Function at 0x405de0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x6675ed
mov eax, dword fs:[0]
push eax
sub esp, 0xa50
push ebx
push esi
push edi
mov eax, dword [0x6d35d0]
xor eax, esp
push eax
lea eax, [esp + 0xa60]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
mov eax, dword [esi + 8]
mov ecx, dword [eax + 0x13958]
mov dword [esp + 0x40], ecx
fild dword [esp + 0x40]
mov ecx, dword [eax + 0xdf480]
mov edx, dword [eax + 0x1395c]
fdiv qword [0x6a1590]
xor ebx, ebx
mov dword [esp + 0x44], edx
fstp dword [esp + 0x38]
cmp ecx, ebx
je 0x405e4b
mov ecx, dword [ecx + 0xc]
jmp 0x405e4d
xor ecx, ecx
mov edx, dword [ecx + 0x2c0]
mov ecx, dword [ecx + 0x2c4]
mov byte [eax + 0xdf488], bl
mov dword [esp + 0x40], edx
mov dword [esp + 0x44], ecx
mov dword [esi + 0x30c4], ebx
mov dword [esi + 0x30c8], ebx
cmp byte [0xf6273c], bl
je 0x405e87
push 0x350
call fcn.0062d956
jmp 0x405eab
cmp dword [0xf62698], ebx
jne 0x405ea1
mov byte [0xf6273c], 1
call fcn.0046ef62
mov byte [0xf6273c], bl
push 0x350
call fcn.0046eda1
mov dword [esp + 0x18], eax
add esp, 4
mov dword [esp + 0xa68], ebx
cmp eax, ebx
je 0x405ec8
mov edi, dword [esi + 8]
push eax
call fcn.00445390
jmp 0x405eca
xor eax, eax
mov dword [esp + 0xa68], 0xffffffff
mov edx, dword [esi + 0x14]
mov dword [esi + 0x10], eax
mov eax, dword [esi + 8]
lea ecx, [esi + 0x14]
mov dword [esi + 0x1c], eax
mov eax, dword [edx]
call eax
mov eax, dword [esi + 0x10]
lea edi, [esi + 0x1218]
mov ebx, 2
mov dword [esi + 0x20], eax
call fcn.0041c2c0
mov ecx, dword [eax]
mov edx, dword [ecx]
mov eax, dword [edx + 0x74]
call eax
push 0xc
push str.se_se_78.ogg
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], 0
mov byte [esp + 0x28], 0
call fcn.00404c00
mov dword [esp + 0xa68], 1
mov edx, dword [esi + 0x30d0]
mov edx, dword [edx]
lea edi, [esi + 0x30d0]
lea eax, [esp + 0x1c]
push eax
mov ecx, edi
call edx
mov dword [esp + 0xa68], 0xffffffff
cmp dword [esp + 0x34], 0x10
jb 0x405f6d
mov eax, dword [esp + 0x20]
push eax
call fcn.0046efcb
add esp, 4
mov eax, dword [esi + 8]
mov ecx, dword [eax + 0x2070]
mov dword [esp + 0x14], ecx
fild dword [esp + 0x14]
fld qword [0x6a1600]
mov edx, dword [eax + 0x20ac]
mov ecx, dword [eax + 0x2068]
fdiv st(1), st(0)
mov dword [esp + 0x14], edx
mov edx, dword [eax + 0x2098]
mov ebx, dword [edi]
fxch st(1)
fstp dword [esp + 0x18]
fild dword [esp + 0x14]
mov dword [esp + 0x14], ecx
fstp dword [esp + 0x3c]
fidivr dword [esp + 0x14]
fmul dword [esp + 0x3c]
mov dword [esp + 0x3c], edx
fstp dword [esp + 0x14]
fild dword [esp + 0x3c]
fmul dword [esp + 0x14]
fstp dword [esp + 0x14]
fld dword [esp + 0x14]
fmul dword [esp + 0x18]
fstp dword [esp + 0x18]
fld dword [esp + 0x18]
fmul qword [0x6a24c8]
call fcn.00631650
push eax
mov eax, dword [ebx + 0x68]
mov ecx, edi
call eax
push 0x10
