Function at 0x4235e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x5acd98
mov eax, dword fs:[0]
push eax
sub esp, 0x2a8
mov eax, dword [0x69e298]
xor eax, esp
mov dword [esp + 0x2a4], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x69e298]
xor eax, esp
push eax
lea eax, [esp + 0x2bc]
mov dword fs:[0], eax
mov eax, dword [esp + 0x2cc]
mov esi, ecx
lea ecx, [esp + 0x2d0]
push ecx
mov dword [esp + 0xe0], esi
lea edx, [esp + 0xec]
add esi, 0xf0
xor ebx, ebx
push edx
mov ecx, esi
mov dword [esp + 0xec], eax
mov dword [esp + 0xf0], ebx
call fcn.00422180
mov edi, dword [esp + 0xe8]
mov ebp, dword [esi + 0x18]
mov esi, dword [esi]
cmp edi, ebx
je 0x42366c
cmp edi, esi
je 0x423671
call fcn.00589a8c
mov esi, dword [esp + 0xec]
cmp esi, ebp
je 0x4236d6
cmp edi, ebx
jne 0x4236d2
call fcn.00589a8c
xor edi, edi
cmp esi, dword [edi + 0x18]
jne 0x423691
call fcn.00589a8c
mov edi, dword [esp + 0xe4]
push 0xffffffffffffffff
add esi, 0x10
push ebx
mov dword [edi + 0x18], 3
mov dword [edi + 0x14], ebx
push esi
mov ecx, edi
mov dword [edi + 4], ebx
call fcn.00406e60
mov eax, dword [esi + 0x1c]
mov dword [edi + 0x1c], eax
mov ecx, dword [esi + 0x20]
mov dword [edi + 0x20], ecx
mov dl, byte [esi + 0x24]
mov byte [edi + 0x24], dl
mov al, byte [esi + 0x25]
mov byte [edi + 0x25], al
mov eax, edi
jmp 0x4246f9
mov edi, dword [edi]
jmp 0x423687
mov edi, 3
mov dword [esp + 0x188], edi
mov dword [esp + 0x184], ebx
mov dword [esp + 0x174], ebx
mov dword [esp + 0x18c], ebx
mov dword [esp + 0x190], ebx
mov byte [esp + 0x194], 1
mov byte [esp + 0x195], 1
mov dword [esp + 0x2c4], ebx
mov dword [esp + 0x108], edi
mov dword [esp + 0x104], ebx
mov dword [esp + 0xf4], ebx
mov esi, dword [esp + 0x2d0]
cmp esi, 0x1869f
mov byte [esp + 0x2c4], 1
jg 0x4237ae
mov eax, 0x51eb851f
imul esi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
imul ecx, ecx, 0x64
sub esi, ecx
push esi
push eax
lea edx, [esp + 0x3c]
push str.adv_bg_bg_03d__02d
push edx
call fcn.004961e0
add esp, 0x10
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0xfc]
mov byte [esp + 0x2d0], 2
call fcn.00406e60
mov ebp, 4
mov byte [esp + 0x2c4], 1
cmp dword [esp + 0x4c], ebp
jb 0x423d84
mov eax, dword [esp + 0x38]
push eax
call fcn.0058984a
add esp, 4
jmp 0x423d84
cmp esi, 0x98967f
jg 0x42382b
mov eax, 0x51eb851f
imul esi
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, ecx
imul ecx, ecx, 0x64
cdq
mov edi, 0x3e8
idiv edi
mov ebp, 0x64
sub esi, ecx
push esi
lea ecx, [esp + 0x38]
mov edi, edx
cdq
idiv ebp
push edi
push edx
push edx
push str.advevent_02de_02d__03d__02d
push ecx
call fcn.004961e0
add esp, 0x18
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0xfc]
mov byte [esp + 0x2d0], 3
call fcn.00406e60
