
mov dword [esp + 0x7c], esi
mov dword [esp + 0x78], edi
mov byte [esp + 0x68], 0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x471d44
sub eax, edx
push eax
push str._gui_component_treasuryscreen_unlock_effect.xml
lea ecx, [esp + 0x6c]
call fcn.00402cd0
push edi
push edi
lea eax, [esp + 0x6c]
push eax
lea ecx, [esp + 0x34]
push ecx
mov byte [esp + 0x364], 0x1e
call fcn.00415620
mov ecx, eax
call fcn.00431b90
cmp dword [esp + 0x7c], 0x10
jb 0x471d90
mov edx, dword [esp + 0x68]
push edx
call fcn.004ade5d
add esp, 4
mov ecx, dword [esp + 0xc]
lea eax, [esp + 0xe4]
push eax
mov dword [esp + 0x80], esi
mov dword [esp + 0x7c], edi
mov byte [esp + 0x6c], 0
call fcn.0040df80
mov eax, dword [eax]
mov esi, dword [esp + 0x28]
push 1
mov ecx, eax
mov byte [esp + 0x358], 0x21
call fcn.004222f0
push eax
mov ecx, esi
call fcn.00424cf0
mov eax, dword [esp + 0xe4]
cmp eax, edi
mov byte [esp + 0x354], 0x20
je 0x471dfa
mov edx, dword [eax + 4]
mov ecx, eax
add eax, 4
dec edx
mov dword [eax], edx
mov dword [esp + 0x10], edx
jne 0x471dfa
mov eax, dword [ecx]
push 1
call dword [eax]
lea ecx, [esp + 0xb0]
push ecx
mov ecx, dword [esp + 0x10]
call fcn.0040df80
mov ecx, dword [eax]
mov byte [esp + 0x354], 0x22
call fcn.00481fe0
push eax
lea ecx, [esp + 0x148]
call fcn.0040dc60
mov eax, dword [esp + 0xb0]
cmp eax, edi
mov byte [esp + 0x354], 0x20
je 0x471e51
mov edx, dword [eax + 4]
mov ecx, eax
add eax, 4
dec edx
mov dword [eax], edx
mov dword [esp + 0x10], edx
jne 0x471e51
mov eax, dword [ecx]
push 1
call dword [eax]
push 2
lea ecx, [esp + 0x148]
call fcn.0040dc90
fld dword [eax]
fadd dword [0x4f2588]
push ecx
lea ecx, [esp + 0x148]
fstp dword [esp]
push 1
call fcn.0040dc90
mov ecx, dword [eax]
push ecx
push edi
lea ecx, [esp + 0x150]
call fcn.0040dc90
mov edx, dword [eax]
mov ecx, dword [esp + 0x30]
push edx
call fcn.00424870
mov ecx, dword [esp + 0x28]
push 1
push 0x1f4
call fcn.0042f400
lea eax, [esp + 0xb8]
push eax
call fcn.0040d4d0
mov ecx, eax
call fcn.00401650
mov ecx, dword [eax]
mov byte [esp + 0x354], 0x23
call fcn.00401120
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0xb8]
cmp eax, edi
mov dword [esp + 0x5c], edx
mov byte [esp + 0x354], 0x20
je 0x471efa
mov edx, dword [eax + 4]
mov ecx, eax
add eax, 4
dec edx
mov dword [eax], edx
mov dword [esp + 0x10], edx
jne 0x471efa
mov eax, dword [ecx]
push 1
call dword [eax]
push 0x40
call fcn.004ad909
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov byte [esp + 0x354], 0x24
je 0x471f24
lea ecx, [esp + 0x58]
push ecx
mov ecx, eax
call fcn.00423890
mov esi, eax
jmp 0x471f26
xor esi, esi
cmp esi, edi
mov dword [esp + 0x80], esi
mov dword [esp + 0x150], esi
je 0x471f3b
inc dword [esi + 4]
push 0x55ffffff
mov ecx, esi
mov byte [esp + 0x358], 0x25
call fcn.00422400
cmp esi, edi
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
mov dword [eax], esi
je 0x471f5f
inc dword [esi + 4]
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0xd8]
push edx
call fcn.0040df80
mov ecx, dword [eax]
mov byte [esp + 0x358], 0x26
call fcn.0042b080
mov eax, dword [esp + 0xd4]
cmp eax, edi
mov byte [esp + 0x354], 0x25
