Function at 0x4cd400
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5b5985
mov eax, dword fs:[0]
push eax
sub esp, 0x180
mov eax, dword [0x5f8800]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x154], edi
movzx eax, word [ebp + 8]
movzx ecx, word [edi + 0x144ff4]
movzx edx, word [edi + 0x144ff2]
mov dword [ebp - 0x17c], eax
movzx eax, word [edi + 0x144ff6]
push 0
sub ax, 5
movsx esi, dx
push 0
movzx eax, ax
push 0
mov dword [ebp - 0x158], eax
movsx eax, cx
push eax
push esi
mov dword [ebp - 0x168], ecx
mov ecx, edi
push 0x3d
mov dword [ebp - 0x150], edx
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x174], esi
call fcn.0043d1d0
mov ecx, dword [ebp - 0x164]
push 0
push 0
push 6
push ecx
push esi
push 0x46
mov ecx, edi
call fcn.0043d1d0
movsx eax, word [edi + 0x1450fc]
cmp eax, 4
ja case.default.0x4cd4b7
jmp dword [eax*4 + 0x4d12a8]
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push 0x30
movups xmmword [ebp - 0x128], xmm0
mov dword [ebp - 0x114], 0
call fcn.005aa520
movups xmm0, xmmword [str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU1]
mov edx, eax
mov dword [ebp - 0x118], 0x23
mov dword [ebp - 0x128], edx
add esp, 4
mov dword [ebp - 0x114], 0x2f
movups xmmword [edx], xmm0
movups xmm0, xmmword [0x5d7d30]
movups xmmword [edx + 0x10], xmm0
mov cx, word [0x5d7d40]
mov word [edx + 0x20], cx
mov al, byte [0x5d7d42]
mov byte [edx + 0x22], al
mov byte [edx + 0x23], 0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0
push eax
lea eax, [ebp - 0x170]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x4cd55a
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x164]
push 0
push 0xc8
push 0xc8
push 0xdc
add eax, 0x2d
push ecx
push eax
mov dword [ebp - 0x15c], eax
mov ecx, edi
lea eax, [esi + 0xf0]
push eax
lea eax, [esi + 0x19]
push eax
call fcn.0045d060
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x4cd5cf
mov edx, dword [ebp - 0x128]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4cd5c5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4d1274
push ecx
push edx
call fcn.005aa4e8
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push 0x30
movups xmmword [ebp - 0x128], xmm0
mov dword [ebp - 0x114], 0
call fcn.005aa520
movups xmm0, xmmword [str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU1]
mov edx, eax
mov dword [ebp - 0x118], 0x23
mov dword [ebp - 0x128], edx
add esp, 4
mov dword [ebp - 0x114], 0x2f
movups xmmword [edx], xmm0
movups xmm0, xmmword [0x5d7d30]
movups xmmword [edx + 0x10], xmm0
mov cx, word [0x5d7d40]
mov word [edx + 0x20], cx
mov al, byte [0x5d7d42]
mov byte [edx + 0x22], al
mov byte [edx + 0x23], 0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 1
push eax
lea eax, [ebp - 0x170]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4cd66b
mov eax, dword [eax]
push 0
push 0xc8
push 0xc8
push 0xdc
push eax
push dword [ebp - 0x15c]
lea eax, [esi + 0xf1]
mov ecx, edi
push eax
lea eax, [esi + 0x1a]
push eax
call fcn.0045d060
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x4cd6d6
mov edx, dword [ebp - 0x128]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4cd6cc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4d1279
push ecx
push edx
call fcn.005aa4e8
add esp, 8
movsx ecx, word [ebp + 8]
lea eax, [esi + 0x1e]
cmp ecx, eax
jle 0x4cd7a0
lea eax, [esi + 0xd2]
cmp ecx, eax
jge 0x4cd7a0
mov eax, dword [ebp - 0x164]
movsx edx, word [ebp + 0xc]
mov dword [ebp - 0x180], edx
lea ecx, [eax + 0x50]
mov dword [ebp - 0x15c], ecx
cmp edx, ecx
jle 0x4cd7a0
add eax, 0x5f
cmp edx, eax
jge 0x4cd7a0
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU5
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov eax, dword [ebp - 0x158]
mov ecx, 0x5fd3c4
push 0
cwde
push 0xff
add eax, esi
mov dword [ebp - 4], 2
push 0xff
mov dword [ebp - 0x144], eax
lea eax, [ebp - 0x128]
push 0xff
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x15c]
mov ecx, edi
push dword [ebp - 0x144]
push esi
call fcn.0045d060
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x180]
jmp 0x4cd88f
push 0x23
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU5
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 3
push eax
lea eax, [ebp - 0x170]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov edx, dword [eax]
add edx, 0x20
cmp dword [edx + 0x14], 0xf
jbe 0x4cd7fc
mov edx, dword [edx]
mov eax, dword [ebp - 0x158]
push 0
push 0x32
cwde
push 0
push 4
push edx
lea ecx, [eax + esi]
mov eax, dword [ebp - 0x164]
add eax, 0x50
mov dword [ebp - 0x144], ecx
push eax
push ecx
push esi
mov ecx, edi
call fcn.0045d060
mov eax, dword [ebp - 0x114]
mov dword [ebp - 4], 0xffffffff
cmp eax, 0xf
jbe 0x4cd850
push eax
push dword [ebp - 0x128]
lea eax, [ebp - 0x128]
push eax
call fcn.0047d060
add esp, 0xc
movsx edx, word [ebp + 8]
lea eax, [esi + 0x1e]
movsx ecx, word [ebp + 0xc]
mov edi, dword [ebp - 0x154]
mov dword [ebp - 0x180], ecx
cmp edx, eax
jle 0x4cd915
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x144], eax
lea eax, [esi + 0xd2]
mov dword [ebp - 0x180], ecx
cmp edx, eax
jge 0x4cd915
mov eax, dword [ebp - 0x164]
lea edx, [eax + 0x6e]
mov dword [ebp - 0x15c], edx
cmp ecx, edx
jle 0x4cd915
add eax, 0x7d
cmp ecx, eax
jge 0x4cd915
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU3
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
push 0
push 0xff
push 0xff
push 0xff
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 4
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x15c]
mov ecx, edi
push dword [ebp - 0x144]
push esi
call fcn.0045d060
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
jmp 0x4cd9ba
push 0x23
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU3
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 5
push eax
lea eax, [ebp - 0x170]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4cd971
mov eax, dword [eax]
push 0
push 0x32
push 0
push 4
push eax
mov eax, dword [ebp - 0x164]
mov ecx, edi
add eax, 0x6e
push eax
push dword [ebp - 0x144]
push esi
call fcn.0045d060
mov eax, dword [ebp - 0x114]
mov dword [ebp - 4], 0xffffffff
cmp eax, 0xf
jbe 0x4cd9ba
push eax
push dword [ebp - 0x128]
lea eax, [ebp - 0x128]
push eax
call fcn.0047d060
add esp, 0xc
movsx ecx, word [ebp + 8]
lea eax, [esi + 0x9a]
mov dword [ebp - 0x15c], eax
cmp ecx, eax
jl 0x4cda0e
lea eax, [esi + 0xe4]
cmp ecx, eax
mov ecx, dword [ebp - 0x164]
jg 0x4cda14
mov edx, dword [ebp - 0x180]
lea esi, [ecx + 0x124]
cmp edx, esi
jle 0x4cda14
lea eax, [ecx + 0x138]
cmp edx, eax
jge 0x4cda14
push 0
push 0
mov eax, 0x11
push eax
push esi
push dword [ebp - 0x15c]
jmp 0x4d124e
mov ecx, dword [ebp - 0x164]
push 0
push 0
mov eax, 0x10
lea esi, [ecx + 0x124]
push eax
push esi
push dword [ebp - 0x15c]
jmp 0x4d124e
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push 0x30
movups xmmword [ebp - 0x128], xmm0
mov dword [ebp - 0x114], 0
call fcn.005aa520
movups xmm0, xmmword [str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU2]
mov edx, eax
mov dword [ebp - 0x118], 0x23
mov dword [ebp - 0x128], edx
add esp, 4
mov dword [ebp - 0x114], 0x2f
movups xmmword [edx], xmm0
movups xmm0, xmmword [0x5d7d9c]
movups xmmword [edx + 0x10], xmm0
mov cx, word [0x5d7dac]
mov word [edx + 0x20], cx
mov al, byte [0x5d7dae]
mov byte [edx + 0x22], al
mov byte [edx + 0x23], 0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 6
push eax
lea eax, [ebp - 0x170]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x4cdacc
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x164]
push 0
push 0xc8
push 0xc8
push 0xdc
add eax, 0x2d
push ecx
push eax
mov dword [ebp - 0x15c], eax
mov ecx, edi
lea eax, [esi + 0xf0]
push eax
lea eax, [esi + 0x19]
push eax
call fcn.0045d060
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x4cdb41
mov edx, dword [ebp - 0x128]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4cdb37
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4d127e
push ecx
push edx
call fcn.005aa4e8
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push 0x30
movups xmmword [ebp - 0x128], xmm0
mov dword [ebp - 0x114], 0
