Function at 0x4b3590
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x518ca8
mov eax, dword fs:[0]
push eax
sub esp, 0x50
mov eax, dword [0x57b728]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x20], esi
mov ebx, dword [esi + 0xac]
push 5
push 0
push str.Name_of_Quest:
push 0x12
push 0x5a
push 0xe
add ebx, 0x1c8
push 0x1e
mov dword [esi + 0x98], 0x1e
mov dword [ebp - 0x34], ebx
call fcn.004ee820
push 0
push 0x800000
push 0x522a58
push 0x12
push 0x11d
push 0xc
push 0x78
push 0x65
push dword [esi + 0x14]
lea ecx, [esi + 0x158]
call fcn.004d38d0
push 0
push 0x32
push 0xc5
push dword [esi + 0x15c]
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [esi + 0xac]
push dword [0x57f89c]
lea ecx, [esi + 0x158]
push dword [eax + 0x14]
call fcn.004d4a00
push 5
push 0
push str.Quest_ID:
push 0x12
push 0x3c
push 0x10
push 0x1b3
mov ecx, esi
call fcn.004ee820
lea ecx, [ebp - 0x5c]
call fcn.00417d90
mov eax, dword [esi + 0xac]
mov dword [ebp - 4], 0
movzx eax, word [eax + 0x1c4]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.00418220
add esp, 8
mov ecx, esi
push 5
push 0
push dword [ebp - 0x58]
push 0x12
push 0x32
push 0x10
push 0x1ef
call fcn.004ee820
push 4
push 0
push str.Type_of_quest:
push 0x12
push 0x55
push 0x2c
push 0x23
mov ecx, esi
call fcn.004ee820
push 0
push 0
push 0xc8
push 0x32
push 0x28
push 0x78
push 0x8f
push dword [esi + 0x14]
lea ecx, [esi + 0x108]
call fcn.004d3670
push str.Final
lea ecx, [esi + 0x108]
call fcn.004d2f80
push str.Farm
lea ecx, [esi + 0x108]
call fcn.004d2f80
push 0x52757c
lea ecx, [esi + 0x108]
call fcn.004d2f80
push 0x527580
lea ecx, [esi + 0x108]
call fcn.004d2f80
movzx eax, byte [ebx + 0x45]
push 0
push eax
push 0x14e
push dword [esi + 0x10c]
call dword [sym.imp.USER32.dll_SendMessageA]
push 4
push 0
push str.Obtained:
push 0x12
push 0x32
push 0x2c
push 0xb4
mov ecx, esi
call fcn.004ee820
push 0
push 0
push 0xc8
push 0xaf
push 0x28
push 0xe6
push 0x90
push dword [esi + 0x14]
lea edi, [esi + 0x130]
mov ecx, edi
call fcn.004d3670
push str.Conditional_quest_in_a_chain
mov ecx, edi
call fcn.004d2f80
push str.Standard_quest_given_by_a_NPC
mov ecx, edi
call fcn.004d2f80
push str.Quest_given_by_object
mov ecx, edi
call fcn.004d2f80
push str.Hidden_quest_activated_by_a_drop
mov ecx, edi
call fcn.004d2f80
push str.Letter_quest_activated_by_click
mov ecx, edi
call fcn.004d2f80
movzx eax, byte [ebx + 0x36]
push 0
push eax
push 0x14e
push dword [esi + 0x134]
call dword [sym.imp.USER32.dll_SendMessageA]
push 5
push 0
push str.Received_items
push 0xd
push 0x78
push 0x4c
push 0x28
mov ecx, esi
call fcn.004ee820
push 4
push 0
push str.Type
push 0x10
push 0x23
push 0x59
push 0x28
mov ecx, esi
call fcn.004ee820
push 4
push 0
push str.TypeID
push 0x10
push 0x23
push 0x59
push 0x4b
mov ecx, esi
call fcn.004ee820
push 4
push 0
push str.Count
push 0x10
push 0x28
push 0x59
push 0x78
mov ecx, esi
call fcn.004ee820
push 5
push 0
push str.123
push 0x10
push 0xf
push 0x6d
push 0x14
mov ecx, esi
call fcn.004ee820
movzx eax, byte [ebx + 0x3c]
push 0
push 0
push eax
push 0x12
push 0x23
push 0x69
push 0x23
push 0x91
push dword [esi + 0x14]
lea ecx, [esi + 0x2b4]
call fcn.004d36f0
movzx eax, byte [ebx + 0x3d]
push 0
push 0
push eax
push 0x12
push 0x28
push 0x69
push 0x4b
push 0x92
push dword [esi + 0x14]
lea ecx, [esi + 0x2d8]
call fcn.004d36f0
movzx eax, byte [ebx + 0x3e]
