Function at 0x4668d0
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x605584
mov eax, dword fs:[0]
push eax
sub esp, 0x24
mov eax, dword [0x697398]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x30], edi
mov dword [0x6e8a24], edi
mov dword [ebp - 4], 0
lea esi, [edi + 4]
mov dword [edi], vtable.CPythonEventManager.0
push 0x2c
mov dword [ebp - 0x2c], esi
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.0056a5b5
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
mov dword [edi + 0xc], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
mov dword [edi + 0x1c], vtable.CDynamicPool_struct_CPythonEventManager::SEventSet_.0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x28], 0
mov dword [edi + 0x2c], 0
mov dword [edi + 0x30], 0
mov dword [edi + 0x34], 0
mov dword [edi + 0x38], 0
mov dword [edi + 0x3c], 0
mov dword [edi + 0x40], vtable.CDynamicPool_class_CGraphicTextInstance_.0
mov dword [edi + 0x44], 0
mov dword [edi + 0x48], 0
mov dword [edi + 0x4c], 0
mov dword [edi + 0x50], 0
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x5c], 0
mov dword [edi + 0x60], 0
mov byte [ebp - 4], 4
xorps xmm0, xmm0
mov dword [edi + 0x64], 0
movups xmmword [edi + 0x68], xmm0
mov dword [edi + 0x78], 0
push 0x20
mov dword [edi + 0x7c], 0xf
call fcn.0056a5b5
mov dword [edi + 0x68], eax
add esp, 8
mov dword [edi + 0x78], 0x10
mov dword [edi + 0x7c], 0x1f
movups xmm0, xmmword [0x64ccd8]
movups xmmword [eax], xmm0
mov byte [eax + 0x10], 0
mov eax, dword [str.LETTER]
xorps xmm0, xmm0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x28], eax
mov ax, word [0x64ccf0]
mov dword [ebp - 0x18], 6
mov dword [ebp - 0x14], 0xf
mov word [ebp - 0x24], ax
mov byte [ebp - 0x22], 0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 6
push eax
mov ecx, esi
call fcn.00467b20
mov byte [ebp - 4], 5
mov dword [eax], 0
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x466a93
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x466a89
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46781a
push ecx
push edx
call fcn.0056a59a
add esp, 8
mov eax, dword [str.COLOR]
xorps xmm0, xmm0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x28], eax
mov al, byte [0x64ccf8]
mov dword [ebp - 0x18], 5
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x24], al
mov byte [ebp - 0x23], 0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 7
push eax
mov ecx, esi
call fcn.00467b20
mov byte [ebp - 4], 5
mov dword [eax], 1
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x466b09
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x466aff
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46781f
push ecx
push edx
call fcn.0056a59a
add esp, 8
mov eax, dword [str.DELAY]
xorps xmm0, xmm0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x28], eax
mov al, byte [0x64cd00]
mov dword [ebp - 0x18], 5
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x24], al
mov byte [ebp - 0x23], 0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 8
push eax
mov ecx, esi
call fcn.00467b20
mov byte [ebp - 4], 5
mov dword [eax], 2
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x466b7f
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x466b75
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x467824
push ecx
push edx
call fcn.0056a59a
add esp, 8
mov eax, dword [str.ENTER]
xorps xmm0, xmm0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x28], eax
mov al, byte [0x64cd08]
mov dword [ebp - 0x18], 5
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x24], al
mov byte [ebp - 0x23], 0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 9
push eax
mov ecx, esi
call fcn.00467b20
mov byte [ebp - 4], 5
mov dword [eax], 3
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x466bf5
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x466beb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x467829
push ecx
push edx
call fcn.0056a59a
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x18], 4
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x28], 0x54494157
mov byte [ebp - 0x24], 0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xa
push eax
mov ecx, esi
call fcn.00467b20
mov byte [ebp - 4], 5
mov dword [eax], 4
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x466c62
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x466c58
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46782e
push ecx
push edx
call fcn.0056a59a
add esp, 8
push 5
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push str.CLEAR
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0
movups xmmword [ebp - 0x28], xmm0
call fcn.0043e440
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xb
push eax
mov ecx, esi
call fcn.00467b20
mov byte [ebp - 4], 5
mov dword [eax], 5
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x466cd3
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x466cc9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x467833
push ecx