cmp dword [esp + 0x4c], 4
mov byte [esp + 0x2c4], 1
jb 0x423d7c
mov edx, dword [esp + 0x38]
push edx
jmp 0x423d74
mov eax, 0x66666667
imul esi
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x66666667
imul ecx
sar edx, 2
mov edi, edx
shr edi, 0x1f
add edi, edx
mov eax, 0x66666667
imul edi
sar edx, 2
mov edi, edx
shr edi, 0x1f
add edi, edx
mov eax, 0x51eb851f
imul edi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
cdq
mov edi, 0x64
idiv edi
mov ebp, esi
mov dword [esp + 0x10c], 0x5d1c39
mov dword [esp + 0x110], 0x5d2d64
mov dword [esp + 0x114], 0x5d2d5c
mov dword [esp + 0x118], 0x5d2d58
mov dword [esp + 0x11c], 0x5d2d54
mov dword [esp + 0x120], 0x5d2d50
mov dword [esp + 0x124], 0x5d2d4c
mov dword [esp + 0x128], 0x5d2d48
mov dword [esp + 0x12c], 0x5d2d44
mov dword [esp + 0x130], 0x5d2d40
mov dword [esp + 0xe8], edx
cdq
idiv edi
lea eax, [ecx + ecx*4]
add eax, eax
sub ebp, eax
mov edi, edx
cmp edi, 0xa
jae 0x423a5b
mov ecx, dword [esp + edi*4 + 0x10c]
push ecx
lea ecx, [esp + 0x19c]
call fcn.00402290
push str.std_
lea ecx, [esp + 0x138]
mov byte [esp + 0x2c8], 4
call fcn.00402290
push esi
lea edx, [esp + 0x8c]
push str._s_09d
push edx
mov byte [esp + 0x2d0], 5
call fcn.004961e0
mov esi, eax
lea eax, [esp + 0x1a4]
push eax
lea ecx, [esp + 0x1e0]
push ecx
mov byte [esp + 0x2d8], 6
call fcn.00495c50
mov dword [esp + 0x180], eax
lea edx, [esp + 0x148]
push edx
lea eax, [esp + 0x1cc]
push eax
mov byte [esp + 0x2e0], 7
call fcn.00495c50
mov ecx, dword [esp + 0x188]
push ecx
push eax
lea edx, [esp + 0xe4]
push edx
mov byte [esp + 0x2ec], 8
call fcn.00422ab0
push esi
push eax
lea eax, [esp + 0x9c]
push eax
mov byte [esp + 0x2f8], 9
call fcn.00422ab0
add esp, 0x34
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x2c8], 0xa
call fcn.0040eab0
push 0xffffffffffffffff
push ebx
lea ecx, [esp + 0x3c]
push ecx
lea ecx, [esp + 0xfc]
mov byte [esp + 0x2d0], 0xb
call fcn.00406e60
lea ecx, [esp + 0x34]
call fcn.004176e0
lea ecx, [esp + 0x6c]
call fcn.004176e0
lea ecx, [esp + 0xc0]
call fcn.004176e0
lea ecx, [esp + 0x1b4]
call fcn.004176e0
lea ecx, [esp + 0x1d0]
call fcn.004176e0
lea ecx, [esp + 0x88]
call fcn.004176e0
lea ecx, [esp + 0x134]
call fcn.00401a50
lea ecx, [esp + 0x198]
mov byte [esp + 0x2c4], 1
call fcn.00401a50
jmp 0x423cd2
mov dword [esp + 0x30], 3
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x1c], ebx
mov byte [esp + 0x2c4], 0xc
cmp edi, 0x63
je 0x423b6e
push edi
lea edx, [esp + 0x8c]
push str.s_02d
push edx
call fcn.004961e0
add esp, 0xc
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2c8], 0xf
call fcn.0040cf40
lea ecx, [esp + 0x88]
mov byte [esp + 0x2c4], 0xc
call fcn.004176e0
push 1
push 0x5a0
push str.._scene_adv_sceneadv3.cpp
