Function at 0x46c9c0
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x639c24
mov eax, dword fs:[0]
push eax
sub esp, 0x24
mov eax, dword [0x6cd498]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x30], edi
mov dword [0x759e38], edi
mov dword [ebp - 4], 0
lea esi, [edi + 4]
mov dword [edi], vtable.CPythonEventManager.0
push 0x2c
mov dword [ebp - 0x2c], esi
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.0059c8fd
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
mov dword [edi + 0xc], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
mov dword [edi + 0x1c], vtable.CDynamicPool_struct_CPythonEventManager::SEventSet_.0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x28], 0
mov dword [edi + 0x2c], 0
mov dword [edi + 0x30], 0
mov dword [edi + 0x34], 0
mov dword [edi + 0x38], 0
mov dword [edi + 0x3c], 0
mov dword [edi + 0x40], vtable.CDynamicPool_class_CGraphicTextInstance_.0
mov dword [edi + 0x44], 0
mov dword [edi + 0x48], 0
mov dword [edi + 0x4c], 0
mov dword [edi + 0x50], 0
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x5c], 0
mov dword [edi + 0x60], 0
mov byte [ebp - 4], 4
lea ecx, [edi + 0x68]
mov dword [edi + 0x64], 0
push 0x10
mov dword [ecx], 0
push 0x68472c
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
call fcn.0043dc70
mov eax, dword [str.LETTER]
mov dword [ebp - 0x28], eax
mov ax, word [0x684728]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 6
mov word [ebp - 0x24], ax
mov byte [ebp - 0x22], 0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 6
push eax
mov ecx, esi
call fcn.0046dca0
mov byte [ebp - 4], 5
mov dword [eax], 0
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x46cb67
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x46cb5d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46d993
push edx
push ecx
call fcn.0059c8ef
add esp, 8
mov eax, dword [str.COLOR]
mov dword [ebp - 0x28], eax
mov al, byte [0x68474c]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 5
mov byte [ebp - 0x24], al
mov byte [ebp - 0x23], 0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 7
push eax
mov ecx, esi
call fcn.0046dca0
mov byte [ebp - 4], 5
mov dword [eax], 1
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x46cbd6
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x46cbcc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46d998
push edx
push ecx
call fcn.0059c8ef
add esp, 8
mov eax, dword [str.DELAY]
mov dword [ebp - 0x28], eax
mov al, byte [0x684744]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 5
mov byte [ebp - 0x24], al
mov byte [ebp - 0x23], 0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 8
push eax
mov ecx, esi
call fcn.0046dca0
mov byte [ebp - 4], 5
mov dword [eax], 2
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x46cc45
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x46cc3b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46d99d
push edx
push ecx
call fcn.0059c8ef
add esp, 8
push 5
mov dword [ebp - 0x28], 0
lea ecx, [ebp - 0x28]
push str.ENTER
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.0043dc70
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 9
push eax
mov ecx, esi
call fcn.0046dca0
mov byte [ebp - 4], 5
mov dword [eax], 3
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x46ccba
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x46ccb0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46d9a2
push edx
push ecx
call fcn.0059c8ef
add esp, 8
push 4
mov dword [ebp - 0x28], 0
lea ecx, [ebp - 0x28]
push str.WAIT
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.0043dc70
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xa
push eax
mov ecx, esi
call fcn.0046dca0
mov byte [ebp - 4], 5
mov dword [eax], 4
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x46cd2f
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x46cd25
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46d9a7
push edx
push ecx
call fcn.0059c8ef
add esp, 8
push 5
mov dword [ebp - 0x28], 0
lea ecx, [ebp - 0x28]
push str.CLEAR
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.0043dc70
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xb
push eax
mov ecx, esi
call fcn.0046dca0
mov byte [ebp - 4], 5
mov dword [eax], 5
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x46cda4
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x46cd9a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46d9ac
push edx
push ecx
call fcn.0059c8ef
add esp, 8
push 8
mov dword [ebp - 0x28], 0
lea ecx, [ebp - 0x28]
push str.QUESTION
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.0043dc70
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xc
push eax
mov ecx, esi