mov edi, 0xf
push str.obj_f000_000.bmp
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], edi
mov dword [esp + 0x38], 0
mov byte [esp + 0x28], 0
call fcn.00404c00
push 0
push 1
mov dword [esp + 0xa70], 2
mov edx, dword [esi + 0x155c]
mov edx, dword [edx + 0x140]
lea ecx, [esi + 0x155c]
push 0x15
lea eax, [esp + 0x28]
push eax
call edx
or ebx, 0xffffffff
mov dword [esp + 0xa68], ebx
cmp dword [esp + 0x34], 0x10
jb 0x40605d
mov eax, dword [esp + 0x20]
push eax
call fcn.0046efcb
add esp, 4
push 0x10
push str.obj_f001_000.bmp
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], edi
mov dword [esp + 0x38], 0
mov byte [esp + 0x28], 0
call fcn.00404c00
push 0
push 1
mov dword [esp + 0xa70], 3
mov edx, dword [esi + 0x15f0]
mov edx, dword [edx + 0x140]
lea ecx, [esi + 0x15f0]
push 0x15
lea eax, [esp + 0x28]
push eax
call edx
mov dword [esp + 0xa68], ebx
cmp dword [esp + 0x34], 0x10
jb 0x4060c3
mov eax, dword [esp + 0x20]
push eax
call fcn.0046efcb
add esp, 4
push 0x10
push str.obj_f000_001.bmp
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], edi
mov dword [esp + 0x38], 0
mov byte [esp + 0x28], 0
call fcn.00404c00
push 0
push 1
mov dword [esp + 0xa70], 4
mov edx, dword [esi + 0x1684]
mov edx, dword [edx + 0x140]
lea ecx, [esi + 0x1684]
push 0x15
lea eax, [esp + 0x28]
push eax
call edx
mov dword [esp + 0xa68], ebx
cmp dword [esp + 0x34], 0x10
jb 0x406129
mov eax, dword [esp + 0x20]
push eax
call fcn.0046efcb
add esp, 4
push 0x10
push str.obje000_001.bmp
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], edi
mov dword [esp + 0x38], 0
mov byte [esp + 0x28], 0
call fcn.00404c00
push 0
lea edi, [esi + 0x1718]
push 1
mov dword [esp + 0xa70], 5
mov edx, dword [edi]
mov edx, dword [edx + 0x140]
push 0x15
lea eax, [esp + 0x28]
push eax
mov ecx, edi
mov dword [esp + 0x58], edi
call edx
mov dword [esp + 0xa68], ebx
cmp dword [esp + 0x34], 0x10
jb 0x406191
mov eax, dword [esp + 0x20]
push eax
call fcn.0046efcb
add esp, 4
mov eax, 6
mov ecx, 1
mov dword [esi + 0x17b0], edi
mov dword [esi + 0x17b4], eax
mov dword [esi + 0x17b8], ecx
mov eax, dword [esi + 8]
cmp dword [eax + 0x20e8], ecx
jne 0x406222
push 0x10
push str.objm000_000.bmp
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], 0
mov byte [esp + 0x28], 0
call fcn.00404c00
push 0
push 1
mov dword [esp + 0xa70], 6
mov edx, dword [esi + 0x17bc]
mov edx, dword [edx + 0x140]
lea ecx, [esi + 0x17bc]
push 0x15
lea eax, [esp + 0x28]
push eax
call edx
mov dword [esp + 0xa68], ebx
cmp dword [esp + 0x34], 0x10
jb 0x406222
mov eax, dword [esp + 0x20]
push eax
call fcn.0046efcb
add esp, 4
push 0x10
push str.obj_f001_001.bmp
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], 0
mov byte [esp + 0x28], 0
call fcn.00404c00
push 0
push 1
mov edi, 7
mov dword [esp + 0xa70], edi
mov edx, dword [esi + 0x1850]