lea ecx, [esp + 0x214]
call fcn.00496f50
push 0x5d2ce4
lea ecx, [esp + 0x38]
mov byte [esp + 0x2c8], 0x10
call fcn.00402290
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x19c]
push ecx
mov byte [esp + 0x2cc], 0x11
call fcn.00495c50
add esp, 8
push eax
lea edx, [esp + 0x1c]
push edx
lea eax, [esp + 0x210]
push eax
mov byte [esp + 0x2d0], 0x12
call fcn.00496550
add esp, 8
push eax
call fcn.00496550
add esp, 8
lea ecx, [esp + 0x198]
call fcn.004176e0
lea ecx, [esp + 0x34]
mov byte [esp + 0x2c4], 0x10
call fcn.00401a50
lea ecx, [esp + 0x208]
call fcn.00496c20
test al, al
je 0x423b58
int3
lea ecx, [esp + 0x208]
mov byte [esp + 0x2c4], 0xc
call fcn.00402270
jmp 0x423bd1
push 0x5d2cd8
lea ecx, [esp + 0x138]
call fcn.00402290
lea ecx, [esp + 0x134]
push ecx
lea edx, [esp + 0xa8]
push edx
mov byte [esp + 0x2cc], 0xd
call fcn.00495c50
add esp, 8
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2c8], 0xe
call fcn.0040cf40
lea ecx, [esp + 0xa4]
call fcn.004176e0
lea ecx, [esp + 0x134]
mov byte [esp + 0x2c4], 0xc
call fcn.00401a50
push str.std_
lea ecx, [esp + 0x138]
call fcn.00402290
push esi
lea eax, [esp + 0x1d4]
push str._s_09d
push eax
mov byte [esp + 0x2d0], 0x13
call fcn.004961e0
mov esi, eax
lea ecx, [esp + 0x140]
push ecx
lea edx, [esp + 0x1c4]
push edx
mov byte [esp + 0x2d8], 0x14
call fcn.00495c50
lea ecx, [esp + 0x2c]
push ecx
push eax
lea edx, [esp + 0xdc]
push edx
mov byte [esp + 0x2e4], 0x15
call fcn.00422ab0
push esi
push eax
lea eax, [esp + 0x94]
push eax
mov byte [esp + 0x2f0], 0x16
call fcn.00422ab0
add esp, 0x2c
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x2c8], 0x17
call fcn.0040eab0
push 0xffffffffffffffff
push ebx
lea ecx, [esp + 0x3c]
push ecx
lea ecx, [esp + 0xfc]
mov byte [esp + 0x2d0], 0x18
call fcn.00406e60
lea ecx, [esp + 0x34]
call fcn.004176e0
lea ecx, [esp + 0x6c]
call fcn.004176e0
lea ecx, [esp + 0xc0]
call fcn.004176e0
lea ecx, [esp + 0x1b4]
call fcn.004176e0
lea ecx, [esp + 0x1d0]
call fcn.004176e0
lea ecx, [esp + 0x134]
call fcn.00401a50
lea ecx, [esp + 0x18]
mov byte [esp + 0x2c4], 1
call fcn.004176e0
mov edx, dword [esp + 0xe8]
push ebp
push edx
push edi
lea eax, [esp + 0x5c]
push str._02d_02dXXXX_01d
push eax
call fcn.004961e0
add esp, 0x14
mov esi, dword [esp + 0xdc]
lea ecx, [esp + 0x50]
push ecx
lea edx, [esp + 0xe0]
add esi, 0x130
push edx
mov ecx, esi
mov byte [esp + 0x2cc], 0x19
call fcn.00422790
mov eax, dword [esp + 0xdc]
mov edi, dword [esi + 0x18]
mov esi, dword [esi]
cmp eax, ebx
je 0x423d2b
cmp eax, esi
je 0x423d30
call fcn.00589a8c
cmp dword [esp + 0xe0], edi
je 0x423d60
lea ecx, [esp + 0xdc]
call fcn.004220d0
mov ecx, dword [eax + 0x1c]
mov edx, dword [eax + 0x20]