call fcn.005aa520
movups xmm0, xmmword [str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU2]
mov edx, eax
mov dword [ebp - 0x118], 0x23
mov dword [ebp - 0x128], edx
add esp, 4
mov dword [ebp - 0x114], 0x2f
movups xmmword [edx], xmm0
movups xmm0, xmmword [0x5d7d9c]
movups xmmword [edx + 0x10], xmm0
mov cx, word [0x5d7dac]
mov word [edx + 0x20], cx
mov al, byte [0x5d7dae]
mov byte [edx + 0x22], al
mov byte [edx + 0x23], 0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 7
push eax
lea eax, [ebp - 0x170]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4cdbdd
mov eax, dword [eax]
push 0
push 0xc8
push 0xc8
push 0xdc
push eax
push dword [ebp - 0x15c]
lea eax, [esi + 0xf1]
mov ecx, edi
push eax
lea eax, [esi + 0x1a]
push eax
call fcn.0045d060
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x4cdc48
mov edx, dword [ebp - 0x128]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4cdc3e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4d1283
push ecx
push edx
call fcn.005aa4e8
add esp, 8
movsx ecx, word [ebp + 8]
lea eax, [esi + 0x1e]
cmp ecx, eax
jle 0x4cdd12
lea eax, [esi + 0xd2]
cmp ecx, eax
jge 0x4cdd12
mov eax, dword [ebp - 0x164]
movsx edx, word [ebp + 0xc]
mov dword [ebp - 0x180], edx
lea ecx, [eax + 0x50]
mov dword [ebp - 0x15c], ecx
cmp edx, ecx
jle 0x4cdd12
add eax, 0x5f
cmp edx, eax
jge 0x4cdd12
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU6
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov eax, dword [ebp - 0x158]
mov ecx, 0x5fd3c4
push 0
cwde
push 0xff
add eax, esi
mov dword [ebp - 4], 8
push 0xff
mov dword [ebp - 0x144], eax
lea eax, [ebp - 0x128]
push 0xff
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x15c]
mov ecx, edi
push dword [ebp - 0x144]
push esi
call fcn.0045d060
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x180]
jmp 0x4cddeb
push 0x23
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU6
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 9
push eax
lea eax, [ebp - 0x170]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov edx, dword [eax]
add edx, 0x20
cmp dword [edx + 0x14], 0xf
jbe 0x4cdd6e
mov edx, dword [edx]
mov eax, dword [ebp - 0x158]
push 0
push 0x32
cwde
push 0
push 4
push edx
lea ecx, [eax + esi]
mov eax, dword [ebp - 0x164]
add eax, 0x50
mov dword [ebp - 0x144], ecx
push eax
push ecx
push esi
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
movsx edx, word [ebp + 8]
lea eax, [esi + 0x1e]
movsx ecx, word [ebp + 0xc]
mov edi, dword [ebp - 0x154]
mov dword [ebp - 0x180], ecx
cmp edx, eax
jle 0x4cde71
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x144], eax
lea eax, [esi + 0xd2]
mov dword [ebp - 0x180], ecx
cmp edx, eax
jge 0x4cde71
mov eax, dword [ebp - 0x164]
lea edx, [eax + 0x6e]
mov dword [ebp - 0x15c], edx
cmp ecx, edx
jle 0x4cde71
add eax, 0x7d
cmp ecx, eax
jge 0x4cde71
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU4
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
push 0
push 0xff
push 0xff
push 0xff
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0xa
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x15c]
mov ecx, edi
push dword [ebp - 0x144]
push esi
call fcn.0045d060
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
jmp 0x4cdf16
push 0x23
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU4
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0xb
push eax
lea eax, [ebp - 0x170]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4cdecd
mov eax, dword [eax]
push 0
push 0x32
push 0
push 4
push eax
mov eax, dword [ebp - 0x164]
mov ecx, edi
add eax, 0x6e
push eax
push dword [ebp - 0x144]
push esi
call fcn.0045d060
mov eax, dword [ebp - 0x114]
mov dword [ebp - 4], 0xffffffff
cmp eax, 0xf
jbe 0x4cdf16
push eax
push dword [ebp - 0x128]
lea eax, [ebp - 0x128]
push eax
call fcn.0047d060
add esp, 0xc
movsx ecx, word [ebp + 8]
lea eax, [esi + 0x9a]
mov dword [ebp - 0x15c], eax
cmp ecx, eax
jl 0x4cdf6a
lea eax, [esi + 0xe4]
cmp ecx, eax
mov ecx, dword [ebp - 0x164]
jg 0x4cdf70
mov edx, dword [ebp - 0x180]
lea esi, [ecx + 0x124]
cmp edx, esi
jle 0x4cdf70
lea eax, [ecx + 0x138]
cmp edx, eax
jge 0x4cdf70
push 0
push 0
mov eax, 0x11
push eax
push esi
push dword [ebp - 0x15c]
jmp 0x4d124e
mov ecx, dword [ebp - 0x164]
push 0
push 0
mov eax, 0x10
lea esi, [ecx + 0x124]
push eax
push esi
push dword [ebp - 0x15c]
jmp 0x4d124e
push 0x23
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU7
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x170]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x4cdfe8
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x164]
push 0
push 0xc8
push 0xc8
push 0xdc
add eax, 0x2d
push ecx
push eax
mov dword [ebp - 0x15c], eax
mov ecx, edi
lea eax, [esi + 0xf0]
push eax
lea eax, [esi + 0x19]
push eax
call fcn.0045d060
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x4ce05d
mov edx, dword [ebp - 0x128]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4ce053
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4d1288
push ecx
push edx
call fcn.005aa4e8
add esp, 8
push 0x23
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU7
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0xd
push eax
lea eax, [ebp - 0x170]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4ce0b9
mov eax, dword [eax]
push 0
push 0xc8
push 0xc8
push 0xdc
push eax
push dword [ebp - 0x15c]
lea eax, [esi + 0xf1]
mov ecx, edi
push eax
lea eax, [esi + 0x1a]
push eax
call fcn.0045d060
mov eax, dword [ebp - 0x114]
mov dword [ebp - 4], 0xffffffff
cmp eax, 0xf
jbe 0x4ce10b
push eax
push dword [ebp - 0x128]
lea eax, [ebp - 0x128]
push eax
call fcn.0047d060
add esp, 0xc
cmp dword [edi + 0x18c000], 0xf
jl 0x4ce244
cmp dword [edi + 0x18c010], 0x6e
jl 0x4ce244
cmp dword [edi + 0x18c01c], 0x19
jl 0x4ce244
mov ax, word [ebp + 8]
lea ecx, [esi + 0x23]
cwde
mov dword [ebp - 0x14c], eax
cmp eax, ecx
jle 0x4ce1c8
lea ecx, [esi + 0xdc]
cmp eax, ecx
jge 0x4ce1c8
mov eax, dword [ebp - 0x164]
movsx ecx, word [ebp + 0xc]
lea edx, [eax + 0x46]
mov dword [ebp - 0x15c], edx
cmp ecx, edx
jle 0x4ce1c8
add eax, 0x5a
cmp ecx, eax
jge 0x4ce1c8
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU15
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov eax, dword [ebp - 0x158]
mov ecx, 0x5fd3c4
push 0
cwde
push 0xff
add eax, esi
mov dword [ebp - 4], 0xe
push 0xff
mov dword [ebp - 0x144], eax
lea eax, [ebp - 0x128]
push 0xff
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x15c]
jmp 0x4ce219
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU15
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov eax, dword [ebp - 0x158]
mov ecx, 0x5fd3c4
push 0
cwde
push 0x32
add eax, esi
mov dword [ebp - 4], 0xf
push 0
mov dword [ebp - 0x144], eax
lea eax, [ebp - 0x128]
push 4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x164]
add eax, 0x46
push eax
push dword [ebp - 0x144]
mov ecx, edi
push esi
call fcn.0045d060
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x14c]
jmp 0x4ce2ff
push 0x24
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU15
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x10
push eax
lea eax, [ebp - 0x170]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x4ce2a0
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x158]
push 0
push 0x41
cwde
push 0x41
push 0x41
push ecx
lea edx, [eax + esi]
mov ecx, edi
mov eax, dword [ebp - 0x164]
add eax, 0x46
mov dword [ebp - 0x144], edx
push eax
push edx
push esi
call fcn.0045d060
mov eax, dword [ebp - 0x114]
mov dword [ebp - 4], 0xffffffff
cmp eax, 0xf
jbe 0x4ce2f4
push eax
push dword [ebp - 0x128]
lea eax, [ebp - 0x128]
push eax
call fcn.0047d060
add esp, 0xc
mov ax, word [ebp + 8]
cwde
mov dword [ebp - 0x14c], eax
cmp dword [edi + 0x18c000], 0x1e
lea ecx, [esi + 0xdc]
lea edx, [esi + 0x23]
jl 0x4ce3fc
cmp dword [edi + 0x18c01c], 0x3c
jl 0x4ce3fc
cmp eax, edx
jle 0x4ce391
cmp eax, ecx
jge 0x4ce391
mov eax, dword [ebp - 0x164]
movsx ecx, word [ebp + 0xc]
lea edx, [eax + 0x64]
mov dword [ebp - 0x15c], edx
cmp ecx, edx
jle 0x4ce391
add eax, 0x78
cmp ecx, eax