mov edx, dword [edx + 0x140]
lea ecx, [esi + 0x1850]
push 0x15
lea eax, [esp + 0x28]
push eax
call edx
mov dword [esp + 0xa68], ebx
cmp dword [esp + 0x34], 0x10
jb 0x40628d
mov eax, dword [esp + 0x20]
push eax
call fcn.0046efcb
add esp, 4
xor ebx, ebx
mov dword [esp + 0x4c], edi
mov eax, ebx
cmp ebx, 3
jne 0x4062d7
mov edi, dword [0x67736c]
mov dword [esp + 0x94], vtable.NekoGameSDK4th::Base::Math::CRandom.0
call edi
lea edx, [esp + 0x94]
call fcn.0049b56c
call edi
lea edx, [esp + 0x94]
call fcn.0049b56c
call fcn.0049b44d
xor edx, edx
mov ecx, ebx
div ecx
lea eax, [edx + 3]
jmp 0x4062df
cmp ebx, 4
jne 0x4062df
lea eax, [ebx + 2]
mov ecx, 4
push ecx
push eax
mov ecx, 3
push ecx
push eax
mov ecx, 2
push ecx
push eax
mov ecx, 1
push ecx
push eax
xor ecx, ecx
push ecx
push eax
mov edx, ebx
shl edx, 4
sub edx, ebx
mov eax, 5
push eax
mov eax, dword [esp + 0x78]
lea edi, [esi + edx*8 + 0x18e4]
mov edx, dword [edi]
mov edx, dword [edx + 0x84]
push eax
lea eax, [esi + 0x1850]
push eax
mov ecx, edi
call edx
mov eax, dword [edi]
mov edx, dword [eax + 0x18]
push 0
mov ecx, edi
call edx
mov eax, dword [edi]
mov edx, dword [eax + 8]
push 1
mov ecx, edi
call edx
mov eax, dword [edi]
mov edx, dword [eax + 0xc]
push 0
mov ecx, edi
call edx
mov eax, 0x55555556
imul ebx
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ebx, 2
jg 0x4063a1
mov dword [esp + 0x3c], eax
lea eax, [eax + eax*2]
mov ecx, ebx
sub ecx, eax
mov dword [esp + 0x18], ecx
fild dword [esp + 0x18]
fmul qword [0x6a24c0]
fadd qword [0x6a2160]
fld dword [esp + 0x38]
fld st(0)
fmulp st(2)
fxch st(1)
call fcn.00631650
fild dword [esp + 0x3c]
fmul qword [0x6a24b8]
fadd qword [0x6a24b0]
fmulp st(1)
jmp 0x4063d1
lea edx, [eax + eax*2]
mov eax, ebx
sub eax, edx
mov dword [esp + 0x18], eax
fild dword [esp + 0x18]
fmul qword [0x6a24c0]
fadd qword [0x6a2378]
fld dword [esp + 0x38]
fld st(0)
fmulp st(2)
fxch st(1)
call fcn.00631650
fmul qword [0x6a2490]
mov dword [esp + 0x14], eax
call fcn.00631650
mov edx, dword [edi]
mov edx, dword [edx + 0x2c]
push eax
mov eax, dword [esp + 0x18]
push eax
mov ecx, edi
call edx
mov eax, dword [edi]
mov edx, dword [eax + 0x30]
lea ecx, [esp + 0x64]
push ecx
mov ecx, edi
call edx
mov eax, dword [eax]
add eax, dword [esp + 0x40]
lea ecx, [esp + 0x74]
mov dword [esp + 0x54], eax
mov eax, dword [edi]
mov edx, dword [eax + 0x30]
push ecx
mov ecx, edi
call edx
mov eax, dword [eax + 4]
add eax, dword [esp + 0x44]
lea ecx, [esp + 0x84]
mov dword [esp + 0x58], eax
mov eax, dword [edi]
mov edx, dword [eax + 0x34]
push ecx
mov ecx, edi
call edx
fild dword [eax]
fmul dword [esp + 0x38]
call fcn.00631650
mov dword [esp + 0x18], eax
mov eax, dword [edi]
mov edx, dword [eax + 0x30]
lea ecx, [esp + 0x8c]
push ecx
mov ecx, edi
call edx
mov eax, dword [eax]
add eax, dword [esp + 0x18]