push edx
call fcn.0056a59a
add esp, 8
push 8
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push str.QUESTION
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0
movups xmmword [ebp - 0x28], xmm0
call fcn.0043e440
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xc
push eax
mov ecx, esi
call fcn.00467b20
mov byte [ebp - 4], 5
mov dword [eax], 6
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x466d44
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x466d3a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x467838
push ecx
push edx
call fcn.0056a59a
add esp, 8
push 4
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push str.NEXT
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0
movups xmmword [ebp - 0x28], xmm0
call fcn.0043e440
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xd
push eax
mov ecx, esi
call fcn.00467b20
mov byte [ebp - 4], 5
mov dword [eax], 7
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x466db5
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x466dab
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46783d
push ecx
push edx
call fcn.0056a59a
add esp, 8
push 4
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push str.DONE
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0
movups xmmword [ebp - 0x28], xmm0
call fcn.0043e440
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xe
push eax
mov ecx, esi
call fcn.00467b20
mov byte [ebp - 4], 5
mov dword [eax], 8
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x466e26
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x466e1c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x467842
push ecx
push edx
call fcn.0056a59a
add esp, 8
push 9
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push str.LEFTIMAGE
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0
movups xmmword [ebp - 0x28], xmm0
call fcn.0043e440
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xf
push eax
mov ecx, esi
call fcn.00467b20
mov byte [ebp - 4], 5
mov dword [eax], 9
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x466e97
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x466e8d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x467847
push ecx
push edx
call fcn.0056a59a
add esp, 8
push 8
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push str.TOPIMAGE
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0
movups xmmword [ebp - 0x28], xmm0
call fcn.0043e440
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x10
push eax
mov ecx, esi
call fcn.00467b20
mov byte [ebp - 4], 5
mov dword [eax], 0xa
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x466f08
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x466efe
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46784c
push ecx
push edx
call fcn.0056a59a
add esp, 8
push 7
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push str.BGIMAGE
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0
movups xmmword [ebp - 0x28], xmm0
call fcn.0043e440
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x11
push eax
mov ecx, esi
call fcn.00467b20
mov byte [ebp - 4], 5
mov dword [eax], 0xb
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x466f79
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x466f6f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x467851
push ecx
push edx
call fcn.0056a59a
add esp, 8
push 5
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push str.IMAGE
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0
movups xmmword [ebp - 0x28], xmm0
call fcn.0043e440
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x12
push eax
mov ecx, esi
call fcn.00467b20
mov byte [ebp - 4], 5
mov dword [eax], 0xc
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x466fea
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x466fe0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x467856
push ecx
push edx
call fcn.0056a59a
add esp, 8
push 0xc
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push str.ADDMAPSIGNAL
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0
movups xmmword [ebp - 0x28], xmm0
call fcn.0043e440
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x13
push eax
mov ecx, esi
call fcn.00467b20
mov byte [ebp - 4], 5
mov dword [eax], 0xd
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x46705b
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x467051
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46785b
push ecx
push edx
call fcn.0056a59a
add esp, 8
push 0xe
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push str.CLEARMAPSIGNAL
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0
movups xmmword [ebp - 0x28], xmm0
call fcn.0043e440
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x14
push eax
mov ecx, esi
call fcn.00467b20
mov byte [ebp - 4], 5
mov dword [eax], 0xe
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x4670cc