je 0x471fab
mov edx, dword [eax + 4]
mov ecx, eax
add eax, 4
dec edx
mov dword [eax], edx
mov eax, edx
mov dword [esp + 0x10], eax
jne 0x471fab
mov edx, dword [ecx]
push 1
call dword [edx]
push 0x40
call fcn.004ad909
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov byte [esp + 0x354], 0x27
je 0x471ff6
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x5c]
add ecx, 0x7d0
mov dword [esp + 0xe8], ecx
lea ecx, [esp + 0xe8]
adc edx, edi
push ecx
mov ecx, eax
mov dword [esp + 0xf0], edx
call fcn.00423890
mov esi, eax
jmp 0x471ff8
xor esi, esi
cmp esi, edi
mov dword [esp + 0x90], esi
mov dword [esp + 0x154], esi
je 0x47200d
inc dword [esi + 4]
push 0x55ffffff
mov ecx, esi
mov byte [esp + 0x358], 0x28
call fcn.00422400
cmp esi, edi
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
mov dword [eax], esi
je 0x472031
inc dword [esi + 4]
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0xe0]
push edx
call fcn.0040df80
mov ecx, dword [eax]
mov byte [esp + 0x358], 0x29
call fcn.0042b080
mov eax, dword [esp + 0xdc]
cmp eax, edi
mov byte [esp + 0x354], 0x28
je 0x47207d
mov edx, dword [eax + 4]
mov ecx, eax
add eax, 4
dec edx
mov dword [eax], edx
mov eax, edx
mov dword [esp + 0x10], eax
jne 0x47207d
mov edx, dword [ecx]
push 1
call dword [edx]
push 0x40
call fcn.004ad909
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov byte [esp + 0x354], 0x2a
je 0x4720c8
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x5c]
add ecx, 0xbb8
mov dword [esp + 0x108], ecx
lea ecx, [esp + 0x108]
adc edx, edi
push ecx
mov ecx, eax
mov dword [esp + 0x110], edx
call fcn.00423890
mov esi, eax
jmp 0x4720ca
xor esi, esi
cmp esi, edi
mov dword [esp + 0x88], esi
mov dword [esp + 0x30], esi
je 0x4720dc
inc dword [esi + 4]
push 0xffffffffffffffff
mov ecx, esi
mov byte [esp + 0x358], 0x2b
call fcn.00422400
cmp esi, edi
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
mov dword [eax], esi
je 0x4720fd
inc dword [esi + 4]
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0xe4]
push edx
call fcn.0040df80
mov ecx, dword [eax]
mov byte [esp + 0x358], 0x2c
call fcn.0042b080
mov eax, dword [esp + 0xe0]
cmp eax, edi
mov byte [esp + 0x354], 0x2b
je 0x472149
mov edx, dword [eax + 4]
mov ecx, eax
add eax, 4
dec edx
mov dword [eax], edx
mov eax, edx
mov dword [esp + 0x10], eax
jne 0x472149
mov edx, dword [ecx]
push 1
call dword [edx]
lea eax, [esp + 0x24]
push edi
push eax
call fcn.00416de0
mov ecx, eax
call fcn.0040de20
mov eax, dword [esp + 0x24]
cmp eax, edi
mov byte [esp + 0x354], 0x2d
je 0x47259d
push 0x1e8
call fcn.004ad909
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
mov byte [esp + 0x354], 0x2e
je 0x472197
mov ecx, eax
call fcn.0042dd20
mov esi, eax
jmp 0x472199
xor esi, esi
test esi, esi
mov dword [esp + 0x84], esi
je 0x4721a7
inc dword [esi + 4]
lea ecx, [esp + 0x138]
push ecx
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x358], 0x2f
call fcn.0040fd00
mov ecx, dword [esp + 0xc]
lea edx, [esp + 0x1f8]
push edx
call fcn.00470990
mov ecx, dword [esp + 0x24]
push eax
lea eax, [esp + 0x118]
push eax
mov byte [esp + 0x35c], 0x30
call fcn.00414ac0
