Function at 0x43a6d0
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5e2daf
mov eax, dword fs:[0]
push eax
sub esp, 0x24
mov eax, dword [0x651ea8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x30], edi
mov dword [0x6da27c], edi
mov dword [ebp - 4], 0
lea esi, [edi + 4]
mov dword [edi], vtable.CPythonEventManager.0
mov dword [ebp - 0x2c], esi
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.00415b20
mov dword [esi], eax
mov dword [edi + 0xc], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
mov dword [edi + 0x1c], vtable.CDynamicPool_struct_CPythonEventManager::SEventSet_.0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x28], 0
mov dword [edi + 0x2c], 0
mov dword [edi + 0x30], 0
mov dword [edi + 0x34], 0
mov dword [edi + 0x38], 0
mov dword [edi + 0x3c], 0
mov dword [edi + 0x40], vtable.CDynamicPool_class_CGraphicTextInstance_.0
mov dword [edi + 0x44], 0
mov dword [edi + 0x48], 0
mov dword [edi + 0x4c], 0
mov dword [edi + 0x50], 0
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x5c], 0
mov dword [edi + 0x60], 0
mov byte [ebp - 4], 4
lea ecx, [edi + 0x68]
mov dword [edi + 0x64], 0
push 0x10
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push 0x6229c0
mov byte [ecx], 0
call fcn.00406cf0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x28]
push 6
push str.LETTER
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 6
push eax
mov ecx, esi
call fcn.0043ba00
mov byte [ebp - 4], 5
mov dword [eax], 0
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x43a85f
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43a855
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43b64e
push edx
push ecx
call fcn.00552bfd
add esp, 8
push 5
push str.COLOR
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 7
push eax
mov ecx, esi
call fcn.0043ba00
mov byte [ebp - 4], 5
mov dword [eax], 1
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x43a8cd
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43a8c3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43b653
push edx
push ecx
call fcn.00552bfd
add esp, 8
push 5
push str.DELAY
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 8
push eax
mov ecx, esi
call fcn.0043ba00
mov byte [ebp - 4], 5
mov dword [eax], 2
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x43a93b
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43a931
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43b658
push edx
push ecx
call fcn.00552bfd
add esp, 8
push 5
push str.ENTER
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 9
push eax
mov ecx, esi
call fcn.0043ba00
mov byte [ebp - 4], 5
mov dword [eax], 3
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x43a9a9
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43a99f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43b65d
push edx
push ecx
call fcn.00552bfd
add esp, 8
push 4
push str.WAIT
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xa
push eax
mov ecx, esi
call fcn.0043ba00
mov byte [ebp - 4], 5
mov dword [eax], 4
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x43aa17
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43aa0d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43b662
push edx
push ecx
call fcn.00552bfd
add esp, 8
push 5
push str.CLEAR
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xb
push eax
mov ecx, esi
call fcn.0043ba00
mov byte [ebp - 4], 5
mov dword [eax], 5
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x43aa85
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43aa7b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43b667
push edx
push ecx
call fcn.00552bfd
add esp, 8
push 8
push str.QUESTION
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xc
push eax
mov ecx, esi
call fcn.0043ba00
mov byte [ebp - 4], 5
mov dword [eax], 6
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x43aaf3
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43aae9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43b66c
push edx
push ecx
call fcn.00552bfd
add esp, 8
push 4
push str.NEXT
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xd
push eax
mov ecx, esi
call fcn.0043ba00
mov byte [ebp - 4], 5
mov dword [eax], 7
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x43ab61
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43ab57
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43b671
push edx
push ecx
call fcn.00552bfd
add esp, 8
push 4
push str.DONE
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xe
push eax
mov ecx, esi
call fcn.0043ba00
mov byte [ebp - 4], 5
mov dword [eax], 8
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x43abcf
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43abc5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43b676
push edx
push ecx
call fcn.00552bfd
add esp, 8
push 9
push str.LEFTIMAGE
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xf
push eax
mov ecx, esi
call fcn.0043ba00
mov byte [ebp - 4], 5
mov dword [eax], 9
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x43ac3d
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43ac33
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43b67b
push edx
push ecx
call fcn.00552bfd
add esp, 8
push 8
push str.TOPIMAGE
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x10
push eax
mov ecx, esi
call fcn.0043ba00
mov byte [ebp - 4], 5
mov dword [eax], 0xa
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x43acab
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43aca1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43b680
push edx
push ecx
call fcn.00552bfd
add esp, 8
push 7
push str.BGIMAGE
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x11
push eax
mov ecx, esi
call fcn.0043ba00
mov byte [ebp - 4], 5
mov dword [eax], 0xb
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x43ad19
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43ad0f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43b685
push edx
push ecx
call fcn.00552bfd
add esp, 8
push 5
push str.IMAGE
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x12
push eax
mov ecx, esi
call fcn.0043ba00
mov byte [ebp - 4], 5
mov dword [eax], 0xc
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x43ad87
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43ad7d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43b68a
push edx
push ecx
call fcn.00552bfd
add esp, 8
push 0xc
push str.ADDMAPSIGNAL
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x13
push eax
mov ecx, esi
call fcn.0043ba00
mov byte [ebp - 4], 5
mov dword [eax], 0xd
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x43adf5
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43adeb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43b68f
push edx
push ecx
call fcn.00552bfd
add esp, 8
push 0xe
push str.CLEARMAPSIGNAL
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x14
push eax
mov ecx, esi
call fcn.0043ba00
mov byte [ebp - 4], 5
mov dword [eax], 0xe
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x43ae63
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43ae59
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43b694
push edx