lea ecx, [esp + 0x7c]
add eax, dword [esp + 0x40]
push ecx
mov dword [esp + 0x60], eax
mov eax, dword [edi]
mov edx, dword [eax + 0x34]
mov ecx, edi
call edx
fild dword [eax + 4]
fmul dword [esp + 0x38]
call fcn.00631650
mov dword [esp + 0x18], eax
mov eax, dword [edi]
mov edx, dword [eax + 0x30]
lea ecx, [esp + 0x6c]
push ecx
mov ecx, edi
call edx
mov eax, dword [eax + 4]
add eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x54]
add eax, dword [esp + 0x44]
mov edx, dword [edi]
mov edx, dword [edx + 0x38]
mov dword [esp + 0x60], eax
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x68]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x6c]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x70]
mov dword [eax + 0xc], ecx
mov ecx, edi
call edx
push 0
push edi
lea eax, [esi + 0x1b3c]
push eax
call fcn.00442680
inc ebx
cmp ebx, 5
jb 0x406293
push 0x10
xor ebx, ebx
push str.obje002_000.bmp
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], ebx
mov byte [esp + 0x28], bl
call fcn.00404c00
push ebx
lea ecx, [esi + 0x1b74]
push 1
mov dword [esp + 0xa70], 8
mov eax, dword [ecx]
mov eax, dword [eax + 0x140]
push 0x15
lea edx, [esp + 0x28]
push edx
mov dword [esp + 0x28], ecx
call eax
mov dword [esp + 0xa68], 0xffffffff
cmp dword [esp + 0x34], 0x10
jb 0x40658b
cmp byte [0xf6273d], bl
je 0x40654a
mov ecx, dword [esp + 0x20]
push ecx
call fcn.0062da20
add esp, 4
jmp 0x40658b
mov edx, dword [esp + 0x20]
mov esi, dword [0xf62698]
push edx
call fcn.0046ee0e
cmp dword [0xf62670], ebx
jne 0x406588
mov ecx, dword [0xf62698]
mov byte [0xf6273d], 1
cmp ecx, ebx
je 0x40657b
mov eax, dword [ecx]
mov edx, dword [eax]
push 1
call edx
mov dword [0xf62698], ebx
mov byte [0xf6273d], 0
mov esi, dword [ebp + 8]
fld dword [esp + 0x38]
mov dword [esp + 0x14], ebx
fmul qword [0x6a1f48]
call fcn.00631650
mov dword [esp + 0x50], eax
lea edi, [esi + 0x1c08]
jmp 0x4065b0
mov edx, dword [edi]
mov edx, dword [edx + 0x84]
mov eax, 4
push eax
push ebx
mov eax, 3
push eax
push ebx
mov eax, 2
push eax
push ebx
mov eax, 1
push eax
push ebx
xor eax, eax
push eax
push ebx
mov eax, 5
push eax
mov eax, 0xa
push eax
mov eax, dword [esp + 0x48]
push eax
mov ecx, edi
call edx
mov eax, dword [edi]
mov edx, dword [eax + 0x18]
push 0
mov ecx, edi
call edx
mov eax, dword [edi]
mov edx, dword [eax + 8]
push 1
mov ecx, edi
call edx
mov eax, dword [edi]
mov edx, dword [eax + 0xc]
push 0
mov ecx, edi
call edx
fild dword [esp + 0x14]
fmul qword [0x6a18b0]
fadd qword [0x6a1f50]
fmul dword [esp + 0x38]
call fcn.00631650
mov ecx, dword [esp + 0x50]
mov edx, dword [edi]
mov edx, dword [edx + 0x2c]
push ecx
push eax
mov ecx, edi
call edx
mov eax, dword [edi]
mov edx, dword [eax + 0x30]
lea ecx, [esp + 0x6c]
push ecx
mov ecx, edi
call edx
mov eax, dword [eax]
add eax, dword [esp + 0x40]