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x190], edx
mov byte [esp + 0x194], bl
cmp dword [esp + 0x68], 4
mov byte [esp + 0x2c4], 1
jb 0x423d7c
mov eax, dword [esp + 0x54]
push eax
call fcn.0058984a
add esp, 4
mov edi, 3
lea ebp, [edi + 1]
push ebp
mov esi, 0xf
push str..jpg
lea ecx, [esp + 0x58]
mov dword [esp + 0x70], esi
mov dword [esp + 0x6c], ebx
mov byte [esp + 0x5c], bl
call fcn.00401db0
lea ecx, [esp + 0x50]
push ecx
lea edx, [esp + 0x8c]
push edx
mov byte [esp + 0x2cc], 0x1a
call fcn.00495c50
push eax
lea eax, [esp + 0xfc]
push eax
lea ecx, [esp + 0xb4]
push ecx
mov byte [esp + 0x2d8], 0x1b
call fcn.00422ab0
add esp, 0x14
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x2d0], 0x1c
mov dword [esp + 0x3c], edi
mov dword [esp + 0x38], ebx
mov dword [esp + 0x28], ebx
call fcn.00406e60
lea edx, [esp + 0x18]
push edx
mov byte [esp + 0x2c8], 0x1d
call fcn.004c9b30
add esp, 4
mov byte [esp + 0x17], al
cmp dword [esp + 0x30], ebp
jb 0x423e2c
mov eax, dword [esp + 0x1c]
push eax
call fcn.0058984a
add esp, 4
mov dword [esp + 0x30], edi
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x1c], ebx
cmp dword [esp + 0xbc], ebp
jb 0x423e51
mov ecx, dword [esp + 0xa8]
push ecx
call fcn.0058984a
add esp, 4
mov dword [esp + 0xbc], edi
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xa8], ebx
cmp dword [esp + 0xa0], ebp
jb 0x423e7f
mov edx, dword [esp + 0x8c]
push edx
call fcn.0058984a
add esp, 4
cmp dword [esp + 0x68], 0x10
mov dword [esp + 0xa0], edi
mov dword [esp + 0x9c], ebx
mov dword [esp + 0x8c], ebx
mov byte [esp + 0x2c4], 1
jb 0x423eb0
mov eax, dword [esp + 0x54]
push eax
call fcn.0058984a
add esp, 4
cmp byte [esp + 0x17], bl
je 0x424363
push 0xa
push str._alpha.bmp
lea ecx, [esp + 0x58]
mov dword [esp + 0x70], esi
mov dword [esp + 0x6c], ebx
mov byte [esp + 0x5c], bl
call fcn.00401db0
lea ecx, [esp + 0x50]
push ecx
lea edx, [esp + 0xa8]
push edx
mov byte [esp + 0x2cc], 0x1e
call fcn.00495c50
push eax
lea eax, [esp + 0xfc]
push eax
lea ecx, [esp + 0x98]
push ecx
mov byte [esp + 0x2d8], 0x1f
call fcn.00422ab0
add esp, 0x14
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x2d0], 0x20
mov dword [esp + 0x3c], edi
mov dword [esp + 0x38], ebx
mov dword [esp + 0x28], ebx
call fcn.00406e60
lea edx, [esp + 0x18]
push edx
mov byte [esp + 0x2c8], 0x21
call fcn.004c9b30
add esp, 4
mov byte [esp + 0x17], al
cmp dword [esp + 0x30], ebp
jb 0x423f5e
mov eax, dword [esp + 0x1c]
push eax
call fcn.0058984a
add esp, 4
mov dword [esp + 0x30], edi
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x1c], ebx
cmp dword [esp + 0xa0], ebp
jb 0x423f83
mov ecx, dword [esp + 0x8c]
push ecx
call fcn.0058984a
add esp, 4
mov dword [esp + 0xa0], edi