jge 0x4ce391
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU16
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
push 0
push 0xff
push 0xff
push 0xff
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x11
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x15c]
jmp 0x4ce3d3
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU16
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
push 0
push 0x32
push 0
push 4
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x12
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x164]
add eax, 0x64
push eax
push dword [ebp - 0x144]
mov ecx, edi
push esi
call fcn.0045d060
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
movsx esi, word [ebp + 8]
jmp 0x4ce47d
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU16
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x13
push eax
lea eax, [ebp - 0x170]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x4ce444
mov eax, dword [ebp - 0x14c]
mov ecx, dword [ecx]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x164]
push 0
push 0x41
push 0x41
push 0x41
push ecx
add eax, 0x64
mov ecx, edi
push eax
push dword [ebp - 0x144]
push esi
call fcn.0045d060
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov esi, dword [ebp - 0x14c]
cmp dword [edi + 0x18c010], 0x64
jl 0x4ce5d9
cmp dword [edi + 0x18c01c], 0x37
jl 0x4ce5d9
mov edx, dword [ebp - 0x150]
movsx ecx, dx
mov dword [ebp - 0x154], ecx
lea eax, [ecx + 0x23]
cmp esi, eax
jle 0x4ce54a
lea eax, [ecx + 0xdc]
cmp esi, eax
mov esi, dword [ebp - 0x168]
jge 0x4ce550
movsx ecx, word [ebp + 0xc]
movsx eax, si
mov dword [ebp - 0x180], eax
lea edx, [eax + 0x82]
mov dword [ebp - 0x15c], edx
cmp ecx, edx
jle 0x4ce550
add eax, 0x96
cmp ecx, eax
jge 0x4ce550
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU17
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov eax, dword [ebp - 0x158]
mov ecx, 0x5fd3c4
mov esi, dword [ebp - 0x154]
push 0
push 0xff
cwde
push 0xff
add esi, eax
mov dword [ebp - 4], 0x14
push 0xff
lea eax, [ebp - 0x128]
mov dword [ebp - 0x144], esi
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x15c]
push esi
jmp 0x4ce5b1
mov esi, dword [ebp - 0x168]
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU17
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov eax, dword [ebp - 0x158]
mov ecx, 0x5fd3c4
push 0
cwde
add eax, dword [ebp - 0x154]
push 0x32
push 0
mov dword [ebp - 0x144], eax
lea eax, [ebp - 0x128]
push 4
movsx esi, si
push eax
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x180], esi
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [esi + 0x82]
push eax
push dword [ebp - 0x144]
push dword [ebp - 0x154]
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
movsx esi, word [ebp + 8]
jmp 0x4ce69c
push 0x24
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU17
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x16
push eax
lea eax, [ebp - 0x170]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
mov dword [ebp - 0x148], eax
cmp dword [eax + 0x14], 0xf
jbe 0x4ce641
mov eax, dword [eax]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x168]
mov edx, dword [ebp - 0x150]
cwde
push 0
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x158]
push 0x41
movsx ecx, dx
cwde
push 0x41
push 0x41
push dword [ebp - 0x148]
lea edx, [eax + ecx]
mov eax, dword [ebp - 0x180]
add eax, 0x82
mov dword [ebp - 0x144], edx
push eax
push edx
push ecx
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp dword [edi + 0x18c000], 0xc
jl 0x4ce7ae
cmp dword [edi + 0x18c01c], 0x1e
jl 0x4ce7ae
mov eax, dword [ebp - 0x150]
movsx ecx, ax
mov dword [ebp - 0x148], ecx
lea eax, [ecx + 0x23]
cmp esi, eax
jle 0x4ce73b
lea eax, [ecx + 0xdc]
cmp esi, eax
jge 0x4ce73b
mov eax, dword [ebp - 0x168]
movsx edx, word [ebp + 0xc]
movsx ecx, ax
lea esi, [ecx + 0xa0]
cmp edx, esi
jle 0x4ce73b
lea eax, [ecx + 0xb4]
cmp edx, eax
jge 0x4ce73b
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU18
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
push 0
push 0xff
push 0xff
push 0xff
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x17
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push esi
jmp 0x4ce780
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU18
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
push 0
push 0x32
push 0
push 4
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x18
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x168]
cwde
add eax, 0xa0
push eax
push dword [ebp - 0x144]
mov ecx, edi
push dword [ebp - 0x148]
call fcn.0045d060
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
movsx esi, word [ebp + 8]
jmp 0x4ce846
push 0x24
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU18
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x19
push eax
lea eax, [ebp - 0x170]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4ce80a
mov eax, dword [eax]
push 0
push 0x41
push 0x41
push 0x41
push eax
mov eax, dword [ebp - 0x180]
mov ecx, edi
add eax, 0xa0
push eax
push dword [ebp - 0x144]
mov eax, dword [ebp - 0x150]
cwde
push eax
call fcn.0045d060
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp dword [edi + 0x18c000], 0x14
jl 0x4ce9a6
cmp dword [edi + 0x18c01c], 0x32
jl 0x4ce9a6
mov eax, dword [ebp - 0x150]
movsx ecx, ax
mov dword [ebp - 0x154], ecx
lea eax, [ecx + 0x23]
cmp esi, eax
jle 0x4ce917
lea eax, [ecx + 0xdc]
cmp esi, eax
jge 0x4ce917
mov eax, dword [ebp - 0x168]
movsx ecx, word [ebp + 0xc]
cwde
mov dword [ebp - 0x144], eax
lea edx, [eax + 0xbe]
mov dword [ebp - 0x15c], edx
cmp ecx, edx
jle 0x4ce917
add eax, 0xd2
cmp ecx, eax
jge 0x4ce917
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU19
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov eax, dword [ebp - 0x158]
mov ecx, 0x5fd3c4
mov esi, dword [ebp - 0x154]
push 0
cwde
push 0xff
add eax, esi
mov dword [ebp - 4], 0x1a
push 0xff
mov dword [ebp - 0x14c], eax
lea eax, [ebp - 0x128]
push 0xff
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x15c]
push dword [ebp - 0x14c]
push esi
jmp 0x4ce984
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU19
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov eax, dword [ebp - 0x168]
mov ecx, 0x5fd3c4
movsx esi, ax
mov eax, dword [ebp - 0x158]
push 0
cwde
add eax, dword [ebp - 0x154]
push 0x32
push 0
mov dword [ebp - 0x14c], eax
lea eax, [ebp - 0x128]
push 4
push eax
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0x144], esi
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [esi + 0xbe]
push eax
push dword [ebp - 0x14c]
push dword [ebp - 0x154]
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
movsx esi, word [ebp + 8]
jmp 0x4cea6a
push 0x24
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU19
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x1c
push eax
lea eax, [ebp - 0x170]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
mov dword [ebp - 0x148], eax
cmp dword [eax + 0x14], 0xf
jbe 0x4cea0e
mov eax, dword [eax]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x168]
movsx edx, ax
mov eax, dword [ebp - 0x150]
push 0
movsx ecx, ax
mov eax, dword [ebp - 0x158]
push 0x41
push 0x41
cwde
push 0x41
push dword [ebp - 0x148]
add eax, ecx
mov dword [ebp - 0x144], edx
mov dword [ebp - 0x14c], eax
lea eax, [edx + 0xbe]
push eax
push dword [ebp - 0x14c]
push ecx
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp dword [edi + 0x18c01c], 0x64
jl 0x4cebd8
mov eax, dword [ebp - 0x150]
movsx ecx, ax
mov dword [ebp - 0x148], ecx
lea eax, [ecx + 0x23]
cmp esi, eax
jle 0x4ceb4b
lea eax, [ecx + 0xdc]
cmp esi, eax
jge 0x4ceb4b
mov eax, dword [ebp - 0x168]
movsx ecx, word [ebp + 0xc]
cwde
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x174], ecx
lea edx, [eax + 0xdc]
mov dword [ebp - 0x15c], edx
cmp ecx, edx
jle 0x4ceb4b
add eax, 0xf0
cmp ecx, eax
jge 0x4ceb4b
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU20
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
push 0
push 0xff
push 0xff
push 0xff
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x1d
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