lea ecx, [esp + 0x7c]
mov dword [esp + 0x54], eax
mov eax, dword [edi]
mov edx, dword [eax + 0x30]
push ecx
mov ecx, edi
call edx
mov eax, dword [eax + 4]
add eax, dword [esp + 0x44]
lea ecx, [esp + 0x8c]
mov dword [esp + 0x58], eax
mov eax, dword [edi]
mov edx, dword [eax + 0x34]
push ecx
mov ecx, edi
call edx
fild dword [eax]
fmul dword [esp + 0x38]
call fcn.00631650
mov dword [esp + 0x3c], eax
mov eax, dword [edi]
mov edx, dword [eax + 0x30]
lea ecx, [esp + 0x84]
push ecx
mov ecx, edi
call edx
mov eax, dword [eax]
add eax, dword [esp + 0x3c]
lea ecx, [esp + 0x74]
add eax, dword [esp + 0x40]
push ecx
mov dword [esp + 0x60], eax
mov eax, dword [edi]
mov edx, dword [eax + 0x34]
mov ecx, edi
call edx
fild dword [eax + 4]
fmul dword [esp + 0x38]
call fcn.00631650
mov dword [esp + 0x3c], eax
mov eax, dword [edi]
mov edx, dword [eax + 0x30]
lea ecx, [esp + 0x64]
push ecx
mov ecx, edi
call edx
mov eax, dword [eax + 4]
add eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x54]
add eax, dword [esp + 0x3c]
mov edx, dword [edi]
mov edx, dword [edx + 0x38]
mov dword [esp + 0x60], eax
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x68]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x6c]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x70]
mov dword [eax + 0xc], ecx
mov ecx, edi
call edx
push 0
push edi
lea eax, [esi + 0x20b8]
push eax
call fcn.00442680
inc ebx
add edi, 0x78
mov dword [esp + 0x14], ebx
cmp ebx, 0xa
jb 0x4065b0
push 0x10
xor ebx, ebx
push str.obj_f002_000.bmp
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], ebx
mov byte [esp + 0x28], bl
call fcn.00404c00
push ebx
lea ecx, [esi + 0x20f0]
push 1
mov dword [esp + 0xa70], 9
mov eax, dword [ecx]
mov eax, dword [eax + 0x140]
push 0x15
lea edx, [esp + 0x28]
push edx
mov dword [esp + 0x28], ecx
call eax
mov dword [esp + 0xa68], 0xffffffff
cmp dword [esp + 0x34], 0x10
jb 0x4067e9
cmp byte [0xf6273d], bl
je 0x4067a8
mov ecx, dword [esp + 0x20]
push ecx
call fcn.0062da20
add esp, 4
mov dword [esp + 0x14], ebx
lea edi, [esi + 0x2184]
jmp 0x4067f9
mov edx, dword [esp + 0x20]
mov esi, dword [0xf62698]
push edx
call fcn.0046ee0e
cmp dword [0xf62670], ebx
jne 0x4067e6
mov ecx, dword [0xf62698]
mov byte [0xf6273d], 1
cmp ecx, ebx
je 0x4067d9
mov eax, dword [ecx]
mov edx, dword [eax]
push 1
call edx
mov dword [0xf62698], ebx
mov byte [0xf6273d], 0
mov esi, dword [ebp + 8]
mov dword [esp + 0x14], ebx
lea edi, [esi + 0x2184]
jmp 0x4067f9
mov ebx, dword [esp + 0x14]
mov eax, 4
push eax
xor eax, eax
push eax
mov edx, dword [edi]
mov edx, dword [edx + 0x84]
mov eax, 3
push eax
xor eax, eax
push eax
mov eax, 2
push eax
xor eax, eax
push eax
mov eax, 1
push eax
xor eax, eax
push eax
push eax
push eax
mov eax, 5
push eax
mov eax, 1
push eax
mov eax, dword [esp + 0x48]