call fcn.0046dca0
mov byte [ebp - 4], 5
mov dword [eax], 6
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x46ce19
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x46ce0f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46d9b1
push edx
push ecx
call fcn.0059c8ef
add esp, 8
push 4
mov dword [ebp - 0x28], 0
lea ecx, [ebp - 0x28]
push str.NEXT
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.0043dc70
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xd
push eax
mov ecx, esi
call fcn.0046dca0
mov byte [ebp - 4], 5
mov dword [eax], 7
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x46ce8e
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x46ce84
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46d9b6
push edx
push ecx
call fcn.0059c8ef
add esp, 8
push 4
mov dword [ebp - 0x28], 0
lea ecx, [ebp - 0x28]
push str.DONE
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.0043dc70
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xe
push eax
mov ecx, esi
call fcn.0046dca0
mov byte [ebp - 4], 5
mov dword [eax], 8
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x46cf03
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x46cef9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46d9bb
push edx
push ecx
call fcn.0059c8ef
add esp, 8
push 9
mov dword [ebp - 0x28], 0
lea ecx, [ebp - 0x28]
push str.LEFTIMAGE
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.0043dc70
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xf
push eax
mov ecx, esi
call fcn.0046dca0
mov byte [ebp - 4], 5
mov dword [eax], 9
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x46cf78
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x46cf6e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46d9c0
push edx
push ecx
call fcn.0059c8ef
add esp, 8
push 8
mov dword [ebp - 0x28], 0
lea ecx, [ebp - 0x28]
push str.TOPIMAGE
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.0043dc70
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x10
push eax
mov ecx, esi
call fcn.0046dca0
mov byte [ebp - 4], 5
mov dword [eax], 0xa
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x46cfed
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x46cfe3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46d9c5
push edx
push ecx
call fcn.0059c8ef
add esp, 8
push 7
mov dword [ebp - 0x28], 0
lea ecx, [ebp - 0x28]
push str.BGIMAGE
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.0043dc70
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x11
push eax
mov ecx, esi
call fcn.0046dca0
mov byte [ebp - 4], 5
mov dword [eax], 0xb
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x46d062
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x46d058
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46d9ca
push edx
push ecx
call fcn.0059c8ef
add esp, 8
push 5
mov dword [ebp - 0x28], 0
lea ecx, [ebp - 0x28]
push str.IMAGE
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.0043dc70
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x12
push eax
mov ecx, esi
call fcn.0046dca0
mov byte [ebp - 4], 5
mov dword [eax], 0xc
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x46d0d7
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x46d0cd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46d9cf
push edx
push ecx
call fcn.0059c8ef
add esp, 8
push 0xc
mov dword [ebp - 0x28], 0
lea ecx, [ebp - 0x28]
push str.ADDMAPSIGNAL
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.0043dc70
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x13
push eax
mov ecx, esi
call fcn.0046dca0
mov byte [ebp - 4], 5
mov dword [eax], 0xd
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x46d14c
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x46d142
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46d9d4
push edx
push ecx
call fcn.0059c8ef
add esp, 8
push 0xe
mov dword [ebp - 0x28], 0
lea ecx, [ebp - 0x28]
push str.CLEARMAPSIGNAL
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.0043dc70
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x14
push eax
mov ecx, esi
call fcn.0046dca0
mov byte [ebp - 4], 5
mov dword [eax], 0xe
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x46d1c1
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x46d1b7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46d9d9
push edx
push ecx
call fcn.0059c8ef
add esp, 8
push 9
mov dword [ebp - 0x28], 0
lea ecx, [ebp - 0x28]
push str.SETMSGPOS
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.0043dc70
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x15
push eax
mov ecx, esi
call fcn.0046dca0
mov byte [ebp - 4], 5
mov dword [eax], 0xf
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x46d236