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4670c2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x467860
push ecx
push edx
call fcn.0056a59a
add esp, 8
push 9
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push str.SETMSGPOS
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0
movups xmmword [ebp - 0x28], xmm0
call fcn.0043e440
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x15
push eax
mov ecx, esi
call fcn.00467b20
mov byte [ebp - 4], 5
mov dword [eax], 0xf
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x46713d
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x467133
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x467865
push ecx
push edx
call fcn.0056a59a
add esp, 8
push 9
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push str.ADJMSGPOS
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0
movups xmmword [ebp - 0x28], xmm0
call fcn.0043e440
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x16
push eax
mov ecx, esi
call fcn.00467b20
mov byte [ebp - 4], 5
mov dword [eax], 0x10
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x4671ae
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4671a4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46786a
push ecx
push edx
call fcn.0056a59a
add esp, 8
push 0xa
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push str.SETCMAPPOS
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0
movups xmmword [ebp - 0x28], xmm0
call fcn.0043e440
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x17
push eax
mov ecx, esi
call fcn.00467b20
mov byte [ebp - 4], 5
mov dword [eax], 0x11
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x46721f
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x467215
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46786f
push ecx
push edx
call fcn.0056a59a
add esp, 8
push 0xb
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push str.QUESTBUTTON
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0
movups xmmword [ebp - 0x28], xmm0
call fcn.0043e440
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x18
push eax
mov ecx, esi
call fcn.00467b20
mov byte [ebp - 4], 5
mov dword [eax], 0x12
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x467290
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x467286
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x467874
push ecx
push edx
call fcn.0056a59a
add esp, 8
push 0x11
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push str.QUESTBUTTON_CLOSE
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0
movups xmmword [ebp - 0x28], xmm0
call fcn.0043e440
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x19
push eax
mov ecx, esi
call fcn.00467b20
mov byte [ebp - 4], 5
mov dword [eax], 0x13
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x467301
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4672f7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x467879
push ecx
push edx
call fcn.0056a59a
add esp, 8
push 5
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push str.SLEEP
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0
movups xmmword [ebp - 0x28], xmm0
call fcn.0043e440
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1a
push eax
mov ecx, esi
call fcn.00467b20
mov byte [ebp - 4], 5
mov dword [eax], 0x14
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x467372
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x467368
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46787e
push ecx
push edx
call fcn.0056a59a
add esp, 8
push 0xa
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push str.SET_CAMERA
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0
movups xmmword [ebp - 0x28], xmm0
call fcn.0043e440
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1b
push eax
mov ecx, esi
call fcn.00467b20
mov byte [ebp - 4], 5
mov dword [eax], 0x15
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x4673e3
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4673d9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x467883
push ecx
push edx
call fcn.0056a59a
add esp, 8
push 0xc
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push str.BLEND_CAMERA
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0
movups xmmword [ebp - 0x28], xmm0
call fcn.0043e440
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1c
push eax
mov ecx, esi
call fcn.00467b20
mov byte [ebp - 4], 5
mov dword [eax], 0x16
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x467454
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x46744a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x467888
push ecx
push edx
call fcn.0056a59a
add esp, 8
push 0xe
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push str.RESTORE_CAMERA
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0
movups xmmword [ebp - 0x28], xmm0
call fcn.0043e440
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1d
push eax
mov ecx, esi
call fcn.00467b20
mov byte [ebp - 4], 5
mov dword [eax], 0x17