mov ecx, dword [ebp - 0x148]
push eax
push dword [ebp - 0x15c]
push dword [ebp - 0x14c]
push ecx
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov edx, dword [ebp - 0x174]
jmp 0x4cec54
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU20
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x1e
push eax
lea eax, [ebp - 0x170]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x4ceb87
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x168]
push 0
push 0x32
push 0
cwde
push 4
mov dword [ebp - 0x144], eax
add eax, 0xdc
push ecx
mov ecx, dword [ebp - 0x148]
push eax
mov eax, dword [ebp - 0x158]
cwde
add eax, ecx
push eax
push ecx
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x17c]
movsx esi, ax
jmp 0x4cec50
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU20
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x1f
push eax
lea eax, [ebp - 0x170]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4cec14
mov eax, dword [eax]
push 0
push 0x41
push 0x41
push 0x41
push eax
mov eax, dword [ebp - 0x144]
mov ecx, edi
add eax, 0xdc
push eax
push dword [ebp - 0x14c]
mov eax, dword [ebp - 0x150]
cwde
push eax
call fcn.0045d060
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
movsx edx, word [ebp + 0xc]
mov eax, dword [ebp - 0x150]
movsx ecx, ax
mov dword [ebp - 0x174], ecx
lea eax, [ecx + 0x20]
cmp esi, eax
jl 0x4ceca8
lea eax, [ecx + 0x5f]
mov ecx, dword [ebp - 0x144]
cmp esi, eax
jg 0x4cecae
lea eax, [ecx + 0x12c]
mov dword [ebp - 0x15c], eax
cmp edx, eax
jl 0x4cecae
lea eax, [ecx + 0x140]
cmp edx, eax
jg 0x4cecae
mov ecx, dword [ebp - 0x15c]
mov eax, 6
mov dword [ebp - 0x148], 0x14
jmp 0x4cecc0
mov ecx, dword [ebp - 0x144]
add ecx, 0x12c
mov dword [ebp - 0x148], 7
xor eax, eax
push dword [ebp - 0x148]
mov edx, edi
push eax
push eax
mov eax, dword [ebp - 0x174]
push str.Back
push ecx
add eax, 0x19
mov ecx, edx
push eax
call fcn.0045dd00
mov eax, dword [ebp - 0x174]
lea edx, [eax + 0x9a]
cmp esi, edx
jl 0x4ced42
add eax, 0xe4
cmp esi, eax
mov esi, dword [ebp - 0x168]
jg 0x4ced48
movsx eax, si
mov dword [ebp - 0x15c], eax
lea ecx, [eax + 0x124]
mov ax, word [ebp + 0xc]
cwde
mov dword [ebp - 0x148], eax
cmp eax, ecx
jl 0x4ced48
mov eax, dword [ebp - 0x15c]
add eax, 0x138
cmp dword [ebp - 0x148], eax
jg 0x4ced48
push 0
push 0
mov eax, 0x11
push eax
push ecx
push edx
jmp 0x4d124e
mov esi, dword [ebp - 0x168]
push 0
push 0
movsx ecx, si
mov eax, 0x10
push eax
add ecx, 0x124
push ecx
push edx
jmp 0x4d124e
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push 0x30
movups xmmword [ebp - 0x128], xmm0
mov dword [ebp - 0x114], 0
call fcn.005aa520
movups xmm0, xmmword [str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU7]
mov edx, eax
mov dword [ebp - 0x118], 0x23
mov dword [ebp - 0x128], edx
add esp, 4
mov dword [ebp - 0x114], 0x2f
movups xmmword [edx], xmm0
movups xmm0, xmmword [0x5d7e08]
movups xmmword [edx + 0x10], xmm0
mov cx, word [0x5d7e18]
mov word [edx + 0x20], cx
mov al, byte [0x5d7e1a]
mov byte [edx + 0x22], al
mov byte [edx + 0x23], 0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x20
push eax
lea eax, [ebp - 0x170]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x4cedfe
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x164]
push 0
push 0xc8
push 0xc8
push 0xdc
add eax, 0x2d
push ecx
push eax
mov dword [ebp - 0x15c], eax
mov ecx, edi
lea eax, [esi + 0xf0]
push eax
lea eax, [esi + 0x19]
push eax
call fcn.0045d060
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push 0x30
movups xmmword [ebp - 0x128], xmm0
mov dword [ebp - 0x114], 0
call fcn.005aa520
movups xmm0, xmmword [str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU7]
mov edx, eax
mov dword [ebp - 0x118], 0x23
mov dword [ebp - 0x128], edx
add esp, 4
mov dword [ebp - 0x114], 0x2f
movups xmmword [edx], xmm0
movups xmm0, xmmword [0x5d7e08]
movups xmmword [edx + 0x10], xmm0
mov cx, word [0x5d7e18]
mov word [edx + 0x20], cx
mov al, byte [0x5d7e1a]
mov byte [edx + 0x22], al
mov byte [edx + 0x23], 0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x21
push eax
lea eax, [ebp - 0x170]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4ceee0
mov eax, dword [eax]
push 0
push 0xc8
push 0xc8
push 0xdc
push eax
push dword [ebp - 0x15c]
lea eax, [esi + 0xf1]
mov ecx, edi
push eax
lea eax, [esi + 0x1a]
push eax
call fcn.0045d060
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x4cef4b
mov edx, dword [ebp - 0x128]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4cef41
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4d128d
push ecx
push edx
call fcn.005aa4e8
add esp, 8
cmp dword [edi + 0x18c000], 0x55
jl 0x4cf08f
cmp dword [edi + 0x18c01c], 0x28
jl 0x4cf08f
mov eax, dword [ebp - 0x150]
movsx edx, word [ebp + 8]
mov esi, dword [ebp - 0x168]
movsx ecx, ax
mov dword [ebp - 0x154], ecx
lea eax, [ecx + 0x23]
cmp edx, eax
jle 0x4cf023
lea eax, [ecx + 0xdc]
cmp edx, eax
jge 0x4cf023
movsx ecx, word [ebp + 0xc]
movsx eax, si
mov dword [ebp - 0x14c], eax
lea edx, [eax + 0x46]
mov dword [ebp - 0x15c], edx
cmp ecx, edx
jle 0x4cf023
add eax, 0x5a
cmp ecx, eax
jge 0x4cf023
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU8
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov eax, dword [ebp - 0x158]
mov ecx, 0x5fd3c4
push 0
cwde
add eax, dword [ebp - 0x154]
push 0xff
push 0xff
mov dword [ebp - 0x144], eax
lea eax, [ebp - 0x128]
push 0xff
push eax
mov dword [ebp - 4], 0x22
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x15c]
push dword [ebp - 0x144]
push dword [ebp - 0x154]
jmp 0x4cf10c
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU8
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
movsx eax, si
mov ecx, 0x5fd3c4
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x158]
push 0
cwde
add eax, dword [ebp - 0x154]
push 0x32
push 0
mov dword [ebp - 0x144], eax
lea eax, [ebp - 0x128]
push 4
push eax
mov dword [ebp - 4], 0x23
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x14c]
add eax, 0x46
push eax
push dword [ebp - 0x144]
push dword [ebp - 0x154]
jmp 0x4cf10c
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU8
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x24
push eax
lea eax, [ebp - 0x170]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov edx, dword [eax]
add edx, 0x20
cmp dword [edx + 0x14], 0xf
jbe 0x4cf0cb
mov edx, dword [edx]
mov esi, dword [ebp - 0x168]
movsx eax, si
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x150]
movsx ecx, ax
mov eax, dword [ebp - 0x158]
push 0
push 0x41
cwde
push 0x41
add eax, ecx
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x14c]
push 0x41
push edx
add eax, 0x46
push eax
push dword [ebp - 0x144]
push ecx
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp dword [edi + 0x18c000], 0x64
jl 0x4cf22a
cmp dword [edi + 0x18c01c], 0x4b
jl 0x4cf22a
mov eax, dword [ebp - 0x150]
movsx edx, word [ebp + 8]
movsx ecx, ax
mov dword [ebp - 0x148], ecx
lea eax, [ecx + 0x23]
cmp edx, eax
jle 0x4cf1dd
lea eax, [ecx + 0xdc]
cmp edx, eax
jge 0x4cf1dd
movsx edx, word [ebp + 0xc]
movsx ecx, si
lea eax, [ecx + 0x64]
mov dword [ebp - 0x15c], eax
lea eax, [ecx + 0x64]
cmp edx, eax
jle 0x4cf1dd
lea eax, [ecx + 0x78]
cmp edx, eax
jge 0x4cf1dd
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU9
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
push 0
push 0xff
push 0xff
push 0xff
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x25
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x15c]
push dword [ebp - 0x144]
push dword [ebp - 0x148]
jmp 0x4cf2a7
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU9
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
push 0
push 0x32
push 0
push 4
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x26
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
movsx eax, si
add eax, 0x64
push eax
push dword [ebp - 0x144]
push dword [ebp - 0x148]
jmp 0x4cf2a7
push 0x23
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU9
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x27
push eax