cmp dword [esp + 0x210], 0x10
mov byte [esp + 0x354], 0x2f
jb 0x47220d
mov ecx, dword [esp + 0x1fc]
push ecx
call fcn.004ade5d
add esp, 4
push 0
lea ecx, [esp + 0x118]
mov dword [esp + 0x214], 0xf
mov dword [esp + 0x210], 0
mov byte [esp + 0x200], 0
call fcn.0040dc90
mov ebx, eax
push 0
lea ecx, [esp + 0x13c]
mov dword [esp + 0x14], ebx
call fcn.0040dc90
mov edi, eax
fld dword [edi]
fadd dword [ebx]
fcomp dword [0x4f2a10]
fnstsw ax
test ah, 0x41
jne 0x47226c
fld dword [ebx]
fadd dword [0x4f5880]
fsubr dword [edi]
fstp dword [edi]
push 1
lea ecx, [esp + 0x118]
call fcn.0040dc90
mov ebx, eax
push 1
lea ecx, [esp + 0x13c]
mov dword [esp + 0xcc], ebx
call fcn.0040dc90
mov ecx, eax
fld dword [ecx]
fadd dword [ebx]
fcomp dword [0x4f2a08]
fnstsw ax
test ah, 0x41
jne 0x4722b0
fld dword [ebx]
fadd dword [0x4f2a18]
fsubr dword [ecx]
fstp dword [ecx]
fld dword [edi]
push 1
fadd dword [0x4f5988]
lea edx, [esp + 0x13c]
push edx
fstp dword [edi]
fld dword [ecx]
fadd dword [0x4f5a6c]
fstp dword [ecx]
mov ecx, esi
call fcn.00424690
push 0
push 0x65
mov ecx, esi
call fcn.00424cf0
lea eax, [esp + 0x100]
push eax
mov ecx, esi
mov dword [esp + 0x104], 0x1b58
mov dword [esp + 0x108], 0
call fcn.00422c20
lea ecx, [esp + 0x84]
push ecx
mov ecx, dword [esp + 0x20]
add ecx, 0xdc
call fcn.00452e80
mov edi, dword [esp + 0x84]
test edi, edi
push 0xff000000
push 0xffffffffffffffff
push 0xffffffffffffffff
push ecx
mov eax, esp
mov dword [esp + 0x28], esp
mov dword [eax], edi
je 0x47233c
inc dword [edi + 4]
mov ecx, dword [esp + 0x1c]
lea edx, [esp + 0x240]
push edx
mov byte [esp + 0x368], 0x31
call fcn.00470990
mov ecx, dword [esp + 0x34]
push eax
mov byte [esp + 0x368], 0x33
call fcn.00414da0
cmp dword [esp + 0x248], 0x10
mov byte [esp + 0x354], 0x2f
jb 0x472389
mov eax, dword [esp + 0x234]
push eax
call fcn.004ade5d
add esp, 4
lea ecx, [esp + 0x1dc]
push ecx
mov ecx, dword [esp + 0x10]
xor esi, esi
mov dword [esp + 0x24c], 0xf
mov dword [esp + 0x248], esi
mov byte [esp + 0x238], 0
call fcn.00470990
mov ecx, dword [eax + 0x14]
mov eax, dword [esp + 0x1f4]
cmp ecx, esi
setne bl
cmp eax, 0x10
jb 0x4723da
mov edx, dword [esp + 0x1e0]
push edx
call fcn.004ade5d
add esp, 4
test bl, bl
mov dword [esp + 0x1f4], 0xf
mov dword [esp + 0x1f0], esi
mov byte [esp + 0x1e0], 0
je 0x47251e
push 0x1e8
call fcn.004ad909
add esp, 4
mov dword [esp + 0x18], eax
cmp eax, esi
mov byte [esp + 0x354], 0x34
je 0x472424
mov ecx, eax
call fcn.0042dd20
mov esi, eax
jmp 0x472426
xor esi, esi
xor ebx, ebx
cmp esi, ebx
mov dword [esp + 0x18], esi
je 0x472433
inc dword [esi + 4]
push 0xaa000000
lea ecx, [esp + 0x274]
mov byte [esp + 0x358], 0x35
call fcn.00422ef0
lea eax, [esp + 0x270]
push eax
mov ecx, esi
mov dword [esp + 0x284], ebx
mov dword [esp + 0x288], ebx
call fcn.0042adf0
push ebx
mov ecx, edi
call fcn.004222f0
push eax
mov ecx, esi
call fcn.00424cf0
mov ecx, dword [esp + 0xc8]
fld dword [ecx]
mov edx, dword [esp + 0x10]
fadd dword [0x4f2a20]
sub esp, 8
lea ecx, [esp + 0x264]
fstp dword [esp + 4]
fld dword [edx]
fadd dword [0x4f2a18]
fstp dword [esp]
call fcn.00422600
push eax
mov ecx, esi