push 0
push 0
push eax
push 0x12
push 0x23
push 0x69
push 0x78
push 0x93
push dword [esi + 0x14]
lea ecx, [esi + 0x2fc]
call fcn.004d36f0
mov ecx, esi
push 5
push 0
push 0x53f734
push 0x10
push 0xf
push 0x85
push 0x14
call fcn.004ee820
movzx eax, byte [ebx + 0x3f]
push 0
push 0
push eax
push 0x12
push 0x23
push 0x81
push 0x23
push 0x94
push dword [esi + 0x14]
lea ecx, [esi + 0x2c0]
call fcn.004d36f0
push 0
movzx eax, byte [ebx + 0x40]
push 0
push eax
push 0x12
push 0x28
push 0x81
push 0x4b
push 0x95
push dword [esi + 0x14]
lea ecx, [esi + 0x2e4]
call fcn.004d36f0
movzx eax, byte [ebx + 0x41]
push 0
push 0
push eax
push 0x12
push 0x23
push 0x81
push 0x78
push 0x96
push dword [esi + 0x14]
lea ecx, [esi + 0x308]
call fcn.004d36f0
mov ecx, esi
push 5
push 0
push 0x53f738
push 0x10
push 0xf
push 0x9d
push 0x14
call fcn.004ee820
movzx eax, byte [ebx + 0x42]
push 0
push 0
push eax
push 0x12
push 0x23
push 0x99
push 0x23
push 0x97
push dword [esi + 0x14]
lea ecx, [esi + 0x2cc]
call fcn.004d36f0
movzx eax, byte [ebx + 0x43]
push 0
push 0
push eax
push 0x12
push 0x28
push 0x99
push 0x4b
push 0x98
push dword [esi + 0x14]
lea ecx, [esi + 0x2f0]
call fcn.004d36f0
movzx eax, byte [ebx + 0x44]
push 0
push 0
push eax
push 0x12
push 0x23
push 0x99
push 0x78
push 0x99
push dword [esi + 0x14]
lea ecx, [esi + 0x314]
call fcn.004d36f0
mov ecx, esi
push 5
push 0
push str.Items_to_farm
push 0xd
push 0x78
push 0x4c
push 0xb4
call fcn.004ee820
push 4
push 0
push str.Type
push 0x10
push 0x23
push 0x59
push 0xb4
mov ecx, esi
call fcn.004ee820
push 4
push 0
push str.TypeID
push 0x10
push 0x23
push 0x59
push 0xdc
mov ecx, esi
call fcn.004ee820
push 4
push 0
push str.Count
push 0x10
push 0x28
push 0x59
push 0x109
mov ecx, esi
call fcn.004ee820
movzx eax, byte [ebx + 0x4a]
push 0
push 0
push eax
push 0x12
push 0x23
push 0x69
push 0xaf
push 0x9a
push dword [esi + 0x14]
lea ecx, [esi + 0x320]
call fcn.004d36f0
movzx eax, byte [ebx + 0x4b]
push 0
push 0
push eax
push 0x12
push 0x28
push 0x69
push 0xd7
push 0x9b
push dword [esi + 0x14]
lea ecx, [esi + 0x344]
call fcn.004d36f0
movzx eax, byte [ebx + 0x4c]
push 0
push 0
push eax
push 0x12
push 0x23
push 0x69
push 0x104
push 0x9c
push dword [esi + 0x14]
lea ecx, [esi + 0x368]
call fcn.004d36f0
movzx eax, byte [ebx + 0x4d]
push 0
push 0
push eax
push 0x12
push 0x23
push 0x81
push 0xaf
push 0x9d
push dword [esi + 0x14]
lea ecx, [esi + 0x32c]
call fcn.004d36f0
movzx eax, byte [ebx + 0x4e]
push 0
push 0
push eax
push 0x12
push 0x28
push 0x81
push 0xd7
push 0x9e
push dword [esi + 0x14]
lea ecx, [esi + 0x350]
call fcn.004d36f0
movzx eax, byte [ebx + 0x4f]
push 0
push 0
push eax
push 0x12
push 0x23
push 0x81
push 0x104
push 0x9f
push dword [esi + 0x14]
lea ecx, [esi + 0x374]
call fcn.004d36f0
movzx eax, byte [ebx + 0x50]
push 0
push 0
push eax
push 0x12
push 0x23
push 0x99
push 0xaf
push 0xa0
push dword [esi + 0x14]
lea ecx, [esi + 0x338]
call fcn.004d36f0
movzx eax, byte [ebx + 0x51]
push 0
push 0
push eax
push 0x12
push 0x28
push 0x99
push 0xd7
push 0xa1
push dword [esi + 0x14]
lea ecx, [esi + 0x35c]
call fcn.004d36f0
movzx eax, byte [ebx + 0x52]
push 0
push 0
push eax
push 0x12
push 0x23
push 0x99
push 0x104
push 0xa2
push dword [esi + 0x14]
lea ecx, [esi + 0x380]
call fcn.004d36f0
mov ecx, esi
push 5
push 0
push str.Mobs_to_fight
push 0xd
push 0x5a
push 0x4c
push 0x13b