lea eax, [ebp - 0x170]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4cf286
mov eax, dword [eax]
push 0
push 0x41
push 0x41
push 0x41
push eax
mov eax, dword [ebp - 0x14c]
add eax, 0x64
push eax
mov eax, dword [ebp - 0x150]
push dword [ebp - 0x144]
cwde
push eax
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp dword [edi + 0x18c000], 0xc
jl 0x4cf408
cmp dword [edi + 0x18c01c], 0x1e
jl 0x4cf408
mov eax, dword [ebp - 0x150]
movsx edx, word [ebp + 8]
movsx ecx, ax
mov dword [ebp - 0x154], ecx
lea eax, [ecx + 0x23]
cmp edx, eax
jle 0x4cf397
lea eax, [ecx + 0xdc]
cmp edx, eax
jge 0x4cf397
movsx ecx, word [ebp + 0xc]
movsx eax, si
mov dword [ebp - 0x180], eax
lea edx, [eax + 0x82]
mov dword [ebp - 0x15c], edx
cmp ecx, edx
jle 0x4cf397
add eax, 0x96
cmp ecx, eax
jge 0x4cf397
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU10
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov eax, dword [ebp - 0x158]
mov ecx, 0x5fd3c4
push 0
cwde
add eax, dword [ebp - 0x154]
push 0xff
push 0xff
mov dword [ebp - 0x144], eax
lea eax, [ebp - 0x128]
push 0xff
push eax
mov dword [ebp - 4], 0x28
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x15c]
push dword [ebp - 0x144]
push dword [ebp - 0x154]
jmp 0x4cf4ad
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU10
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
movsx eax, si
mov ecx, 0x5fd3c4
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x158]
push 0
cwde
add eax, dword [ebp - 0x154]
push 0x32
push 0
mov dword [ebp - 0x144], eax
lea eax, [ebp - 0x128]
push 4
push eax
mov dword [ebp - 4], 0x29
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x180]
add eax, 0x82
push eax
push dword [ebp - 0x144]
push dword [ebp - 0x154]
jmp 0x4cf4ad
push 0x24
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU10
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x2a
push eax
lea eax, [ebp - 0x170]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
mov dword [ebp - 0x148], eax
cmp dword [eax + 0x14], 0xf
jbe 0x4cf470
mov eax, dword [eax]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x150]
push 0
movsx ecx, ax
mov eax, dword [ebp - 0x158]
push 0x41
push 0x41
movsx edx, si
cwde
push 0x41
push dword [ebp - 0x148]
add eax, ecx
mov dword [ebp - 0x180], edx
mov dword [ebp - 0x144], eax
lea eax, [edx + 0x82]
push eax
push dword [ebp - 0x144]
push ecx
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp dword [edi + 0x18c000], 0x14
jl 0x4cf5d6
cmp dword [edi + 0x18c01c], 0x32
jl 0x4cf5d6
mov eax, dword [ebp - 0x150]
movsx edx, word [ebp + 8]
movsx ecx, ax
mov dword [ebp - 0x148], ecx
lea eax, [ecx + 0x23]
cmp edx, eax
jle 0x4cf587
lea eax, [ecx + 0xdc]
cmp edx, eax
jge 0x4cf587
movsx edx, word [ebp + 0xc]
movsx ecx, si
lea eax, [ecx + 0xa0]
mov dword [ebp - 0x15c], eax
lea eax, [ecx + 0xa0]
cmp edx, eax
jle 0x4cf587
lea eax, [ecx + 0xb4]
cmp edx, eax
jge 0x4cf587
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU11
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
push 0
push 0xff
push 0xff
push 0xff
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x2b
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x15c]
push dword [ebp - 0x144]
push dword [ebp - 0x148]
jmp 0x4cf655
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU11
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
push 0
push 0x32
push 0
push 4
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x2c
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
movsx eax, si
add eax, 0xa0
push eax
push dword [ebp - 0x144]
push dword [ebp - 0x148]
jmp 0x4cf655
push 0x24
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU11
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x2d
push eax
lea eax, [ebp - 0x170]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4cf632
mov eax, dword [eax]
push 0
push 0x41
push 0x41
push 0x41
push eax
mov eax, dword [ebp - 0x180]
add eax, 0xa0
push eax
mov eax, dword [ebp - 0x150]
push dword [ebp - 0x144]
cwde
push eax
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp dword [edi + 0x18c000], 0xb
jl 0x4cf7b6
cmp dword [edi + 0x18c01c], 0x41
jl 0x4cf7b6
mov eax, dword [ebp - 0x150]
movsx edx, word [ebp + 8]
movsx ecx, ax
mov dword [ebp - 0x154], ecx
lea eax, [ecx + 0x23]
cmp edx, eax
jle 0x4cf745
lea eax, [ecx + 0xdc]
cmp edx, eax
jge 0x4cf745
movsx ecx, word [ebp + 0xc]
movsx eax, si
mov dword [ebp - 0x180], eax
lea edx, [eax + 0xbe]
mov dword [ebp - 0x15c], edx
cmp ecx, edx
jle 0x4cf745
add eax, 0xd2
cmp ecx, eax
jge 0x4cf745
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU12
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov eax, dword [ebp - 0x158]
mov ecx, 0x5fd3c4
push 0
cwde
add eax, dword [ebp - 0x154]
push 0xff
push 0xff
mov dword [ebp - 0x144], eax
lea eax, [ebp - 0x128]
push 0xff
push eax
mov dword [ebp - 4], 0x2e
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x15c]
push dword [ebp - 0x144]
push dword [ebp - 0x154]
jmp 0x4cf85b
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU12
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
movsx eax, si
mov ecx, 0x5fd3c4
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x158]
push 0
cwde
add eax, dword [ebp - 0x154]
push 0x32
push 0
mov dword [ebp - 0x144], eax
lea eax, [ebp - 0x128]
push 4
push eax
mov dword [ebp - 4], 0x2f
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
mov eax, dword [ebp - 0x180]
add eax, 0xbe
push eax
push dword [ebp - 0x144]
push dword [ebp - 0x154]
jmp 0x4cf85b
push 0x24
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU12
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x30
push eax
lea eax, [ebp - 0x170]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
mov dword [ebp - 0x148], eax
cmp dword [eax + 0x14], 0xf
jbe 0x4cf81e
mov eax, dword [eax]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x150]
push 0
movsx ecx, ax
mov eax, dword [ebp - 0x158]
push 0x41
push 0x41
movsx edx, si
cwde
push 0x41
push dword [ebp - 0x148]
add eax, ecx
mov dword [ebp - 0x180], edx
mov dword [ebp - 0x144], eax
lea eax, [edx + 0xbe]
push eax
push dword [ebp - 0x144]
push ecx
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp dword [edi + 0x18c000], 0x34
jl 0x4cf984
cmp dword [edi + 0x18c01c], 0x4b
jl 0x4cf984
mov eax, dword [ebp - 0x150]
movsx edx, word [ebp + 8]
movsx ecx, ax
mov dword [ebp - 0x148], ecx
lea eax, [ecx + 0x23]
cmp edx, eax
jle 0x4cf935
lea eax, [ecx + 0xdc]
cmp edx, eax
jge 0x4cf935
movsx edx, word [ebp + 0xc]
movsx ecx, si
lea eax, [ecx + 0xdc]
mov dword [ebp - 0x15c], eax
lea eax, [ecx + 0xdc]
cmp edx, eax
jle 0x4cf935
lea eax, [ecx + 0xf0]
cmp edx, eax
jge 0x4cf935
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU13
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
push 0
push 0xff
push 0xff
push 0xff
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x31
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x15c]
push dword [ebp - 0x144]
push dword [ebp - 0x148]
jmp 0x4cfa03
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU13
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
push 0
push 0x32
push 0
push 4
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x32
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
movsx eax, si
add eax, 0xdc
push eax
push dword [ebp - 0x144]
push dword [ebp - 0x148]
jmp 0x4cfa03
push 0x24
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU13
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x33
push eax
lea eax, [ebp - 0x170]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4cf9e0
mov eax, dword [eax]
push 0
push 0x41
push 0x41
push 0x41
push eax
mov eax, dword [ebp - 0x180]
add eax, 0xdc
push eax
mov eax, dword [ebp - 0x150]
push dword [ebp - 0x144]
cwde
push eax
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
cmp dword [edi + 0x18c000], 0x3c
jl 0x4cfba0
cmp dword [edi + 0x18c01c], 0x64
jl 0x4cfba0
mov eax, dword [ebp - 0x150]
movsx edx, word [ebp + 8]
movsx ecx, ax
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x180], edx
lea eax, [ecx + 0x23]
cmp edx, eax
jle 0x4cfb14
lea eax, [ecx + 0xdc]