push eax
mov ecx, edi
call edx
mov eax, dword [edi]
mov edx, dword [eax + 0x18]
push 0
mov ecx, edi
call edx
mov eax, dword [edi]
mov edx, dword [eax + 8]
push 1
mov ecx, edi
call edx
mov eax, dword [edi]
mov edx, dword [eax + 0xc]
push 0
mov ecx, edi
call edx
mov eax, 0x55555556
imul ebx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x4c], eax
lea eax, [eax + eax*2]
sub ebx, eax
mov dword [esp + 0x3c], ebx
fild dword [esp + 0x3c]
fmul qword [0x6a1f18]
fadd qword [0x6a1f40]
fld dword [esp + 0x38]
fld st(0)
fmulp st(2)
fxch st(1)
call fcn.00631650
fild dword [esp + 0x4c]
mov ebx, eax
fmul qword [0x6a1ae8]
fadd qword [0x6a1f38]
fmulp st(1)
call fcn.00631650
mov edx, dword [edi]
push eax
mov eax, dword [edx + 0x2c]
push ebx
mov ecx, edi
call eax
mov edx, dword [edi]
mov edx, dword [edx + 0x30]
lea eax, [esp + 0x6c]
push eax
mov ecx, edi
call edx
mov eax, dword [eax]
add eax, dword [esp + 0x40]
mov dword [esp + 0x1c], eax
mov eax, dword [edi]
mov edx, dword [eax + 0x30]
lea ecx, [esp + 0x7c]
push ecx
mov ecx, edi
call edx
mov eax, dword [eax + 4]
add eax, dword [esp + 0x44]
lea ecx, [esp + 0x8c]
mov dword [esp + 0x20], eax
mov eax, dword [edi]
mov edx, dword [eax + 0x34]
push ecx
mov ecx, edi
call edx
fild dword [eax]
fmul dword [esp + 0x38]
call fcn.00631650
mov dword [esp + 0x4c], eax
mov eax, dword [edi]
mov edx, dword [eax + 0x30]
lea ecx, [esp + 0x84]
push ecx
mov ecx, edi
call edx
mov ebx, dword [eax]
mov eax, dword [edi]
add ebx, dword [esp + 0x4c]
mov edx, dword [eax + 0x34]
add ebx, dword [esp + 0x40]
lea ecx, [esp + 0x74]
push ecx
mov ecx, edi
call edx
fild dword [eax + 4]
fmul dword [esp + 0x38]
call fcn.00631650
mov dword [esp + 0x4c], eax
mov eax, dword [edi]
mov edx, dword [eax + 0x30]
lea ecx, [esp + 0x64]
push ecx
mov ecx, edi
call edx
mov eax, dword [eax + 4]
add eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x1c]
add eax, dword [esp + 0x44]
mov edx, dword [edi]
mov edx, dword [edx + 0x38]
mov dword [esp + 0x28], eax
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x30]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x38]
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ecx
mov ecx, edi
call edx
push 0
push edi
lea eax, [esi + 0x25bc]
push eax
call fcn.00442680
mov eax, dword [edi]
mov edx, dword [eax + 0x34]
lea ecx, [esp + 0x54]
push ecx
mov ecx, edi
call edx
mov ecx, dword [eax]
mov dword [esi + 0x2cd0], ecx
mov edx, dword [eax + 4]
mov eax, dword [esp + 0x14]
inc eax
add edi, 0x78
mov dword [esi + 0x2cd4], edx
mov dword [esp + 0x14], eax
cmp eax, 9
jb 0x4067f5
push 0x10
xor ebx, ebx
mov edi, 0xf
push str.obj_f002_001.bmp
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], edi
mov dword [esp + 0x38], ebx
mov byte [esp + 0x28], bl
call fcn.00404c00
push ebx
push 1
mov dword [esp + 0xa70], 0xa