call fcn.004ee820
mov ecx, esi
push 4
push 0
push str.Type
push 0x10
push 0x23
push 0x59
push 0x13b
call fcn.004ee820
push 4
push 0
push str.Count
push 0x10
push 0x23
push 0x59
push 0x16d
mov ecx, esi
call fcn.004ee820
movsx eax, word [ebx + 0x54]
push 0
push 0
push eax
push 0x12
push 0x2d
push 0x69
push 0x136
push 0xa3
push dword [esi + 0x14]
lea ecx, [esi + 0x38c]
call fcn.004d36f0
movzx eax, byte [ebx + 0x56]
push 0
push 0
push eax
push 0x12
push 0x23
push 0x69
push 0x168
push 0xa4
push dword [esi + 0x14]
lea ecx, [esi + 0x3a4]
call fcn.004d36f0
movsx eax, word [ebx + 0x58]
push 0
push 0
push eax
push 0x12
push 0x2d
push 0x81
push 0x136
push 0xa5
push dword [esi + 0x14]
lea ecx, [esi + 0x398]
call fcn.004d36f0
movzx eax, byte [ebx + 0x5a]
push 0
push 0
push eax
push 0x12
push 0x23
push 0x81
push 0x168
push 0xa6
push dword [esi + 0x14]
lea ecx, [esi + 0x3b0]
call fcn.004d36f0
mov ecx, esi
push 5
push 0
push str.PvP_kills
push 0xd
push 0x32
push 0x9d
push 0x136
call fcn.004ee820
movzx eax, byte [ebx + 0x53]
push 0
push 0
push eax
push 0x12
push 0x23
push 0x99
push 0x168
push 0xa7
push dword [esi + 0x14]
lea ecx, [esi + 0x3bc]
call fcn.004d36f0
mov ecx, esi
push 4
push 0
push str.Quest_for:
push 0x12
push 0x32
push 0x2c
push 0x1b3
call fcn.004ee820
lea edi, [esi + 0xb8]
push 0
push 0
push 0xc8
push 0x64
push 0x28
push 0x1ef
push 0x6e
push dword [esi + 0x14]
mov ecx, edi
call fcn.004d3670
push str.Human
mov ecx, edi
call fcn.004d2f80
push 0x5243b8
mov ecx, edi
call fcn.004d2f80
push str.Light
mov ecx, edi
call fcn.004d2f80
push str.Deatheater
mov ecx, edi
call fcn.004d2f80
push str.Vail
mov ecx, edi
call fcn.004d2f80
push str.Fury
mov ecx, edi
call fcn.004d2f80
push str.All_factions
mov ecx, edi
call fcn.004d2f80
movzx eax, byte [ebx + 4]
push 0
push eax
push 0x14e
push dword [esi + 0xbc]
call dword [sym.imp.USER32.dll_SendMessageA]
push 4
push 0
push str.in_mode:
push 0x12
push 0x2d
push 0x2c
push 0x25d
mov ecx, esi
call fcn.004ee820
push 0
push 0
push 0x96
push 0x78
push 0x28
push 0x28f
push 0x6f
push dword [esi + 0x14]
lea ecx, [esi + 0xe0]
call fcn.004d3670
push str.Easy_or_higher
lea ecx, [esi + 0xe0]
call fcn.004d2f80
push str.Normal_or_higher
lea ecx, [esi + 0xe0]
call fcn.004d2f80
push str.Difficult_or_higher
lea ecx, [esi + 0xe0]
call fcn.004d2f80
push str.Ultimate
lea ecx, [esi + 0xe0]
call fcn.004d2f80
movzx eax, byte [ebx + 5]
push 0
push eax
push 0x14e
push dword [esi + 0xe4]
call dword [sym.imp.USER32.dll_SendMessageA]
push 4
push 0
push str.Classes:
push 0x12
push 0x32
push 0x48
push 0x1b3
mov ecx, esi
call fcn.004ee820
push 0
push 0x10002
lea edi, [esi + 0x1e8]
push str.Fighter
push 0x12
push 0x32
push 0x46
push 0x1ef
push 0x70
push dword [esi + 0x14]
mov ecx, edi
call fcn.004d3570
push 0
push 2
push str.Defender
push 0x12
push 0x3c
push 0x46
push 0x226
push 0x71
push dword [esi + 0x14]
lea ecx, [esi + 0x1f4]
call fcn.004d3570
push 0
push 2
push str.Ranger
push 0x12
push 0x32
push 0x46
push 0x267
push 0x72
push dword [esi + 0x14]
lea ecx, [esi + 0x200]
call fcn.004d3570
push 0
push 2
push str.Archer
push 0x12
push 0x32
push 0x46
push 0x29e
push 0x73
push dword [esi + 0x14]
lea ecx, [esi + 0x20c]
call fcn.004d3570
push 0
push 2
push str.Mage
push 0x12
push 0x2d
push 0x46
push 0x2d5
push 0x74
push dword [esi + 0x14]
lea ecx, [esi + 0x218]
call fcn.004d3570
push 0