cmp edx, eax
jge 0x4cfb14
movsx ecx, word [ebp + 0xc]
movsx eax, si
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x154], ecx
lea edx, [eax + 0xfa]
mov dword [ebp - 0x15c], edx
cmp ecx, edx
jle 0x4cfb14
add eax, 0x10e
cmp ecx, eax
jge 0x4cfb14
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU14
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
push 0
push 0xff
push 0xff
push 0xff
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x34
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
mov ecx, dword [ebp - 0x14c]
push eax
mov eax, dword [ebp - 0x158]
push dword [ebp - 0x15c]
cwde
add eax, ecx
push eax
push ecx
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov edx, dword [ebp - 0x180]
jmp 0x4cfc6e
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU14
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
push 0
push 0x32
movsx eax, si
mov ecx, 0x5fd3c4
push 0
mov dword [ebp - 0x144], eax
lea eax, [ebp - 0x128]
push 4
push eax
mov dword [ebp - 4], 0x35
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
mov ecx, dword [ebp - 0x14c]
push eax
mov eax, dword [ebp - 0x144]
add eax, 0xfa
push eax
mov eax, dword [ebp - 0x158]
cwde
add eax, ecx
push eax
push ecx
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
movsx eax, word [ebp + 0xc]
mov edx, dword [ebp - 0x180]
mov dword [ebp - 0x154], eax
jmp 0x4cfc6e
push 0x24
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU14
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x36
push eax
lea eax, [ebp - 0x170]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
mov dword [ebp - 0x148], eax
cmp dword [eax + 0x14], 0xf
jbe 0x4cfc08
mov eax, dword [eax]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x150]
push 0
push 0x41
push 0x41
movsx ecx, ax
movsx edx, si
push 0x41
push dword [ebp - 0x148]
mov dword [ebp - 0x14c], ecx
lea eax, [edx + 0xfa]
mov dword [ebp - 0x144], edx
push eax
mov eax, dword [ebp - 0x158]
cwde
add eax, ecx
push eax
push ecx
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ax, word [ebp + 0xc]
movsx edx, word [ebp + 8]
cwde
mov dword [ebp - 0x180], edx
mov dword [ebp - 0x154], eax
mov ecx, dword [ebp - 0x14c]
lea eax, [ecx + 0x20]
cmp edx, eax
jl 0x4cfcbd
lea eax, [ecx + 0x5f]
cmp edx, eax
mov edx, dword [ebp - 0x144]
jg 0x4cfcc3
lea eax, [edx + 0x12c]
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x154], eax
jl 0x4cfcc3
lea eax, [edx + 0x140]
cmp dword [ebp - 0x154], eax
jg 0x4cfcc3
push 0x14
push 6
push 6
push str.Back
push dword [ebp - 0x15c]
jmp 0x4cfcd5
mov edx, dword [ebp - 0x144]
push 7
push 0
push 0
push str.Back
lea eax, [edx + 0x12c]
push eax
lea eax, [ecx + 0x19]
mov ecx, edi
push eax
call fcn.0045dd00
mov ecx, dword [ebp - 0x14c]
mov edx, dword [ebp - 0x180]
lea eax, [ecx + 0x9a]
mov dword [ebp - 0x174], eax
cmp edx, eax
jl 0x4cfd4a
lea eax, [ecx + 0xe4]
cmp edx, eax
jg 0x4cfd4a
movsx eax, si
mov dword [ebp - 0x15c], eax
lea edx, [eax + 0x124]
mov ax, word [ebp + 0xc]
cwde
mov dword [ebp - 0x148], eax
cmp eax, edx
jl 0x4cfd4a
mov eax, dword [ebp - 0x15c]
add eax, 0x138
cmp dword [ebp - 0x148], eax
jg 0x4cfd4a
push 0
push 0
push 0x11
push edx
lea eax, [ecx + 0x9a]
push eax
jmp 0x4d124e
push 0
push 0
movsx eax, si
push 0x10
add eax, 0x124
push eax
mov eax, dword [ebp - 0x174]
push eax
jmp 0x4d124e
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
xor ecx, ecx
mov dword [ebp - 0x144], 0
mov dword [ebp - 0x17c], ecx
xor eax, eax
mov ecx, dword [edi + 0x144fa0]
add esp, 0xc
dec ecx
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x14c], eax
cmp ecx, 0xc
ja case.default.0x4cfdbf
mov dword [ebp - 0x14c], eax
jmp dword [ecx*4 + 0x4d12bc]
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU8
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x37
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.00411640
mov ecx, 0x445c
mov dword [ebp - 0x144], 0x55
mov dword [ebp - 0x17c], ecx
mov edx, 0x15
mov ecx, 1
mov dword [ebp - 0x178], 0x28
mov dword [ebp - 0x14c], ecx
jmp 0x4d046e
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU9
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x38
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.00411640
mov ecx, 0x7530
mov dword [ebp - 0x144], 0x64
xor eax, eax
mov dword [ebp - 0x17c], ecx
mov cl, byte [edi + 0x18d959]
cmp cl, 2
mov dword [ebp - 0x178], 0x4b
mov dword [ebp - 0x14c], 2
setne al
lea eax, [eax*4 + 9]
movzx edx, ax
xor eax, eax
cmp cl, 2
setne al
lea eax, [eax*2 + 3]
movzx ecx, ax
jmp 0x4d046e
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU10
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0x39
lea eax, [ebp - 0x128]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.00411640
mov ecx, 0x2ee0
mov dword [ebp - 0x144], 0xc
xor eax, eax
mov dword [ebp - 0x17c], ecx
mov cl, byte [edi + 0x18d959]
cmp cl, 2
mov dword [ebp - 0x178], 0x1e
mov dword [ebp - 0x14c], 3
setne al
lea eax, [eax*4 + 7]
movzx edx, ax
xor eax, eax
cmp cl, 2
setne al
inc eax
movzx ecx, ax
jmp 0x4d046e
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU11
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0x3a
lea eax, [ebp - 0x128]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.00411640
mov ecx, 0x3a98
mov dword [ebp - 0x144], 0x14
xor eax, eax
mov dword [ebp - 0x17c], ecx
mov cl, byte [edi + 0x18d959]
cmp cl, 2
mov dword [ebp - 0x178], 0x32
mov dword [ebp - 0x14c], 4
setne al
lea eax, [eax*4 + 8]
movzx edx, ax
xor eax, eax
cmp cl, 2
setne al
add eax, 3
movzx ecx, ax
jmp 0x4d046e
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU12
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x3b
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.00411640
mov edx, 1
mov dword [ebp - 0x144], 0xb
mov ecx, 0x3a98
mov dword [ebp - 0x178], 0x41
mov dword [ebp - 0x17c], ecx
mov dword [ebp - 0x14c], 8
lea ecx, [edx + 5]
jmp 0x4d046e
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU13
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x3c
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.00411640
mov edx, 1
mov dword [ebp - 0x144], 0x34
mov ecx, 0x3a98
mov dword [ebp - 0x178], 0x4b
mov dword [ebp - 0x17c], ecx
mov dword [ebp - 0x14c], 9
lea ecx, [edx + 9]
jmp 0x4d046e
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU14
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x3d
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.00411640
mov edx, 1
mov dword [ebp - 0x144], 0x3c
mov ecx, 0x4844
mov dword [ebp - 0x178], 0x64
mov dword [ebp - 0x17c], ecx
mov dword [ebp - 0x14c], 9
lea ecx, [edx + 0xa]
jmp 0x4d046e
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU15
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x3e
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.00411640
mov edx, 0x15
mov dword [ebp - 0x144], 0xf
mov ecx, 0x445c
mov dword [ebp - 0x180], 0x6e
mov dword [ebp - 0x17c], ecx
mov dword [ebp - 0x178], 0x19
lea ecx, [edx - 0x10]
mov dword [ebp - 0x14c], 1
jmp 0x4d046e
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU16
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x3f
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.00411640
mov ecx, 0x1770
mov dword [ebp - 0x144], 0x1e
xor eax, eax
mov dword [ebp - 0x17c], ecx
mov cl, byte [edi + 0x18d959]
cmp cl, 2
mov dword [ebp - 0x178], 0x3c
mov dword [ebp - 0x14c], 2
setne al
lea eax, [eax*4 + 9]
movzx edx, ax
xor eax, eax
cmp cl, 2
setne al
lea eax, [eax*2 + 1]
movzx ecx, ax
jmp 0x4d046e
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU17
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x40
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.00411640
mov ecx, 0x2710
mov dword [ebp - 0x180], 0x64
xor eax, eax
mov dword [ebp - 0x17c], ecx
mov cl, byte [edi + 0x18d959]
cmp cl, 2
mov dword [ebp - 0x178], 0x37
mov dword [ebp - 0x14c], 2
setne al
lea eax, [eax*4 + 9]
movzx edx, ax
xor eax, eax
cmp cl, 2
setne al
add eax, 5
movzx ecx, ax
jmp 0x4d046e
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU18
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0x41