mov dword [esp + 0x9c], ebx
mov dword [esp + 0x8c], ebx
cmp dword [esp + 0xbc], ebp
jb 0x423fb1
mov edx, dword [esp + 0xa8]
push edx
call fcn.0058984a
add esp, 4
cmp dword [esp + 0x68], 0x10
mov dword [esp + 0xbc], edi
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xa8], ebx
mov byte [esp + 0x2c4], 1
jb 0x423fe2
mov eax, dword [esp + 0x54]
push eax
call fcn.0058984a
add esp, 4
cmp byte [esp + 0x17], bl
je 0x4242ed
push str._alpha.bmp_
lea ecx, [esp + 0x70]
call fcn.00402290
push str._ALPHA:
lea ecx, [esp + 0xc4]
mov byte [esp + 0x2c8], 0x22
call fcn.00402290
push str..jpg_
lea ecx, [esp + 0x1b8]
mov byte [esp + 0x2c8], 0x23
call fcn.00402290
push str._COLOR:
lea ecx, [esp + 0x1d4]
mov byte [esp + 0x2c8], 0x24
call fcn.00402290
lea ecx, [esp + 0x6c]
push ecx
lea edx, [esp + 0x110]
push edx
mov byte [esp + 0x2cc], 0x25
call fcn.00495c50
mov esi, eax
lea eax, [esp + 0xc8]
push eax
lea ecx, [esp + 0x15c]
push ecx
mov byte [esp + 0x2d4], 0x26
call fcn.00495c50
mov edi, eax
lea edx, [esp + 0x1c4]
push edx
lea eax, [esp + 0x200]
push eax
mov byte [esp + 0x2dc], 0x27
call fcn.00495c50
mov ebp, eax
lea ecx, [esp + 0x1e8]
push ecx
lea edx, [esp + 0x50]
push edx
mov byte [esp + 0x2e4], 0x28
call fcn.00495c50
lea ecx, [esp + 0x110]
push ecx
push eax
lea edx, [esp + 0x15c]
push edx
mov byte [esp + 0x2f0], 0x29
call fcn.00422ab0
push ebp
push eax
lea eax, [esp + 0x1cc]
push eax
mov byte [esp + 0x2fc], 0x2a
call fcn.00422ab0
push edi
push eax
lea ecx, [esp + 0x58]
push ecx
mov byte [esp + 0x308], 0x2b
call fcn.00422ab0
add esp, 0x44
lea edx, [esp + 0xf0]
push edx
push eax
lea eax, [esp + 0xac]
push eax
mov byte [esp + 0x2d0], 0x2c
call fcn.00422ab0
push esi
push eax
lea ecx, [esp + 0x9c]
push ecx
mov byte [esp + 0x2dc], 0x2d
call fcn.00422ab0
add esp, 0x18
push 0xffffffffffffffff
push ebx
mov esi, 3
push eax
lea ecx, [esp + 0x5c]
mov byte [esp + 0x2d0], 0x2e
mov dword [esp + 0x74], esi
mov dword [esp + 0x70], ebx
mov dword [esp + 0x60], ebx
call fcn.00406e60
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x58]
push edx
lea ecx, [esp + 0x17c]
mov byte [esp + 0x2d0], 0x2f
call fcn.00406e60
mov edi, 4
cmp dword [esp + 0x68], edi
jb 0x424197
mov eax, dword [esp + 0x54]
push eax
call fcn.0058984a
add esp, 4
cmp dword [esp + 0xa0], edi
jb 0x4241b0
mov ecx, dword [esp + 0x8c]
push ecx
call fcn.0058984a
add esp, 4
mov dword [esp + 0xa0], esi
mov dword [esp + 0x9c], ebx
mov dword [esp + 0x8c], ebx
cmp dword [esp + 0xbc], edi
jb 0x4241de
mov edx, dword [esp + 0xa8]
push edx
call fcn.0058984a
add esp, 4
mov dword [esp + 0xbc], esi
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xa8], ebx
cmp dword [esp + 0x30], edi
jb 0x424206
mov eax, dword [esp + 0x1c]