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x4674c5
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4674bb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46788d
push ecx
push edx
call fcn.0056a59a
add esp, 8
push str.FADE_OUT
lea ecx, [ebp - 0x28]
call fcn.0043e500
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1e
push eax
mov ecx, esi
call fcn.00467b20
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x18
call fcn.0043d7a0
push str.FADE_IN
lea ecx, [ebp - 0x28]
call fcn.0043e500
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1f
push eax
mov ecx, esi
call fcn.00467b20
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x19
call fcn.0043d7a0
push str.WHITE_OUT
lea ecx, [ebp - 0x28]
call fcn.0043e500
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x20
push eax
mov ecx, esi
call fcn.00467b20
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x1a
call fcn.0043d7a0
push str.WHITE_IN
lea ecx, [ebp - 0x28]
call fcn.0043e500
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x21
push eax
mov ecx, esi
call fcn.00467b20
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x1b
call fcn.0043d7a0
push str.CLEAR_TEXT
lea ecx, [ebp - 0x28]
call fcn.0043e500
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x22
push eax
mov ecx, esi
call fcn.00467b20
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x1c
call fcn.0043d7a0
push str.TEXT_HORIZONTAL_ALIGN_CENTER
lea ecx, [ebp - 0x28]
call fcn.0043e500
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x23
push eax
mov ecx, esi
call fcn.00467b20
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x1d
call fcn.0043d7a0
push str.TITLE_IMAGE
lea ecx, [ebp - 0x28]
call fcn.0043e500
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x24
push eax
mov ecx, esi
call fcn.00467b20
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x1e
call fcn.0043d7a0
push str.RUN_CINEMA
lea ecx, [ebp - 0x28]
call fcn.0043e500
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x25
push eax
mov ecx, esi
call fcn.00467b20
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x1f
call fcn.0043d7a0
push str.DUNGEON_RESULT
lea ecx, [ebp - 0x28]
call fcn.0043e500
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x26
push eax
mov ecx, esi
call fcn.00467b20
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x20
call fcn.0043d7a0
push str.ITEM
lea ecx, [ebp - 0x28]
call fcn.0043e500
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x27
push eax
mov ecx, esi
call fcn.00467b20
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x21
call fcn.0043d7a0
push 0x64ce80
lea ecx, [ebp - 0x28]
call fcn.0043e500
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x28
push eax
mov ecx, esi
call fcn.00467b20
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x22
call fcn.0043d7a0
push str.COLOR256
lea ecx, [ebp - 0x28]
call fcn.0043e500
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x29
push eax
mov ecx, esi
call fcn.00467b20
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x23
call fcn.0043d7a0
push str.WINDOW_SIZE
lea ecx, [ebp - 0x28]
call fcn.0043e500
mov byte [ebp - 4], 0x2a
lea eax, [ebp - 0x28]
push eax
mov ecx, esi
call fcn.00467b20
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x24
call fcn.0043d7a0
push str.INPUT
lea ecx, [ebp - 0x28]
call fcn.0043e500
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2b
push eax
mov ecx, esi
call fcn.00467b20
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x25
call fcn.0043d7a0
push str.CONFIRM_WAIT
lea ecx, [ebp - 0x28]
call fcn.0043e500
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2c
push eax
mov ecx, esi
call fcn.00467b20
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x26
call fcn.0043d7a0
push str.END_CONFIRM_WAIT
lea ecx, [ebp - 0x28]
call fcn.0043e500
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2d
push eax
mov ecx, esi
call fcn.00467b20
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x27
call fcn.0043d7a0
push str.INSERT_IMAGE
lea ecx, [ebp - 0x28]
call fcn.0043e500
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2e
push eax
mov ecx, esi
call fcn.00467b20
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x28
call fcn.0043d7a0
push str.SELECT_ITEM
lea ecx, [ebp - 0x28]
call fcn.0043e500
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2f
push eax
mov ecx, esi
call fcn.00467b20
lea ecx, [ebp - 0x28]
mov dword [eax], 0x29
call fcn.0043d7a0
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0056a569
mov esp, ebp
pop ebp
ret
call fcn.005b0360
call fcn.005b0360
call fcn.005b0360
call fcn.005b0360
call fcn.005b0360
call fcn.005b0360
call fcn.005b0360
call fcn.005b0360
call fcn.005b0360
call fcn.005b0360
call fcn.005b0360
call fcn.005b0360
call fcn.005b0360
call fcn.005b0360
call fcn.005b0360
call fcn.005b0360
call fcn.005b0360
call fcn.005b0360
call fcn.005b0360
call fcn.005b0360
call fcn.005b0360
call fcn.005b0360
call fcn.005b0360
call fcn.005b0360
int3