push 2
push str.Priest
push 0x12
push 0x32
push 0x46
push 0x307
push 0x75
push dword [esi + 0x14]
lea ecx, [esi + 0x224]
call fcn.004d3570
mov esi, dword [ebp - 0x34]
xor ebx, ebx
cmp byte [esi + ebx + 8], 1
mov edx, dword [edi]
sete al
movzx eax, al
push eax
mov ecx, edi
call dword [edx + 0x38]
inc ebx
add edi, 0xc
cmp ebx, 6
jl 0x4b3f26
mov esi, dword [ebp - 0x20]
push 4
push 0
push str.Level:
push 0x10
push 0x32
push 0x6b
push 0x1b3
mov ecx, esi
call fcn.004ee820
mov ebx, dword [ebp - 0x34]
push 0
movsx eax, word [ebx]
push 0
push eax
push 0x12
push 0x28
push 0x69
push 0x1ef
push 0x8c
push dword [esi + 0x14]
lea ecx, [esi + 0x23c]
call fcn.004d36f0
mov ecx, esi
push 4
push 1
push 0x530378
push 0x10
push 0xa
push 0x6b
push 0x217
call fcn.004ee820
movsx eax, word [ebx + 2]
push 0
push 0
push eax
push 0x12
push 0x28
push 0x69
push 0x221
push 0x8d
push dword [esi + 0x14]
lea ecx, [esi + 0x248]
call fcn.004d36f0
mov ecx, esi
push 4
push 0
push str.Delay:
push 0x10
push 0x32
push 0x6b
push 0x258
call fcn.004ee820
movsx eax, word [ebx + 0x24]
push 0
push 0
push eax
push 0x12
push 0x28
push 0x69
push 0x29e
push 0x8e
push dword [esi + 0x14]
lea ecx, [esi + 0x2a8]
call fcn.004d36f0
mov ecx, esi
push 4
push 0
push str._0:_no_limit_
push 0x10
push 0x3c
push 0x6b
push 0x2cb
call fcn.004ee820
push 4
push 0
push str.Given_by:
push 0x10
push 0x32
push 0x83
push 0x1b3
mov ecx, esi
call fcn.004ee820
movzx eax, byte [ebx + 0x37]
push 0
push 0
push eax
push 0x12
push 0x28
push 0x81
push 0x1ef
push 0x66
push dword [esi + 0x14]
lea ecx, [esi + 0x254]
call fcn.004d36f0
movsx eax, word [ebx + 0x38]
push 0
push 0
push eax
push 0x12
push 0x28
push 0x81
push 0x221
push 0x67
push dword [esi + 0x14]
lea ecx, [esi + 0x260]
call fcn.004d36f0
mov ecx, esi
push 4
push 0
push str.Received_by:
push 0x10
push 0x46
push 0x83
push 0x258
call fcn.004ee820
movzx eax, byte [ebx + 0x46]
push 0
push 0
push eax
push 0x12
push 0x28
push 0x81
push 0x29e
push 0x68
push dword [esi + 0x14]
lea ecx, [esi + 0x26c]
call fcn.004d36f0
movsx eax, word [ebx + 0x48]
push 0
push 0
push eax
push 0x12
push 0x28
push 0x81
push 0x2d0
push 0x69
push dword [esi + 0x14]
lea ecx, [esi + 0x278]
call fcn.004d36f0
mov ecx, esi
push 4
push 0
push str.Requires:
push 0x10
push 0x32
push 0x9b
push 0x1b3
call fcn.004ee820
movsx eax, word [ebx + 0x16]
push 0
push 0
push eax
push 0x12
push 0x28
push 0x99
push 0x1ef
push 0x6a
push dword [esi + 0x14]
lea ecx, [esi + 0x284]
call fcn.004d36f0
push 0
movsx eax, word [ebx + 0xe]
push 0
push eax
push 0x12
push 0x28
push 0x99
push 0x221
push 0x6b
push dword [esi + 0x14]
lea ecx, [esi + 0x290]
call fcn.004d36f0
movsx eax, word [ebx + 0x10]
push 0
push 0
push eax
push 0x12
push 0x28
push 0x99
push 0x253
push 0x6c
push dword [esi + 0x14]
lea ecx, [esi + 0x29c]
call fcn.004d36f0
lea ecx, [esi + 0x230]
push 0
push 0x10002
push str._Repeatable
push 0x12
push 0x50
push 0x99
push 0x2a3
push 0x6d
push dword [esi + 0x14]
call fcn.004d3570
cmp byte [ebx + 0x32], 1
mov edx, dword [esi + 0x230]
sete al
movzx eax, al
push eax
lea ecx, [esi + 0x230]
call dword [edx + 0x38]
mov ecx, esi
push 3
push 0
push str.Welcome_Msg:
push 0xd
push 0x302
push 0xb9
push 0x14
call fcn.004ee820
mov edx, dword [esi + 0x34]
push 0x606060
push eax
lea ecx, [esi + 0x34]
call dword [edx + 4]
push 0
push 0x800004
push 0x522a58
push 0x11
push 0x302