jmp 0x4cff0b
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU19
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
mov dword [ebp - 4], 0x42
jmp 0x4cffae
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU20
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x43
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004994b0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.00411640
mov edx, 0x11
mov dword [ebp - 0x178], 0x64
mov ecx, 0x7530
mov dword [ebp - 0x14c], 9
mov dword [ebp - 0x17c], ecx
lea ecx, [edx - 0x10]
jmp 0x4d046e
mov ecx, dword [ebp - 0x16c]
mov edx, dword [ebp - 0x16c]
mov esi, dword [ebp - 0x164]
push 0
movzx eax, cx
add esi, 0x28
push 0x32
mov dword [ebp - 0x15c], eax
movzx eax, dx
mov edx, dword [ebp - 0x150]
push 0
movsx ecx, dx
lea edx, [ebp - 0x110]
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x158]
push 4
push edx
cwde
add eax, ecx
push esi
push eax
push ecx
mov ecx, edi
mov dword [ebp - 0x148], eax
call fcn.0045d060
push 0
push 0x32
push 0
push 4
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x148]
push esi
dec eax
push eax
mov eax, dword [ebp - 0x150]
movsx esi, ax
lea eax, [esi - 1]
push eax
call fcn.0045d060
mov eax, dword [ebp - 0x14c]
sub eax, 7
je 0x4d0537
sub eax, 1
je 0x4d0537
sub eax, 1
je 0x4d0537
movzx eax, word [edi + 0x18c182]
movzx ecx, word [edi + 0x18c18e]
movzx edx, word [edi + 0x18c38c]
sub ecx, eax
movzx eax, word [edi + 0x18c380]
sub edx, eax
movzx eax, word [edi + 0x18c58a]
mov dword [ebp - 0x14c], eax
movzx eax, word [edi + 0x18c57e]
sub dword [ebp - 0x14c], eax
jmp 0x4d0583
movzx eax, word [edi + 0x18c182]
movzx ecx, word [edi + 0x18cf80]
movzx edx, word [edi + 0x18d17e]
sub ecx, eax
movzx eax, word [edi + 0x18c380]
sub edx, eax
mov dword [ebp - 0x174], esi
movzx eax, word [edi + 0x18d37c]
mov dword [ebp - 0x14c], eax
movzx eax, word [edi + 0x18c57e]
sub dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0x15c]
mov esi, 0x189300
push 0xffffffffffffffff
push 0xffffffffffffffff
mov dword [ebp - 0x15c], edi
push dword [esi + edi]
mov edi, dword [ebp - 0x154]
push dword [ebp - 0x14c]
movzx eax, ax
push edx
push ecx
mov ecx, dword [ebp - 0x16c]
cwde
push eax
mov eax, dword [ebp - 0x164]
add eax, 0x6c
push eax
mov eax, 0x86
add eax, dword [ebp - 0x174]
push eax
movzx eax, cx
movsx ecx, ax
imul ecx, ecx, 4
mov ecx, dword [ecx + edi + 0x14adbc]
call fcn.0057ea20
mov esi, dword [ebp - 0x144]
test esi, esi
je 0x4d0700
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x128]
push str.DRAW_DIALOGBOX_SHOP15
call fcn.0040f9f0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x44
push eax
lea eax, [ebp - 0x170]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4d063f
mov eax, dword [eax]
push esi
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.00411640
mov eax, dword [ebp - 0x150]
mov esi, dword [ebp - 0x168]
movsx edx, ax
mov eax, dword [ebp - 0x144]
push 0
movsx ecx, si
add ecx, 0x91
mov dword [ebp - 0x188], edx
cmp dword [edi + 0x18c000], eax
lea eax, [ebp - 0x110]
push 0x19
mov dword [ebp - 0x16c], ecx
push 0x19
jl 0x4d06b5
push 0x2d
push eax
push ecx
push dword [ebp - 0x148]
mov ecx, edi
push edx
call fcn.0045d060
jmp 0x4d0706
push 0xc3
push eax
push ecx
push dword [ebp - 0x148]
mov ecx, edi
push edx
call fcn.0045d060
mov ecx, dword [ebp - 0x188]
lea eax, [ebp - 0x110]
push 0
push 0x19
push 0x19
push 0xc3
push eax
mov eax, dword [ebp - 0x158]
push dword [ebp - 0x16c]
cwde
dec eax
add eax, ecx
push eax
lea eax, [ecx - 1]
mov ecx, edi
push eax
call fcn.0045d060
jmp 0x4d0706
mov esi, dword [ebp - 0x168]
cmp dword [ebp - 0x180], 0
jbe 0x4d0822
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x128]
push str.DRAW_DIALOGBOX_SHOP19
call fcn.0040f9f0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x45
push eax
lea eax, [ebp - 0x170]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4d0765
mov eax, dword [eax]
push dword [ebp - 0x180]
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.00411640
mov eax, dword [ebp - 0x150]
movsx ecx, ax
mov eax, dword [ebp - 0x158]
cwde
push 0
push 0x19
mov dword [ebp - 0x15c], ecx
lea edx, [eax + ecx]
movsx eax, si
mov esi, dword [ebp - 0x180]
add eax, 0xa0
cmp dword [edi + 0x18c010], esi
lea esi, [ebp - 0x110]
mov dword [ebp - 0x188], edx
mov dword [ebp - 0x16c], eax
push 0x19
jl 0x4d07dd
push 0x2d
push esi
push eax
push edx
push ecx
jmp 0x4d0815
push 0xc3
push esi
push eax
push edx
push ecx
mov ecx, edi
call fcn.0045d060
push 0
push 0x19
push 0x19
push 0xc3
lea eax, [ebp - 0x110]
push eax
push dword [ebp - 0x16c]
mov eax, dword [ebp - 0x188]
dec eax
push eax
mov eax, dword [ebp - 0x15c]
dec eax
push eax
mov ecx, edi
call fcn.0045d060
mov esi, dword [ebp - 0x168]
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x17c]
add esp, 0xc
test eax, eax
je 0x4d0a73
push eax
push 0
mov ecx, edi
push str.Gold
call fcn.0052f9e0
cmp dword [ebp - 0x178], 0
lea ecx, [ebp - 0x128]
jbe 0x4d0984
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU27
call fcn.0040f9f0
lea eax, [edi + 0x18966d]
mov dword [ebp - 4], 0x46
push eax
push dword [ebp - 0x178]
lea eax, [ebp - 0x128]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.00411640
mov eax, dword [ebp - 0x178]
cmp dword [edi + 0x18c01c], eax
jl 0x4d0914
push str.Gold
mov ecx, edi
call fcn.005658b0
cmp eax, dword [ebp - 0x17c]
jl 0x4d0914
mov eax, dword [ebp - 0x150]
push 0
push 0x19
movsx ecx, ax
lea eax, [ebp - 0x110]
push 0x19
push 0x2d
push eax
movsx eax, si
add eax, 0xaf
push eax
mov eax, dword [ebp - 0x158]
cwde
add eax, ecx
push eax
push ecx
jmp 0x4d0b55
mov eax, dword [ebp - 0x150]
movsx ecx, ax
mov eax, dword [ebp - 0x158]
push 0
push 0x19
cwde
push 0x19
push 0xc3
movsx edi, si
lea esi, [eax + ecx]
add edi, 0xaf
lea eax, [ebp - 0x110]
push eax
push edi
push esi
push ecx
mov ecx, dword [ebp - 0x154]
call fcn.0045d060
push 0
push 0x19
push 0x19
push 0xc3
lea eax, [ebp - 0x110]
push eax
push edi
mov edi, dword [ebp - 0x154]
lea eax, [esi - 1]
mov esi, dword [ebp - 0x150]
mov ecx, edi
push eax
movsx eax, si
dec eax
push eax
call fcn.0045d060
jmp 0x4d0b62
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU26
call fcn.0040f9f0
lea eax, [edi + 0x18966d]
mov dword [ebp - 4], 0x47
push eax
lea eax, [ebp - 0x128]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.00411640
mov eax, dword [ebp - 0x150]
movsx ecx, ax
mov eax, dword [ebp - 0x158]
cwde
add eax, ecx
mov dword [ebp - 0x174], ecx
movsx esi, si
mov ecx, edi
push str.Gold
mov dword [ebp - 0x148], eax
add esi, 0xaf
call fcn.005658b0
cmp eax, dword [ebp - 0x17c]
mov ecx, edi
push 0
push 0x19
push 0x19
lea eax, [ebp - 0x110]
jl 0x4d0a35
push 0x2d
push eax
push esi
push dword [ebp - 0x148]
push dword [ebp - 0x174]
jmp 0x4d0b57
push 0xc3
push eax
push esi
push dword [ebp - 0x148]
push dword [ebp - 0x174]
call fcn.0045d060
push 0
push 0x19
push 0x19
push 0xc3
lea eax, [ebp - 0x110]
push eax
mov eax, dword [ebp - 0x148]
dec eax
push esi
push eax
mov eax, dword [ebp - 0x174]
jmp 0x4d0b53
cmp dword [ebp - 0x178], 0
jbe 0x4d0b5c
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU25
lea ecx, [ebp - 0x128]
call fcn.0040f9f0
push dword [ebp - 0x178]
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x48
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.00411640
mov eax, dword [ebp - 0x150]
movsx ecx, ax
mov eax, dword [ebp - 0x158]
cwde
push 0
movsx esi, si
add esi, 0xaf
mov dword [ebp - 0x188], ecx
lea edx, [eax + ecx]
mov eax, dword [ebp - 0x178]
cmp dword [edi + 0x18c01c], eax
lea eax, [ebp - 0x110]
push 0x19
mov dword [ebp - 0x16c], edx
push 0x19
jl 0x4d0b22
push 0x2d
push eax
push esi
push edx
push ecx
jmp 0x4d0b55
push 0xc3
push eax
push esi
push edx
push ecx
mov ecx, edi
call fcn.0045d060
push 0
push 0x19
push 0x19
push 0xc3
lea eax, [ebp - 0x110]
push eax
mov eax, dword [ebp - 0x16c]
dec eax
push esi
push eax
mov eax, dword [ebp - 0x188]
dec eax
push eax
mov ecx, edi
call fcn.0045d060
mov esi, dword [ebp - 0x150]
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push 0x30
movups xmmword [ebp - 0x128], xmm0