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x46d22c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46d9de
push edx
push ecx
call fcn.0059c8ef
add esp, 8
push 9
mov dword [ebp - 0x28], 0
lea ecx, [ebp - 0x28]
push str.ADJMSGPOS
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.0043dc70
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x16
push eax
mov ecx, esi
call fcn.0046dca0
mov byte [ebp - 4], 5
mov dword [eax], 0x10
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x46d2ab
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x46d2a1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46d9e3
push edx
push ecx
call fcn.0059c8ef
add esp, 8
push 0xa
mov dword [ebp - 0x28], 0
lea ecx, [ebp - 0x28]
push str.SETCMAPPOS
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.0043dc70
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x17
push eax
mov ecx, esi
call fcn.0046dca0
mov byte [ebp - 4], 5
mov dword [eax], 0x11
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x46d320
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x46d316
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46d9e8
push edx
push ecx
call fcn.0059c8ef
add esp, 8
push 0xb
mov dword [ebp - 0x28], 0
lea ecx, [ebp - 0x28]
push str.QUESTBUTTON
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.0043dc70
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x18
push eax
mov ecx, esi
call fcn.0046dca0
mov byte [ebp - 4], 5
mov dword [eax], 0x12
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x46d395
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x46d38b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46d9ed
push edx
push ecx
call fcn.0059c8ef
add esp, 8
push 0x11
mov dword [ebp - 0x28], 0
lea ecx, [ebp - 0x28]
push str.QUESTBUTTON_CLOSE
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.0043dc70
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x19
push eax
mov ecx, esi
call fcn.0046dca0
mov byte [ebp - 4], 5
mov dword [eax], 0x13
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x46d40a
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x46d400
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46d9f2
push edx
push ecx
call fcn.0059c8ef
add esp, 8
push 5
mov dword [ebp - 0x28], 0
lea ecx, [ebp - 0x28]
push str.SLEEP
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.0043dc70
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1a
push eax
mov ecx, esi
call fcn.0046dca0
mov byte [ebp - 4], 5
mov dword [eax], 0x14
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x46d47f
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x46d475
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46d9f7
push edx
push ecx
call fcn.0059c8ef
add esp, 8
push 0xa
mov dword [ebp - 0x28], 0
lea ecx, [ebp - 0x28]
push str.SET_CAMERA
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.0043dc70
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1b
push eax
mov ecx, esi
call fcn.0046dca0
mov byte [ebp - 4], 5
mov dword [eax], 0x15
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x46d4f4
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x46d4ea
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46d9fc
push edx
push ecx
call fcn.0059c8ef
add esp, 8
push 0xc
mov dword [ebp - 0x28], 0
lea ecx, [ebp - 0x28]
push str.BLEND_CAMERA
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.0043dc70
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1c
push eax
mov ecx, esi
call fcn.0046dca0
mov byte [ebp - 4], 5
mov dword [eax], 0x16
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x46d569
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x46d55f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46da01
push edx
push ecx
call fcn.0059c8ef
add esp, 8
push 0xe
mov dword [ebp - 0x28], 0
lea ecx, [ebp - 0x28]
push str.RESTORE_CAMERA
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.0043dc70
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1d
push eax
mov ecx, esi
call fcn.0046dca0
mov byte [ebp - 4], 5
mov dword [eax], 0x17
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x46d5de
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x46d5d4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46da06
push edx
push ecx
call fcn.0059c8ef
add esp, 8
push 8
mov dword [ebp - 0x28], 0
lea ecx, [ebp - 0x28]
push str.FADE_OUT
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.0043dc70
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1e
push eax
mov ecx, esi
call fcn.0046dca0
mov byte [ebp - 4], 5
mov dword [eax], 0x18
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x46d653
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x46d649