push 0xc6
push 0x14
push 0x76
push dword [esi + 0x14]
lea ecx, [esi + 0x164]
call fcn.004d38d0
push 0
push 0x100
push 0xc5
push dword [esi + 0x168]
call dword [sym.imp.USER32.dll_SendMessageA]
xor eax, eax
cmp byte [esi + 0xb0], al
push 3
push 0
sete al
push str.Initial_Description:__displayed_when_quest_is_given__also_Quest_Info_in_quest_window_
push 0xd
push 0x302
push 0xdb
mov dword [ebp - 0x20], eax
push 0x14
mov ecx, esi
call fcn.004ee820
mov edx, dword [esi + 0x34]
push 0x606060
push eax
lea ecx, [esi + 0x34]
call dword [edx + 4]
xor ebx, ebx
cmp byte [esi + 0xb0], bl
push 0
sete bl
push 0x800004
push 0x522a58
lea ecx, [esi + 0x170]
lea ebx, [ebx*2 + 5]
imul ebx, ebx, 0xd
add ebx, 4
push ebx
push 0x302
push 0xe8
push 0x14
push 0x77
push dword [esi + 0x14]
call fcn.004d38d0
push 0
push 0x400
push 0xc5
push dword [esi + 0x174]
call dword [sym.imp.USER32.dll_SendMessageA]
push 3
push 0
push str.Summary:__Quest_Mission_in_quest_window_
push 0xd
push 0x302
add ebx, 0xec
push ebx
push 0x14
mov ecx, esi
call fcn.004ee820
mov edx, dword [esi + 0x34]
push 0x606060
push eax
lea ecx, [esi + 0x34]
call dword [edx + 4]
mov eax, dword [ebp - 0x20]
imul eax, eax, 0xd
push 0
push 0x800004
push 0x522a58
lea edi, [eax + 0x1e]
push edi
push 0x302
add ebx, 0xd
push ebx
push 0x14
push 0x78
push dword [esi + 0x14]
lea ecx, [esi + 0x17c]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x30], edi
call fcn.004d38d0
push 0
push 0x200
push 0xc5
push dword [esi + 0x180]
call dword [sym.imp.USER32.dll_SendMessageA]
push 3
push 0
push str.Reminder_instructions:__displayed_by_NPC_that_gave_the_quest_if_it_is_not_completed_
push 0xd
add edi, 4
push 0x302
add edi, ebx
push edi
push 0x14
mov ecx, esi
call fcn.004ee820
mov edx, dword [esi + 0x34]
push 0x606060
push eax
lea ecx, [esi + 0x34]
call dword [edx + 4]
push 0
push 0x800004
push 0x522a58
push 0x11
push 0x302
add edi, 0xd
push edi
push 0x14
push 0x79
push dword [esi + 0x14]
lea ecx, [esi + 0x188]
call fcn.004d38d0
push 0
push 0x400
push 0xc5
push dword [esi + 0x18c]
call dword [sym.imp.USER32.dll_SendMessageA]
push 3
push 0
push str.Alternate_Response__displayed_when_the_quest_is_done_or_inactive_:
push 0xd
push 0x302
add edi, 0x15
push edi
push 0x14
mov ecx, esi
call fcn.004ee820
mov edx, dword [esi + 0x34]
push 0x606060
push eax
lea ecx, [esi + 0x34]
call dword [edx + 4]
mov eax, dword [ebp - 0x20]
push 0
push 0x800004
push 0x522a58
add eax, 0x11
push eax
push 0x302
add edi, 0xd
push edi
push 0x14
push 0x7a
push dword [esi + 0x14]
lea ecx, [esi + 0x194]
mov dword [ebp - 0x1c], eax
call fcn.004d38d0
push 0
push 0x400
push 0xc5
push dword [esi + 0x198]
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [ebp - 0x1c]
push 3
push 0
push str.Completion_Msg:__displayed_when_the_quest_is_validated_with_all_requirements_fulfilled_
push 0xd
add eax, 4
push 0x302
add edi, eax
push edi
push 0x14
mov ecx, esi
call fcn.004ee820
mov edx, dword [esi + 0x34]
push 0x606060
push eax
lea ecx, [esi + 0x34]
call dword [edx + 4]
xor ebx, ebx
add edi, 0xd
cmp byte [esi + 0xb0], bl
push 0
sete bl
push 0x800004
push 0x522a58
lea ebx, [ebx*2 + 2]
imul ebx, ebx, 0xd
add ebx, 4
push ebx
push 0x302
push edi
push 0x14
push 0x7b
push dword [esi + 0x14]
lea ecx, [esi + 0x1a0]
call fcn.004d38d0
push 0
push 0x400
push 0xc5
push dword [esi + 0x1a4]
call dword [sym.imp.USER32.dll_SendMessageA]