mov dword [ebp - 0x114], 0
call fcn.005aa520
movups xmm0, xmmword [str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU22]
mov dword [ebp - 0x128], eax
add esp, 4
mov dword [ebp - 0x118], 0x24
mov dword [ebp - 0x114], 0x2f
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x5d80a4]
movups xmmword [eax + 0x10], xmm0
mov ecx, dword [0x5d80b4]
mov dword [eax + 0x20], ecx
mov byte [eax + 0x24], 0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x49
push eax
lea eax, [ebp - 0x170]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4d0bf2
mov eax, dword [eax]
push 0
push 0x19
push 0xc8
push 0xc8
push eax
movsx ecx, si
mov esi, dword [ebp - 0x168]
movsx eax, si
add eax, 0xcd
push eax
mov eax, dword [ebp - 0x158]
cwde
add eax, ecx
push eax
push ecx
mov ecx, edi
call fcn.0045d060
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x4d0c66
mov edx, dword [ebp - 0x128]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4d0c5c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4d1292
push ecx
push edx
call fcn.005aa4e8
add esp, 8
push 0x24
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU22
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x4a
push eax
lea eax, [ebp - 0x170]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov edx, dword [eax]
add edx, 0x20
cmp dword [edx + 0x14], 0xf
jbe 0x4d0cc2
mov edx, dword [edx]
mov eax, dword [ebp - 0x150]
push 0
push 0x19
movsx ecx, ax
push 0xc8
push 0xc8
push edx
movsx eax, si
add eax, 0xcd
push eax
mov eax, dword [ebp - 0x158]
cwde
dec eax
add eax, ecx
push eax
lea eax, [ecx - 1]
mov ecx, edi
push eax
call fcn.0045d060
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x4d0d3a
mov edx, dword [ebp - 0x128]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4d0d30
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4d1297
push ecx
push edx
call fcn.005aa4e8
add esp, 8
push 0x24
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU23
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x4b
push eax
lea eax, [ebp - 0x18c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x4d0d96
mov ecx, dword [ecx]
push 0
movsx eax, si
push 0x19
push 0xc8
mov dword [ebp - 0x16c], eax
lea edx, [eax + 0xdc]
mov eax, dword [ebp - 0x150]
push 0xc8
mov dword [ebp - 0x15c], edx
movsx edx, ax
mov eax, dword [ebp - 0x158]
push ecx
push dword [ebp - 0x15c]
cwde
mov ecx, edi
add eax, edx
mov dword [ebp - 0x174], edx
push eax
push edx
mov dword [ebp - 0x148], eax
call fcn.0045d060
mov eax, dword [ebp - 0x114]
mov dword [ebp - 4], 0xffffffff
cmp eax, 0xf
jbe 0x4d0e0f
push eax
push dword [ebp - 0x128]
lea eax, [ebp - 0x128]
push eax
call fcn.0047d060
add esp, 0xc
push 0x24
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU23
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x4c
push eax
lea eax, [ebp - 0x18c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4d0e6b
mov eax, dword [eax]
push 0
push 0x19
push 0xc8
push 0xc8
push eax
push dword [ebp - 0x15c]
mov eax, dword [ebp - 0x148]
mov ecx, edi
dec eax
push eax
mov eax, dword [ebp - 0x174]
dec eax
push eax
call fcn.0045d060
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push 0x30
movups xmmword [ebp - 0x128], xmm0
mov dword [ebp - 0x114], 0
call fcn.005aa520
movups xmm0, xmmword [str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU24]
mov dword [ebp - 0x128], eax
add esp, 4
mov dword [ebp - 0x118], 0x24
mov dword [ebp - 0x114], 0x2f
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x5d80f4]
movups xmmword [eax + 0x10], xmm0
mov ecx, dword [0x5d8104]
mov dword [eax + 0x20], ecx
mov byte [eax + 0x24], 0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x4d
push eax
lea eax, [ebp - 0x160]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4d0f39
mov eax, dword [eax]
push 0
push 0x19
push 0xc8
push 0xc8
push eax
mov eax, dword [ebp - 0x16c]
mov ecx, edi
add eax, 0xeb
push eax
push dword [ebp - 0x148]
push dword [ebp - 0x174]
call fcn.0045d060
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x4d0fa8
mov edx, dword [ebp - 0x128]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4d0f9e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4d129c
push ecx
push edx
call fcn.005aa4e8
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push 0x30
movups xmmword [ebp - 0x128], xmm0
mov dword [ebp - 0x114], 0
call fcn.005aa520
movups xmm0, xmmword [str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU24]
mov dword [ebp - 0x128], eax
add esp, 4
mov dword [ebp - 0x118], 0x24
mov dword [ebp - 0x114], 0x2f
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x5d80f4]
movups xmmword [eax + 0x10], xmm0
mov ecx, dword [0x5d8104]
mov dword [eax + 0x20], ecx
mov byte [eax + 0x24], 0
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0x4e
push eax
lea eax, [ebp - 0x170]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov edx, dword [eax]
add edx, 0x20
cmp dword [edx + 0x14], 0xf
jbe 0x4d1038
mov edx, dword [edx]
mov eax, dword [ebp - 0x150]
push 0
push 0x19
movsx ecx, ax
push 0xc8
push 0xc8
push edx
movsx eax, si
add eax, 0xeb
push eax
mov eax, dword [ebp - 0x158]
cwde
dec eax
add eax, ecx
push eax
lea eax, [ecx - 1]
mov ecx, edi
push eax
call fcn.0045d060
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x4d10b0
mov edx, dword [ebp - 0x128]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4d10a6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4d12a1
push ecx
push edx
call fcn.005aa4e8
add esp, 8
push 0x24
xorps xmm0, xmm0
mov dword [ebp - 0x130], 0
push str.DRAW_DIALOGBOX_DARKKNIGHTMAGE_MENU21
lea ecx, [ebp - 0x140]
mov dword [ebp - 0x12c], 0
movups xmmword [ebp - 0x140], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x140]
mov dword [ebp - 4], 0x4f
push eax
lea eax, [ebp - 0x184]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov edx, dword [eax]
add edx, 0x20
cmp dword [edx + 0x14], 0xf
jbe 0x4d110c
mov edx, dword [edx]
push 0
push 0x19
push 0x19
movsx eax, si
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x150]
movsx ecx, ax
mov eax, dword [ebp - 0x148]
push 0x37
add eax, 0xfc
mov dword [ebp - 0x174], ecx
push edx
push eax
mov eax, dword [ebp - 0x158]
cwde
add eax, ecx
push eax
push ecx
mov ecx, edi
call fcn.0045d060
lea ecx, [ebp - 0x140]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x174]
lea ecx, [eax + 0x1e]
mov dword [ebp - 0x15c], ecx
lea edx, [eax + 0x1e]
movsx ecx, word [ebp + 8]
cmp ecx, edx
jl 0x4d11c5
add eax, 0x68
cmp ecx, eax
jg 0x4d11c5
mov eax, dword [ebp - 0x148]
movsx edx, word [ebp + 0xc]
mov dword [ebp - 0x16c], edx
lea ecx, [eax + 0x124]
mov dword [ebp - 0x154], ecx
cmp edx, ecx
jl 0x4d11c5
add eax, 0x138
cmp edx, eax
jg 0x4d11c5
push 0
push 0
push 0x13
push ecx
push dword [ebp - 0x15c]
mov ecx, edi
push 0x47
call fcn.0043d1d0
mov edx, dword [ebp - 0x16c]
jmp 0x4d11f0
mov eax, dword [ebp - 0x148]
mov ecx, edi
push 0
push 0
push 0x12
add eax, 0x124
push eax
push dword [ebp - 0x15c]
mov dword [ebp - 0x154], eax
push 0x47
call fcn.0043d1d0
movsx edx, word [ebp + 0xc]
mov eax, dword [ebp - 0x174]
mov esi, dword [ebp - 0x168]
lea ecx, [eax + 0x9a]
mov dword [ebp - 0x148], ecx
movsx ecx, word [ebp + 8]
cmp ecx, dword [ebp - 0x148]
jl 0x4d123b
add eax, 0xe4
cmp ecx, eax
mov ecx, dword [ebp - 0x154]
jg 0x4d1241
cmp edx, ecx
jl 0x4d1241
movsx eax, si
add eax, 0x138
cmp edx, eax
jg 0x4d1241
push 0
push 0
push 3
jmp 0x4d1247
mov ecx, dword [ebp - 0x154]
push 0
push 0
push 2
push ecx
push dword [ebp - 0x148]
push 0x47
mov ecx, edi
call fcn.0043d1d0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005aa550
mov esp, ebp
pop ebp
ret 0x10
call fcn.005ac169
call fcn.005ac169
call fcn.005ac169
call fcn.005ac169
call fcn.005ac169
call fcn.005ac169
call fcn.005ac169
call fcn.005ac169
call fcn.005ac169
call fcn.005ac169
nop
mov esi, 0x30004cd4
fimul dword [eax + eax - 116]
fisttp word [eax + eax + 0x62]
in eax, dx
dec esp
add byte [ebp - 3], ah
dec esp
add dh, al
std
dec esp
add byte [ebx - 2], cl
dec esp
add ah, dh
dec byte [eax + eax - 0x69]
dec dword [eax + eax + 0x3c]
add byte [ebp], cl
ret