push ecx
call fcn.00552bfd
add esp, 8
push 9
push str.SETMSGPOS
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x15
push eax
mov ecx, esi
call fcn.0043ba00
mov byte [ebp - 4], 5
mov dword [eax], 0xf
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x43aed1
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43aec7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43b699
push edx
push ecx
call fcn.00552bfd
add esp, 8
push 9
push str.ADJMSGPOS
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x16
push eax
mov ecx, esi
call fcn.0043ba00
mov byte [ebp - 4], 5
mov dword [eax], 0x10
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x43af3f
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43af35
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43b69e
push edx
push ecx
call fcn.00552bfd
add esp, 8
push 0xa
push str.SETCMAPPOS
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x17
push eax
mov ecx, esi
call fcn.0043ba00
mov byte [ebp - 4], 5
mov dword [eax], 0x11
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x43afad
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43afa3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43b6a3
push edx
push ecx
call fcn.00552bfd
add esp, 8
push 0xb
push str.QUESTBUTTON
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x18
push eax
mov ecx, esi
call fcn.0043ba00
mov byte [ebp - 4], 5
mov dword [eax], 0x12
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x43b01b
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43b011
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43b6a8
push edx
push ecx
call fcn.00552bfd
add esp, 8
push 0x11
push str.QUESTBUTTON_CLOSE
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x19
push eax
mov ecx, esi
call fcn.0043ba00
mov byte [ebp - 4], 5
mov dword [eax], 0x13
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x43b089
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43b07f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43b6ad
push edx
push ecx
call fcn.00552bfd
add esp, 8
push 5
push str.SLEEP
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1a
push eax
mov ecx, esi
call fcn.0043ba00
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x14
call fcn.00406ed0
push 0xa
push str.SET_CAMERA
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1b
push eax
mov ecx, esi
call fcn.0043ba00
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x15
call fcn.00406ed0
push 0xc
push str.BLEND_CAMERA
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1c
push eax
mov ecx, esi
call fcn.0043ba00
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x16
call fcn.00406ed0
push 0xe
push str.RESTORE_CAMERA
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1d
push eax
mov ecx, esi
call fcn.0043ba00
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x17
call fcn.00406ed0
push 8
push str.FADE_OUT
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1e
push eax
mov ecx, esi
call fcn.0043ba00
lea ecx, [ebp - 0x28]
mov dword [eax], 0x18
mov byte [ebp - 4], 5
call fcn.00406ed0
push 7
push str.FADE_IN
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1f
push eax
mov ecx, esi
call fcn.0043ba00
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x19
call fcn.00406ed0
push 9
push str.WHITE_OUT
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x20
push eax
mov ecx, esi
call fcn.0043ba00
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x1a
call fcn.00406ed0
push 8
push str.WHITE_IN
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x21
push eax
mov ecx, esi
call fcn.0043ba00
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x1b
call fcn.00406ed0
push 0xa
push str.CLEAR_TEXT
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x22
push eax
mov ecx, esi
call fcn.0043ba00
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x1c
call fcn.00406ed0
push 0x1c
push str.TEXT_HORIZONTAL_ALIGN_CENTER
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
mov byte [ebp - 4], 0x23
lea eax, [ebp - 0x28]
mov ecx, esi
push eax
call fcn.0043ba00
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x1d
call fcn.00406ed0
push 0xb
push str.TITLE_IMAGE
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x24
push eax
mov ecx, esi
call fcn.0043ba00
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x1e
call fcn.00406ed0
push 0xa
push str.RUN_CINEMA
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x25
push eax
mov ecx, esi
call fcn.0043ba00
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x1f
call fcn.00406ed0
push 0xe
push str.DUNGEON_RESULT
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x26
push eax
mov ecx, esi
call fcn.0043ba00
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x20
call fcn.00406ed0
push 4
push str.ITEM
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x27
push eax
mov ecx, esi
call fcn.0043ba00
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x21
call fcn.00406ed0
push 3
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
push 0x622b68
lea ecx, [ebp - 0x28]
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x28
push eax
mov ecx, esi
call fcn.0043ba00
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x22
call fcn.00406ed0
push 8
push str.COLOR256
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x29
push eax
mov ecx, esi
call fcn.0043ba00
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x23
call fcn.00406ed0
push 0xb
push str.WINDOW_SIZE
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2a
push eax
mov ecx, esi
call fcn.0043ba00
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x24
call fcn.00406ed0
push 5
push str.INPUT
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2b
push eax
mov ecx, esi
call fcn.0043ba00
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x25
call fcn.00406ed0
push 0xc
push str.CONFIRM_WAIT
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2c
push eax
mov ecx, esi
call fcn.0043ba00
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x26
call fcn.00406ed0
mov dword [ebp - 0x18], 0
push 0x10
push str.END_CONFIRM_WAIT
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2d
push eax
mov ecx, esi
call fcn.0043ba00
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x27
call fcn.00406ed0
push 0xc
push str.INSERT_IMAGE
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2e
push eax
mov ecx, esi
call fcn.0043ba00
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
mov dword [eax], 0x28
call fcn.00406ed0
push 0xb
push str.SELECT_ITEM
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00406cf0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2f
push eax
mov ecx, esi
call fcn.0043ba00
lea ecx, [ebp - 0x28]
mov dword [eax], 0x29
call fcn.00406ed0
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00552bec
mov esp, ebp
pop ebp
ret
call fcn.005983fa
call fcn.005983fa
call fcn.005983fa
call fcn.005983fa
call fcn.005983fa
call fcn.005983fa
call fcn.005983fa
call fcn.005983fa
call fcn.005983fa
call fcn.005983fa
call fcn.005983fa
call fcn.005983fa
call fcn.005983fa
call fcn.005983fa
call fcn.005983fa
call fcn.005983fa
call fcn.005983fa
call fcn.005983fa
call fcn.005983fa
call fcn.005983fa
int3