push eax
call fcn.0058984a
add esp, 4
mov dword [esp + 0x30], esi
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x1c], ebx
cmp dword [esp + 0x1b0], edi
jb 0x42422b
mov ecx, dword [esp + 0x19c]
push ecx
call fcn.0058984a
add esp, 4
mov dword [esp + 0x1b0], esi
mov dword [esp + 0x1ac], ebx
mov dword [esp + 0x19c], ebx
cmp dword [esp + 0x14c], edi
jb 0x424259
mov edx, dword [esp + 0x138]
push edx
call fcn.0058984a
add esp, 4
mov dword [esp + 0x14c], esi
mov dword [esp + 0x148], ebx
mov dword [esp + 0x138], ebx
cmp dword [esp + 0x4c], edi
jb 0x424281
mov eax, dword [esp + 0x38]
push eax
call fcn.0058984a
add esp, 4
lea ecx, [esp + 0x1ec]
mov dword [esp + 0x4c], esi
mov dword [esp + 0x48], ebx
mov dword [esp + 0x38], ebx
call fcn.004176e0
lea ecx, [esp + 0x150]
call fcn.004176e0
lea ecx, [esp + 0x10c]
call fcn.004176e0
lea ecx, [esp + 0x1d0]
call fcn.00401a50
lea ecx, [esp + 0x1b4]
call fcn.00401a50
lea ecx, [esp + 0xc0]
call fcn.00401a50
lea ecx, [esp + 0x6c]
mov byte [esp + 0x2c4], 1
call fcn.00401a50
mov ebp, edi
jmp 0x4246af
push str..jpg
lea ecx, [esp + 0xc4]
call fcn.00402290
lea ecx, [esp + 0xc0]
push ecx
lea edx, [esp + 0x154]
push edx
mov byte [esp + 0x2cc], 0x30
call fcn.00495c50
push eax
lea eax, [esp + 0xfc]
push eax
lea ecx, [esp + 0x11c]
push ecx
mov byte [esp + 0x2d8], 0x31
call fcn.00422ab0
add esp, 0x14
push eax
lea ecx, [esp + 0x70]
mov byte [esp + 0x2c8], 0x32
call fcn.0040eab0
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x74]
mov byte [esp + 0x2cc], 0x33
push edx
jmp 0x4245b7
push str..png
lea ecx, [esp + 0x70]
call fcn.00402290
lea eax, [esp + 0x6c]
push eax
lea ecx, [esp + 0x154]
push ecx
mov byte [esp + 0x2cc], 0x34
call fcn.00495c50
push eax
lea edx, [esp + 0xfc]
push edx
lea eax, [esp + 0x11c]
push eax
mov byte [esp + 0x2d8], 0x35
call fcn.00422ab0
add esp, 0x14
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x2d0], 0x36
mov dword [esp + 0x58], edi
mov dword [esp + 0x54], ebx
mov dword [esp + 0x44], ebx
call fcn.00406e60
lea ecx, [esp + 0x34]
push ecx
mov byte [esp + 0x2c8], 0x37
call fcn.004c9b30
add esp, 4
lea ecx, [esp + 0x34]
mov byte [esp + 0x17], al
call fcn.004176e0
lea ecx, [esp + 0x10c]
call fcn.004176e0
lea ecx, [esp + 0x150]
call fcn.004176e0
lea ecx, [esp + 0x6c]
mov byte [esp + 0x2c4], 1
call fcn.00401a50
lea ecx, [esp + 0xc0]
cmp byte [esp + 0x17], bl
je 0x424494
push str..png
call fcn.00402290
lea edx, [esp + 0xc0]
push edx
lea eax, [esp + 0x154]
push eax
mov byte [esp + 0x2cc], 0x38
call fcn.00495c50
push eax
lea ecx, [esp + 0xfc]
push ecx
lea edx, [esp + 0x11c]
push edx
mov byte [esp + 0x2d8], 0x39
call fcn.00422ab0
add esp, 0x14
push eax
lea ecx, [esp + 0x70]
mov byte [esp + 0x2c8], 0x3a