call fcn.00422160
push 2
push ebx
push 0x41800000
push 0x40c00000
lea ecx, [esp + 0x274]
call fcn.00401450
mov ecx, eax
call fcn.0040dc90
mov eax, dword [eax]
push eax
push 0xc0a00000
push 0xc1200000
mov ecx, esi
call fcn.00424870
cmp esi, ebx
push ecx
mov eax, esp
mov dword [esp + 0x14], esp
mov dword [eax], esi
je 0x4724f6
inc dword [esi + 4]
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 8]
cmp esi, ebx
mov byte [esp + 0x354], 0x2f
je 0x47251e
mov ecx, dword [esi + 4]
dec ecx
mov eax, ecx
test eax, eax
mov dword [esi + 4], ecx
jne 0x47251e
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax]
test edi, edi
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
mov dword [eax], edi
je 0x47252e
inc dword [edi + 4]
mov ecx, dword [esp + 0x20]
mov ecx, dword [ecx + 0xac]
lea edx, [esp + 0x18]
push edx
call fcn.0040df80
mov ecx, dword [eax]
mov eax, dword [ecx]
mov byte [esp + 0x358], 0x36
call dword [eax + 8]
mov eax, dword [esp + 0x14]
test eax, eax
mov byte [esp + 0x354], 0x2f
je 0x472578
mov edx, dword [eax + 4]
mov ecx, eax
add eax, 4
dec edx
mov dword [eax], edx
mov dword [esp + 0x18], edx
jne 0x472578
mov eax, dword [ecx]
push 1
call dword [eax]
test edi, edi
mov byte [esp + 0x354], 0x2d
je 0x472599
mov ecx, dword [edi + 4]
dec ecx
mov eax, ecx
test eax, eax
mov dword [edi + 4], ecx
jne 0x472599
mov edx, dword [edi]
push 1
mov ecx, edi
call dword [edx]
mov eax, dword [esp + 0x24]
test eax, eax
mov byte [esp + 0x354], 0x2b
je 0x4725c2
mov edx, dword [eax + 4]
mov ecx, eax
add eax, 4
dec edx
mov dword [eax], edx
mov eax, edx
mov dword [esp + 0x18], eax
jne 0x4725c2
mov edx, dword [ecx]
push 1
call dword [edx]
mov ecx, dword [esp + 0x88]
test ecx, ecx
mov byte [esp + 0x354], 0x28
je 0x4725e8
mov edx, dword [ecx + 4]
dec edx
mov eax, edx
test eax, eax
mov dword [ecx + 4], edx
jne 0x4725e8
mov eax, dword [ecx]
push 1
call dword [eax]
mov ecx, dword [esp + 0x90]
test ecx, ecx
mov byte [esp + 0x354], 0x25
je 0x47260e
mov edx, dword [ecx + 4]
dec edx
mov eax, edx
test eax, eax
mov dword [ecx + 4], edx
jne 0x47260e
mov edx, dword [ecx]
push 1
call dword [edx]
mov ecx, dword [esp + 0x80]
test ecx, ecx
mov byte [esp + 0x354], 0x20
je 0x472634
mov edx, dword [ecx + 4]
dec edx
mov eax, edx
test eax, eax
mov dword [ecx + 4], edx
jne 0x472634
mov eax, dword [ecx]
push 1
call dword [eax]
mov ecx, dword [esp + 0x28]
test ecx, ecx
mov byte [esp + 0x354], 0x1b
je 0x472659
mov edx, dword [ecx + 4]
lea eax, [ecx + 4]
dec edx
mov dword [eax], edx
mov dword [esp + 0x18], edx
jne 0x472659
mov eax, dword [ecx]
push 1
call dword [eax]
mov ebx, dword [esp + 0xa8]
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x54]
mov edx, dword [ecx + 0x2b8]
add ecx, 0x240
inc eax
cmp eax, edx
mov dword [esp + 0x54], eax
jl 0x471cb0
xor ebx, ebx
mov ecx, dword [esp + 0x8c]
cmp ecx, ebx
mov byte [esp + 0x354], 0x18
je 0x4726a9
mov edx, dword [ecx + 4]
dec edx
mov eax, edx
cmp eax, ebx
mov dword [ecx + 4], edx
jne 0x4726a9
mov edx, dword [ecx]
push 1
call dword [edx]
cmp dword [esp + 0x50], 0x10
jb 0x4726bd
mov eax, dword [esp + 0x3c]
push eax
call fcn.004ade5d
add esp, 4