push 3
push 0
push str.Alternate_Completion_Msg_2:
push 0xd
add ebx, 4
push 0x302
add edi, ebx
push edi
push 0x14
mov ecx, esi
call fcn.004ee820
mov edx, dword [esi + 0x34]
lea ecx, [esi + 0x34]
push 0x606060
push eax
call dword [edx + 4]
mov ebx, dword [ebp - 0x30]
push 0
push 0x800004
push 0x522a58
push ebx
push 0x302
add edi, 0xd
push edi
push 0x14
push 0x7c
push dword [esi + 0x14]
lea ecx, [esi + 0x1ac]
call fcn.004d38d0
push 0
push 0x400
push 0xc5
push dword [esi + 0x1b0]
call dword [sym.imp.USER32.dll_SendMessageA]
push 3
push 0
push str.Alternate_Completion_Msg_3:
push 0xd
add edi, 4
push 0x302
add edi, ebx
push edi
push 0x14
mov ecx, esi
call fcn.004ee820
mov edx, dword [esi + 0x34]
lea ecx, [esi + 0x34]
push 0x606060
push eax
call dword [edx + 4]
push 0
push 0x800004
push 0x522a58
push ebx
push 0x302
add edi, 0xd
push edi
push 0x14
push 0x7d
push dword [esi + 0x14]
lea ecx, [esi + 0x1b8]
call fcn.004d38d0
push 0
push 0x400
push 0xc5
push dword [esi + 0x1bc]
call dword [sym.imp.USER32.dll_SendMessageA]
add ebx, 4
add ebx, edi
cmp dword [esi + 0xb4], 6
jne 0x4b470f
push 3
push 0
push str.Alternate_Completion_Msg_4:
push 0xd
push 0x302
push ebx
push 0x14
mov ecx, esi
call fcn.004ee820
mov edx, dword [esi + 0x34]
lea ecx, [esi + 0x34]
push 0x606060
push eax
call dword [edx + 4]
mov edi, dword [ebp - 0x1c]
push 0
push 0x800004
push 0x522a58
push edi
push 0x302
add ebx, 0xd
push ebx
push 0x14
push 0x7d
push dword [esi + 0x14]
lea ecx, [esi + 0x1c4]
call fcn.004d38d0
push 0
push 0x400
push 0xc5
push dword [esi + 0x1c8]
call dword [sym.imp.USER32.dll_SendMessageA]
push 3
push 0
push str.Alternate_Completion_Msg_5:
push 0xd
add edi, 4
push 0x302
add edi, ebx
push edi
push 0x14
mov ecx, esi
call fcn.004ee820
mov edx, dword [esi + 0x34]
push 0x606060
push eax
lea ecx, [esi + 0x34]
call dword [edx + 4]
mov eax, dword [ebp - 0x1c]
push 0
push 0x800004
push 0x522a58
push eax
push 0x302
add edi, 0xd
push edi
push 0x14
push 0x7f
push dword [esi + 0x14]
lea ecx, [esi + 0x1d0]
call fcn.004d38d0
push 0
push 0x400
push 0xc5
push dword [esi + 0x1d4]
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [ebp - 0x1c]
push 3
push 0
push str.Alternate_Completion_Msg_6:
push 0xd
add eax, 4
push 0x302
add edi, eax
push edi
push 0x14
mov ecx, esi
call fcn.004ee820
mov edx, dword [esi + 0x34]
push 0x606060
push eax
lea ecx, [esi + 0x34]
call dword [edx + 4]
mov ebx, dword [ebp - 0x1c]
push 0
push 0x800004
push 0x522a58
push ebx
push 0x302
add edi, 0xd
push edi
push 0x14
push 0x80
push dword [esi + 0x14]
lea ecx, [esi + 0x1dc]
call fcn.004d38d0
push 0
push 0x400
push 0xc5
push dword [esi + 0x1e0]
call dword [sym.imp.USER32.dll_SendMessageA]
add ebx, 4
add ebx, edi
push 5
push 0
push str.Rewards
push 0x10
push 0x4b
add ebx, 8
push ebx
push 0x14
mov ecx, esi
call fcn.004ee820
push 4
push 0
push str.Mob_Counter
push 0x10
push 0x46
add ebx, 0x10
push ebx
push 0x28
mov ecx, esi
call fcn.004ee820
push 4
push 0
push str.Item_Counter
push 0x10
push 0x46
push ebx
push 0x73
mov ecx, esi
call fcn.004ee820
push 4
push 0
push str.Gold
push 0x10
push 0x28
push ebx
push 0xc3
mov ecx, esi
call fcn.004ee820
push 4
push 0
push 0x5426a8
push 0x10
push 0x28
push ebx
push 0xfa
mov ecx, esi
call fcn.004ee820
mov edi, 0x140
mov dword [ebp - 0x20], 3
lea ebx, [ebx]
push 4
push 0
push str.Type
push 0x10
push 0x28