call fcn.0040eab0
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x74]
mov byte [esp + 0x2cc], 0x3b
push eax
jmp 0x4245b7
push str..bmp
call fcn.00402290
lea ecx, [esp + 0xc0]
push ecx
lea edx, [esp + 0x154]
push edx
mov byte [esp + 0x2cc], 0x3c
call fcn.00495c50
push eax
lea eax, [esp + 0xfc]
push eax
lea ecx, [esp + 0x11c]
push ecx
mov byte [esp + 0x2d8], 0x3d
call fcn.00422ab0
add esp, 0x14
push eax
lea ecx, [esp + 0x70]
mov byte [esp + 0x2c8], 0x3e
call fcn.0040eab0
lea edx, [esp + 0x6c]
push edx
mov byte [esp + 0x2c8], 0x3f
call fcn.004c9b30
add esp, 4
lea ecx, [esp + 0x6c]
mov byte [esp + 0x17], al
call fcn.004176e0
lea ecx, [esp + 0x10c]
call fcn.004176e0
lea ecx, [esp + 0x150]
call fcn.004176e0
lea ecx, [esp + 0xc0]
mov byte [esp + 0x2c4], 1
call fcn.00401a50
lea ecx, [esp + 0xc0]
cmp byte [esp + 0x17], bl
je 0x4245fd
push str..bmp
call fcn.00402290
lea eax, [esp + 0xc0]
push eax
lea ecx, [esp + 0x154]
push ecx
mov byte [esp + 0x2cc], 0x40
call fcn.00495c50
push eax
lea edx, [esp + 0xfc]
push edx
lea eax, [esp + 0x11c]
push eax
mov byte [esp + 0x2d8], 0x41
call fcn.00422ab0
add esp, 0x14
push eax
lea ecx, [esp + 0x70]
mov byte [esp + 0x2c8], 0x42
call fcn.0040eab0
push 0xffffffffffffffff
push ebx
lea ecx, [esp + 0x74]
mov byte [esp + 0x2cc], 0x43
push ecx
lea ecx, [esp + 0x17c]
call fcn.00406e60
lea ecx, [esp + 0x6c]
call fcn.004176e0
lea ecx, [esp + 0x10c]
call fcn.004176e0
lea ecx, [esp + 0x150]
call fcn.004176e0
lea ecx, [esp + 0xc0]
mov byte [esp + 0x2c4], 1
call fcn.00401a50
jmp 0x4246af
push str..xxx
call fcn.00402290
lea edx, [esp + 0xc0]
push edx
lea eax, [esp + 0x154]
push eax
mov byte [esp + 0x2cc], 0x44
call fcn.00495c50
push eax
lea ecx, [esp + 0xfc]
push ecx
lea edx, [esp + 0x11c]
push edx
mov byte [esp + 0x2d8], 0x45
call fcn.00422ab0
add esp, 0x14
push eax
lea ecx, [esp + 0x70]
mov byte [esp + 0x2c8], 0x46
call fcn.0040eab0
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x74]
push eax
lea ecx, [esp + 0x17c]
mov byte [esp + 0x2d0], 0x47
call fcn.00406e60
lea ecx, [esp + 0x6c]
call fcn.004176e0
lea ecx, [esp + 0x10c]
call fcn.004176e0
lea ecx, [esp + 0x150]
call fcn.004176e0
lea ecx, [esp + 0xc0]
mov byte [esp + 0x2c4], 1
call fcn.00401a50
mov byte [esp + 0x195], bl
mov esi, dword [esp + 0xe4]
lea ecx, [esp + 0x170]
push ecx
mov ecx, esi
call fcn.00418490
cmp dword [esp + 0x108], ebp
jb 0x4246de
mov edx, dword [esp + 0xf4]
push edx
call fcn.0058984a
add esp, 4
cmp dword [esp + 0x188], ebp
jb 0x4246f7
mov eax, dword [esp + 0x174]
push eax
call fcn.0058984a
add esp, 4
mov eax, esi
mov ecx, dword [esp + 0x2bc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x2a4]
xor ecx, esp
call fcn.00589f78
add esp, 0x2b4
ret 8