mov eax, dword [esi + 0x2e00]
mov eax, dword [eax + 0x140]
lea ecx, [esi + 0x2e00]
push 0x15
lea edx, [esp + 0x28]
push edx
call eax
mov dword [esp + 0xa68], 0xffffffff
cmp dword [esp + 0x34], 0x10
jb 0x406a80
cmp byte [0xf6273d], bl
je 0x406a3f
mov ecx, dword [esp + 0x20]
push ecx
call fcn.0062da20
add esp, 4
jmp 0x406a80
mov edx, dword [esp + 0x20]
mov esi, dword [0xf62698]
push edx
call fcn.0046ee0e
cmp dword [0xf62670], ebx
jne 0x406a7d
mov ecx, dword [0xf62698]
mov byte [0xf6273d], 1
cmp ecx, ebx
je 0x406a70
mov eax, dword [ecx]
mov edx, dword [eax]
push 1
call edx
mov dword [0xf62698], ebx
mov byte [0xf6273d], 0
mov esi, dword [ebp + 8]
push 0x10
push str.obj_f003_000.bmp
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], edi
mov dword [esp + 0x38], ebx
mov byte [esp + 0x28], 0
call fcn.00404c00
push ebx
push 1
mov dword [esp + 0xa70], 0xb
mov eax, dword [esi + 0x2f38]
mov edx, dword [eax + 0x140]
lea edi, [esi + 0x2f38]
push 0x15
lea ecx, [esp + 0x28]
push ecx
mov ecx, edi
call edx
mov dword [esp + 0xa68], 0xffffffff
cmp dword [esp + 0x34], 0x10
jb 0x406b33
cmp byte [0xf6273d], 0
je 0x406af2
mov eax, dword [esp + 0x20]
push eax
call fcn.0062da20
add esp, 4
jmp 0x406b33
mov ecx, dword [esp + 0x20]
mov esi, dword [0xf62698]
push ecx
call fcn.0046ee0e
cmp dword [0xf62670], ebx
jne 0x406b30
mov ecx, dword [0xf62698]
mov byte [0xf6273d], 1
cmp ecx, ebx
je 0x406b23
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [0xf62698], ebx
mov byte [0xf6273d], 0
mov esi, dword [ebp + 8]
mov ecx, 1
mov dword [esi + 0x2fd0], edi
push 0x10
mov eax, 0xa
mov dword [esi + 0x2fd8], ecx
mov edi, 0xf
push str.obj_f003_001.bmp
lea ecx, [esp + 0x24]
mov dword [esi + 0x2fd4], eax
mov dword [esp + 0x3c], edi
mov dword [esp + 0x38], ebx
mov byte [esp + 0x28], 0
call fcn.00404c00
push ebx
push 1
mov dword [esp + 0xa70], 0xc
mov edx, dword [esi + 0x2fdc]
mov edx, dword [edx + 0x140]
lea ecx, [esi + 0x2fdc]
push 0x15
lea eax, [esp + 0x28]
push eax
call edx
mov dword [esp + 0xa68], 0xffffffff
cmp dword [esp + 0x34], 0x10
jb 0x406c05
cmp byte [0xf6273d], 0
je 0x406bc4
mov eax, dword [esp + 0x20]
push eax
call fcn.0062da20
add esp, 4
jmp 0x406c05
mov ecx, dword [esp + 0x20]
mov esi, dword [0xf62698]
push ecx
call fcn.0046ee0e
cmp dword [0xf62670], ebx
jne 0x406c02
mov ecx, dword [0xf62698]
mov byte [0xf6273d], 1
cmp ecx, ebx
je 0x406bf5
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [0xf62698], ebx
mov byte [0xf6273d], 0
mov esi, dword [ebp + 8]
push 0x10
push str.obj_f003_002.bmp
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], edi
mov dword [esp + 0x38], ebx
mov byte [esp + 0x28], 0
call fcn.00404c00
push ebx
push 1
mov dword [esp + 0xa70], 0xd
mov edx, dword [esi + 0x2e94]
mov edx, dword [edx + 0x140]
lea edi, [esi + 0x2e94]
push 0x15
lea eax, [esp + 0x28]