push ebx
push edi
mov ecx, esi
call fcn.004ee820
push 4
push 0
push str.TypeID
push 0x10
push 0x28
push ebx
add edi, 0x2d
push edi
mov ecx, esi
call fcn.004ee820
push 4
push 0
push str.Count
push 0x10
push 0x28
push ebx
add edi, 0x2d
push edi
mov ecx, esi
call fcn.004ee820
add edi, 0x32
dec dword [ebp - 0x20]
jne 0x4b47a0
push 4
push 0
push str.Unlock
push 0x10
push 0x28
push ebx
push edi
mov ecx, esi
call fcn.004ee820
add ebx, 0x10
cmp dword [esi + 0xb4], 0
mov edi, 0xc8
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x1c], edi
jle 0x4b4b2a
mov ecx, 0x78
lea eax, [esi + 0x444]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x2c], eax
lea esp, [esp]
lea eax, [ecx - 0x77]
push eax
push 0x5426b4
lea eax, [ebp - 0x18]
push 6
push eax
call fcn.004f20e4
add esp, 0x10
lea eax, [ebp - 0x18]
push 5
push 0
push eax
push 0x10
push 0x14
lea eax, [ebx + 4]
push eax
push 0x14
mov ecx, esi
call fcn.004ee820
mov ebx, dword [ebp - 0x2c]
push 0
push 2
push 0
push 0x12
push 0x14
push dword [ebp - 0x28]
lea ecx, [ebx - 0x48]
push 0x28
push dword [ebp - 0x20]
push dword [esi + 0x14]
call fcn.004d3570
mov eax, dword [esi + 0xac]
mov edx, dword [ebp - 0x24]
push 0
movzx eax, byte [edx + eax + 0x22a]
push 0
push eax
push 0x12
push 0x28
push dword [ebp - 0x28]
mov ecx, ebx
push 0x3c
push edi
push dword [esi + 0x14]
lea ecx, [ecx + 0x48]
call fcn.004d36f0
mov eax, dword [ebp - 0x20]
push 0
push 2
push 0
push 0x12
push 0x14
push dword [ebp - 0x28]
inc edi
push 0x73
add eax, 0xa
push eax
push dword [esi + 0x14]
mov dword [ebp - 0x1c], edi
mov edi, ebx
mov ecx, ebx
call fcn.004d3570
mov eax, dword [esi + 0xac]
mov ecx, dword [ebp - 0x24]
push 0
movzx eax, byte [ecx + eax + 0x22c]
push 0
push eax
push 0x12
push 0x28
push dword [ebp - 0x28]
lea ecx, [edi + 0x90]
push 0x87
push dword [ebp - 0x1c]
push dword [esi + 0x14]
call fcn.004d36f0
mov eax, dword [esi + 0xac]
mov ecx, dword [ebp - 0x24]
inc dword [ebp - 0x1c]
mov edx, dword [ebx - 0x48]
cmp byte [ecx + eax + 0x228], 1
sete al
movzx eax, al
push eax
lea ecx, [ebx - 0x48]
call dword [edx + 0x38]
mov eax, dword [esi + 0xac]
mov ecx, ebx
mov ebx, dword [ebp - 0x24]
mov edx, dword [ecx]
cmp byte [ebx + eax + 0x22b], 1
sete al
movzx eax, al
push eax
call dword [edx + 0x38]
mov eax, dword [esi + 0xac]
mov ecx, edi
add ecx, 0x48
cmp byte [ebx + eax + 0x228], 1
mov edx, dword [ecx]
sete al
movzx eax, al
push eax
call dword [edx + 0x10]
mov eax, dword [esi + 0xac]
mov edx, dword [edi + 0x90]
cmp byte [ebx + eax + 0x22b], 1
lea ecx, [edi + 0x90]
sete al
movzx eax, al
push eax
call dword [edx + 0x10]
mov eax, dword [esi + 0xac]
mov edi, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x2c]
push 0
push 0
push dword [ebx + eax + 0x23c]
mov ebx, dword [ebp - 0x28]
push 0x12
push 0x32
push ebx
push 0xbe
push edi
push dword [esi + 0x14]
lea ecx, [ecx + 0xd8]
call fcn.004d36f0
mov eax, dword [esi + 0xac]
mov ecx, dword [ebp - 0x24]
push 0
push 0
push dword [ecx + eax + 0x238]
mov ecx, dword [ebp - 0x2c]
push 0x12
push 0x3c
push ebx
push 0xf5
inc edi
push edi
push dword [esi + 0x14]
lea ecx, [ecx + 0x120]
call fcn.004d36f0
mov eax, dword [ebp - 0x24]
add eax, 0x240
xor ecx, ecx
lea edx, [esi + 0x48c]
inc edi
add edx, eax
mov ebx, 0x13b
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x30], edx
mov eax, dword [esi + 0xac]
add eax, dword [ebp - 0x38]
push 0