mov esi, dword [esp + 0x2c]
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x50], 0xf
mov byte [esp + 0x3c], 0
xor edi, edi
mov ebx, 0xf
cmp dword [esp + 0xac], 0x10
mov byte [esp + 0x354], 0xc
jb 0x4726fb
mov ecx, dword [esp + 0x98]
push ecx
call fcn.004ade5d
add esp, 4
inc esi
cmp esi, 0x15
mov dword [esp + 0xac], ebx
mov dword [esp + 0xa8], edi
mov byte [esp + 0x98], 0
mov dword [esp + 0x2c], esi
jb 0x471703
mov ebx, dword [esp + 0x20]
mov dword [ebx + 0x2b8], edi
lea esi, [ebx + 0x248]
mov edi, 4
mov eax, 0x4f130c
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x472740
sub eax, edx
push eax
push 0x4f130c
mov ecx, esi
call fcn.00402cd0
add esi, 0x1c
dec edi
jne 0x472734
lea edx, [esp + 0x34]
push 1
push edx
call fcn.00416de0
mov ecx, eax
call fcn.0040de20
lea ecx, [ebx + 0x240]
mov byte [esp + 0x354], 0x37
call fcn.0043a9d0
push eax
lea eax, [esp + 0xf4]
push 0x4f1300
push eax
call fcn.004ae68f
lea edi, [esp + 0xfc]
add esp, 0xc
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x4727a0
mov ecx, dword [str.___100]
mov dx, word [0x4f67f8]
mov al, byte [0x4f67fa]
mov dword [edi], ecx
mov word [edi + 4], dx
mov byte [edi + 6], al
mov ebx, 0xf
xor edi, edi
lea eax, [esp + 0xf0]
mov dword [esp + 0x50], ebx
mov dword [esp + 0x4c], edi
mov byte [esp + 0x3c], 0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4727e1
sub eax, edx
push eax
lea ecx, [esp + 0xf4]
push ecx
lea ecx, [esp + 0x40]
call fcn.00402cd0
mov ecx, dword [esp + 0x34]
lea edx, [esp + 0x38]
push edx
lea eax, [esp + 0x15c]
push eax
mov byte [esp + 0x35c], 0x38
call fcn.00414ac0
mov eax, dword [esp + 0x50]
mov esi, 0x10
cmp eax, esi
mov byte [esp + 0x354], 0x37
jb 0x47283c
mov ecx, dword [esp + 0x3c]
push ecx
call fcn.004ade5d
add esp, 4
mov eax, str.doll
mov dword [esp + 0x50], ebx
mov dword [esp + 0x4c], edi
mov byte [esp + 0x3c], 0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x472851
sub eax, edx
push eax
push str.doll
lea ecx, [esp + 0x40]
call fcn.00402cd0
mov ecx, dword [esp + 0x1c]
lea edx, [esp + 0x38]
push edx
lea eax, [esp + 0x18]
mov bl, 0x39
push eax
mov byte [esp + 0x35c], bl
call fcn.0040fff0
mov eax, dword [eax]
cmp eax, edi
mov byte [esp + 0x354], 0x3a
je 0x472896
inc dword [eax + 4]
mov ecx, dword [esp + 0xc]
cmp ecx, edi
mov dword [esp + 0xc], eax
je 0x4728b5
mov edx, dword [ecx + 4]
dec edx
mov eax, edx
cmp eax, edi
mov dword [ecx + 4], edx
jne 0x4728b5
mov edx, dword [ecx]
push 1
call dword [edx]
mov eax, dword [esp + 0x14]
cmp eax, edi
mov byte [esp + 0x354], bl
je 0x4728dd
mov edx, dword [eax + 4]
mov ecx, eax
add eax, 4
dec edx
mov dword [eax], edx
mov eax, edx
mov dword [esp + 0x18], eax
jne 0x4728dd
mov edx, dword [ecx]
push 1
call dword [edx]
cmp dword [esp + 0x50], esi
mov byte [esp + 0x354], 0x37
jb 0x4728f8
mov eax, dword [esp + 0x3c]
push eax
call fcn.004ade5d
add esp, 4
mov ecx, dword [esp + 0xc]
push 0x1e8
mov byte [ecx + 0xc4], 1
call fcn.004ad909
add esp, 4
mov dword [esp + 0x18], eax
cmp eax, edi
mov byte [esp + 0x354], 0x3b
je 0x47292b
mov ecx, eax
call fcn.0042dd20
mov esi, eax
jmp 0x47292d
xor esi, esi
cmp esi, edi