push eax
mov ecx, edi
call edx
mov dword [esp + 0xa68], 0xffffffff
cmp dword [esp + 0x34], 0x10
jb 0x406cb8
cmp byte [0xf6273d], 0
je 0x406c77
mov eax, dword [esp + 0x20]
push eax
call fcn.0062da20
add esp, 4
jmp 0x406cb8
mov ecx, dword [esp + 0x20]
mov esi, dword [0xf62698]
push ecx
call fcn.0046ee0e
cmp dword [0xf62670], ebx
jne 0x406cb5
mov ecx, dword [0xf62698]
mov byte [0xf6273d], 1
cmp ecx, ebx
je 0x406ca8
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [0xf62698], ebx
mov byte [0xf6273d], 0
mov esi, dword [ebp + 8]
mov dword [esi + 0x2f2c], edi
mov ecx, 1
mov dword [esi + 0x2f34], ecx
mov ecx, 2
mov eax, 0xa
mov dword [esi + 0x2f30], eax
mov eax, dword [esi + 8]
mov dword [esi + 0x1b68], ecx
mov dword [esi + 0x20e4], ecx
mov dword [esi + 0x25e8], ecx
or ecx, 0xffffffff
mov dword [esi + 0x3174], ecx
mov dword [esi + 0x3178], ecx
mov dword [esi + 0x3180], ecx
push ebx
mov ecx, esi
mov dword [esi + 0x1b44], eax
mov dword [esi + 0x20c0], eax
mov dword [esi + 0x25c4], eax
mov byte [esi + 0x3170], 0
mov byte [esi + 0x3184], 0
mov dword [esi + 0x33ac], eax
call fcn.00409a50
add esi, 0x33e0
call fcn.00450160
fldz
mov edi, dword [ebp + 8]
mov eax, 1
mov dword [edi + 0x33e8], eax
mov dword [edi + 0x33f0], eax
fst dword [edi + 0x3540]
fst dword [edi + 0x3544]
push 5
fst dword [edi + 0x3548]
lea ecx, [esi + 0x108]
fld dword [0x6a1a28]
push 0x64
fstp dword [edi + 0x354c]
push ebx
fst dword [edi + 0x3550]
fst dword [edi + 0x3554]
fld dword [0x6a1cc0]
fstp dword [edi + 0x3558]
fst dword [edi + 0x355c]
fstp dword [edi + 0x3560]
mov edx, dword [ecx]
mov eax, dword [edx]
call eax
push 0x1e
lea ecx, [esi + 0x2c]
mov dword [esi + 0x24], 5
mov edx, dword [ecx]
mov eax, dword [edx]
push 0xff
push ebx
call eax
mov edx, dword [esp + 0x48]
mov dword [esi + 0xc], ebx
mov dword [esi + 0x28], 0x1e
mov eax, 6
mov ecx, 1
mov dword [edi + 0x3574], edx
mov dword [edi + 0x3578], eax
mov dword [edi + 0x357c], ecx
cmp edx, ebx
jne 0x406df1
xor edx, edx
xor ecx, ecx
jmp 0x406e1b
mov ecx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c]
lea edx, [esp + 0x40]
push edx
call eax
mov eax, dword [esp + 0x40]
cdq
idiv dword [edi + 0x3578]
mov ecx, eax
mov eax, dword [esp + 0x44]
cdq
idiv dword [edi + 0x357c]
mov edx, ecx
mov ecx, eax
mov eax, edx
cdq
sub eax, edx
sar eax, 1
mov dword [esp + 0x48], eax
mov eax, ecx
fild dword [esp + 0x48]
cdq
sub eax, edx
sar eax, 1
fstp dword [esi + 0x18]
mov dword [esp + 0x48], eax
fild dword [esp + 0x48]
fstp dword [esi + 0x1c]
mov ecx, dword [edi + 8]
fld dword [esp + 0x38]
fstp dword [edi + 0x3568]
mov dword [ecx + 0x20bc], 0xffffffff
mov byte [esi + 0x184], 1
mov byte [esi + 0x185], 0
mov dword [esi + 0x20], ebx
mov dword [esi + 0x14], ebx
mov ecx, dword [esp + 0xa60]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4