push 0
movzx eax, byte [eax + ecx]
push eax
push 0x12
push 0x28
push dword [ebp - 0x28]
lea ecx, [edx - 0xd8]
push ebx
push edi
push dword [esi + 0x14]
call fcn.004d36f0
mov eax, dword [esi + 0xac]
add eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x1c]
push 0
movzx eax, byte [eax + ecx + 0x243]
mov ecx, dword [ebp - 0x30]
push 0
push eax
push 0x12
push 0x28
push dword [ebp - 0x28]
add ebx, 0x2d
push ebx
inc edi
push edi
push dword [esi + 0x14]
call fcn.004d36f0
mov eax, dword [esi + 0xac]
add eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x1c]
push 0
movzx eax, byte [eax + ecx + 0x246]
mov ecx, dword [ebp - 0x30]
push 0
push eax
push 0x12
push 0x28
push dword [ebp - 0x28]
add ebx, 0x2d
push ebx
inc edi
push edi
push dword [esi + 0x14]
lea ecx, [ecx + 0xd8]
call fcn.004d36f0
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x30]
inc ecx
add edx, 0xc
inc edi
add ebx, 0x32
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x30], edx
cmp ecx, 3
jl 0x4b4a21
mov eax, dword [esi + 0xac]
mov ecx, dword [ebp - 0x24]
push 0
movsx eax, word [ecx + eax + 0x24a]
mov ecx, dword [ebp - 0x2c]
push 0
push eax
push 0x12
push 0x32
push dword [ebp - 0x28]
lea ecx, [ecx + 0x168]
push ebx
push edi
push dword [esi + 0x14]
call fcn.004d36f0
mov ecx, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x28]
add dword [ebp - 0x2c], 0xc
add dword [ebp - 0x24], 0x24
inc ecx
inc edi
add ebx, 0x18
lea eax, [ecx - 0x78]
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x20], ecx
cmp eax, dword [esi + 0xb4]
jl 0x4b4840
push 0
push 2
push str.Give_default_reward
push 0x12
push 0x78
add ebx, 6
lea ecx, [esi + 0x3c8]
lea eax, [ebx + 2]
push eax
push 0x28
push 0xa8
push dword [esi + 0x14]
call fcn.004d3570
mov eax, dword [ebp - 0x34]
mov edx, dword [esi + 0x3c8]
cmp byte [eax + 0x5b], 1
lea ecx, [esi + 0x3c8]
sete al
movzx eax, al
push eax
call dword [edx + 0x38]
lea eax, [ebx + 6]
push 5
push 0
push 0x5426cc
push 0x10
push 0xa
push eax
push 0xa0
mov ecx, esi
call fcn.004ee820
lea edi, [esi + 0x3d4]
push 0
push 0
push 0xc8
push 0x122
push ebx
push 0xb4
push dword [ebp - 0x1c]
mov ecx, edi
push dword [esi + 0x14]
call fcn.004d3670
push str.Give_all_rewards_or_the_one_matching_above_criteria
mov ecx, edi
call fcn.004d2f80
push 0x5243d8
mov ecx, edi
call fcn.004d2f80
push str.Give_1_reward_among_the_2_listed_choices
mov ecx, edi
call fcn.004d2f80
push str.Give_1_reward_among_the_3_listed_choices
mov ecx, edi
call fcn.004d2f80
push str.Give_1_reward_among_the_4_listed_choices
mov ecx, edi
call fcn.004d2f80
push str.Give_1_reward_among_the_5_listed_choices
mov ecx, edi
call fcn.004d2f80
push str.Give_1_reward_among_the_6_listed_choices
mov ecx, edi
call fcn.004d2f80
mov ebx, dword [ebp - 0x34]
push 0
movzx eax, byte [ebx + 0x5c]
push eax
push 0x14e
push dword [esi + 0x3d8]
call dword [sym.imp.USER32.dll_SendMessageA]
cmp byte [ebx + 0x5b], 0
mov edx, dword [edi]
sete al
movzx eax, al
push eax
mov ecx, edi
call dword [edx + 0x10]
mov ecx, esi
call fcn.004de4e0
test al, al
jne 0x4b4c44
xor bl, bl
jmp 0x4b4c5c
movzx eax, byte [ebx + 0x45]
push eax
mov ecx, esi
call fcn.004b32e0
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x138]
mov bl, 1
lea ecx, [ebp - 0x5c]
mov dword [ebp - 4], 0xffffffff
call fcn.00417dd0
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004eff68
mov esp, ebp
pop ebp
ret