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46da0b
push edx
push ecx
call fcn.0059c8ef
add esp, 8
mov dword [ebp - 0x28], 0
lea ecx, [ebp - 0x28]
push str.FADE_IN
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.0043da90
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1f
push eax
mov ecx, esi
call fcn.0046dca0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x19
call fcn.0043dda0
push str.WHITE_OUT
lea ecx, [ebp - 0x28]
call fcn.0043f8b0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x20
push eax
mov ecx, esi
call fcn.0046dca0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x1a
call fcn.0043dda0
push str.WHITE_IN
lea ecx, [ebp - 0x28]
call fcn.0043f8b0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x21
push eax
mov ecx, esi
call fcn.0046dca0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x1b
call fcn.0043dda0
push str.CLEAR_TEXT
lea ecx, [ebp - 0x28]
call fcn.0043f8b0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x22
push eax
mov ecx, esi
call fcn.0046dca0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x1c
call fcn.0043dda0
push str.TEXT_HORIZONTAL_ALIGN_CENTER
lea ecx, [ebp - 0x28]
call fcn.0043f8b0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x23
push eax
mov ecx, esi
call fcn.0046dca0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x1d
call fcn.0043dda0
push str.TITLE_IMAGE
lea ecx, [ebp - 0x28]
call fcn.0043f8b0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x24
push eax
mov ecx, esi
call fcn.0046dca0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x28]
mov dword [eax], 0x1e
call fcn.0043dda0
push str.RUN_CINEMA
lea ecx, [ebp - 0x28]
call fcn.0043f8b0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x25
push eax
mov ecx, esi
call fcn.0046dca0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x1f
call fcn.0043dda0
push str.DUNGEON_RESULT
lea ecx, [ebp - 0x28]
call fcn.0043f8b0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x26
push eax
mov ecx, esi
call fcn.0046dca0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x20
call fcn.0043dda0
push str.ITEM
lea ecx, [ebp - 0x28]
call fcn.0043f8b0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x27
push eax
mov ecx, esi
call fcn.0046dca0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x21
call fcn.0043dda0
push 0x6848c4
lea ecx, [ebp - 0x28]
call fcn.0043f8b0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x28
push eax
mov ecx, esi
call fcn.0046dca0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x22
call fcn.0043dda0
push str.COLOR256
lea ecx, [ebp - 0x28]
call fcn.0043f8b0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x29
push eax
mov ecx, esi
call fcn.0046dca0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x23
call fcn.0043dda0
push str.WINDOW_SIZE
lea ecx, [ebp - 0x28]
call fcn.0043f8b0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2a
push eax
mov ecx, esi
call fcn.0046dca0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x24
call fcn.0043dda0
push str.INPUT
lea ecx, [ebp - 0x28]
call fcn.0043f8b0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2b
push eax
mov ecx, esi
call fcn.0046dca0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x25
call fcn.0043dda0
push str.CONFIRM_WAIT
lea ecx, [ebp - 0x28]
call fcn.0043f8b0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2c
push eax
mov ecx, esi
call fcn.0046dca0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x26
call fcn.0043dda0
push str.END_CONFIRM_WAIT
lea ecx, [ebp - 0x28]
call fcn.0043f8b0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2d
push eax
mov ecx, esi
call fcn.0046dca0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x27
call fcn.0043dda0
push str.INSERT_IMAGE
lea ecx, [ebp - 0x28]
call fcn.0043f8b0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2e
push eax
mov ecx, esi
call fcn.0046dca0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x28
call fcn.0043dda0
push str.SELECT_ITEM
lea ecx, [ebp - 0x28]
call fcn.0043f8b0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2f
push eax
mov ecx, esi
call fcn.0046dca0
lea ecx, [ebp - 0x28]
mov dword [eax], 0x29
call fcn.0043dda0
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0059c8be
mov esp, ebp
pop ebp
ret
call fcn.005e1eb2
call fcn.005e1eb2
call fcn.005e1eb2
call fcn.005e1eb2
call fcn.005e1eb2
call fcn.005e1eb2
call fcn.005e1eb2
call fcn.005e1eb2
call fcn.005e1eb2
call fcn.005e1eb2
call fcn.005e1eb2
call fcn.005e1eb2
call fcn.005e1eb2
call fcn.005e1eb2
call fcn.005e1eb2
call fcn.005e1eb2
call fcn.005e1eb2
call fcn.005e1eb2
call fcn.005e1eb2
call fcn.005e1eb2
call fcn.005e1eb2
call fcn.005e1eb2
call fcn.005e1eb2
call fcn.005e1eb2
call fcn.005e1eb2
int3