mov dword [esp + 0x18], esi
je 0x472938
inc dword [esi + 4]
push 0xbf800000
push 0x42200000
mov bl, 0x3c
push edi
lea ecx, [esp + 0x164]
mov byte [esp + 0x360], bl
call fcn.0040dc90
fld dword [eax]
fdiv dword [0x4f68dc]
push ecx
mov ecx, esi
fstp dword [esp]
call fcn.00424870
mov ecx, dword [esp + 0xc]
lea edx, [esp + 0x14]
push edx
call fcn.0040df80
mov eax, dword [eax]
push edi
mov ecx, eax
mov byte [esp + 0x358], 0x3d
call fcn.004222f0
push eax
mov ecx, esi
call fcn.00424cf0
mov eax, dword [esp + 0x14]
cmp eax, edi
mov byte [esp + 0x354], bl
je 0x4729bb
mov edx, dword [eax + 4]
mov ecx, eax
add eax, 4
dec edx
mov dword [eax], edx
mov eax, edx
mov dword [esp + 0x30], eax
jne 0x4729bb
mov edx, dword [ecx]
push 1
call dword [edx]
cmp esi, edi
push ecx
mov eax, esp
mov dword [esp + 0x34], esp
mov dword [eax], esi
je 0x4729cb
inc dword [esi + 4]
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x18]
push eax
call fcn.0040df80
mov ecx, dword [eax]
mov edx, dword [ecx]
mov byte [esp + 0x358], 0x3e
call dword [edx + 8]
mov eax, dword [esp + 0x14]
cmp eax, edi
mov byte [esp + 0x354], bl
je 0x472a10
mov edx, dword [eax + 4]
mov ecx, eax
add eax, 4
dec edx
mov dword [eax], edx
mov eax, edx
mov dword [esp + 0x30], eax
jne 0x472a10
mov edx, dword [ecx]
push 1
call dword [edx]
lea eax, [esp + 0xf0]
mov dword [esp + 0x50], 0xf
mov dword [esp + 0x4c], edi
mov byte [esp + 0x3c], 0
lea edx, [eax + 1]
jmp 0x472a30
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x472a30
sub eax, edx
push eax
lea eax, [esp + 0xf4]
push eax
lea ecx, [esp + 0x40]
call fcn.00402cd0
cmp esi, edi
push 0xff000000
push 0xffffffffffffffff
push 0xffffffffffffffff
push ecx
mov eax, esp
mov byte [esp + 0x364], 0x3f
mov dword [esp + 0x40], esp
mov dword [eax], esi
je 0x472a6c
inc dword [esi + 4]
lea ecx, [esp + 0x48]
push ecx
mov ecx, dword [esp + 0x48]
call fcn.00414da0
cmp dword [esp + 0x50], 0x10
jb 0x472a8e
mov edx, dword [esp + 0x3c]
push edx
call fcn.004ade5d
add esp, 4
cmp esi, edi
mov byte [esp + 0x354], 0x37
je 0x472aaf
mov ecx, dword [esi + 4]
dec ecx
mov eax, ecx
cmp eax, edi
mov dword [esi + 4], ecx
jne 0x472aaf
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax]
mov eax, dword [esp + 0x34]
cmp eax, edi
mov byte [esp + 0x354], 0xc
je 0x472ad6
mov edx, dword [eax + 4]
mov ecx, eax
add eax, 4
dec edx
mov dword [eax], edx
mov dword [esp + 0x18], edx
jne 0x472ad6
mov eax, dword [ecx]
push 1
call dword [eax]
mov ecx, dword [esp + 0x20]
cmp ecx, edi
mov byte [esp + 0x354], 0xb
je 0x472af9
mov edx, dword [ecx + 4]
dec edx
mov eax, edx
cmp eax, edi
mov dword [ecx + 4], edx
jne 0x472af9
mov edx, dword [ecx]
push 1
call dword [edx]
mov eax, dword [esp + 0xc]
cmp eax, edi
mov byte [esp + 0x354], 3
je 0x472b20
mov esi, dword [eax + 4]
mov ecx, eax
add eax, 4
dec esi
mov edx, esi
cmp edx, edi
mov dword [eax], esi
jne 0x472b20
mov eax, dword [ecx]
push 1
call dword [eax]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x34c]
mov dword fs:[0], ecx
mov ecx, dword [esp + 0x344]
xor ecx, dword [ebp + 4]
call fcn.004ae650
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, esi
jmp 0x472b24