Function at 0x406f60
Capabilities:
Inspect section memory permissions

Disassembly:
mov eax, dword [0x72e774]
sub esp, 0x2e0
push ebx
shl eax, 5
movsx ecx, byte [eax + 0x862b74]
and ecx, 0x80000003
push ebp
push esi
push edi
jns 0x406f86
dec ecx
or ecx, 0xfffffffc
inc ecx
test dword [eax + 0x862b70], 0x20000000
mov edx, ecx
mov dword [esp + 0x38], ecx
mov dword [esp + 0x30], edx
je 0x406fa5
mov edx, 4
mov dword [esp + 0x30], edx
push 1
push 0
push edx
push ecx
call fcn.004a7fb0
add esp, 0x10
mov dword [esp + 0x28], 0
xor eax, eax
lea ecx, [ecx]
mov cl, byte [eax + 0x6f7896]
mov byte [eax + 0x8c0a80], cl
inc eax
test cl, cl
jne 0x406fc0
mov eax, dword [esp + 0x2f4]
push eax
push 0
mov dword [0x8c09f4], 1
call fcn.00482dc0
add esp, 8
or eax, 0xffffffff
mov dword [esp + 0x14], 0x1388
mov dword [0x72e644], eax
mov dword [0x72e640], eax
call fcn.00453830
mov eax, dword [esp + 0x14]
call fcn.00484110
mov eax, 5
call fcn.00484050
mov eax, 0x66666667
imul dword [0x85c26c]
mov ecx, dword [0x85c26c]
sar edx, 1
mov ebp, edx
shr ebp, 0x1f
add ebp, edx
mov eax, 0x55555556
imul dword [0x85c268]
mov esi, edx
shr esi, 0x1f
xor di, di
xor ebx, ebx
add esi, edx
mov dword [esp + 0x24], ecx
nop
mov eax, 0x66666667
imul dword [esp + 0x24]
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
movsx eax, di
shl eax, 1
lea edx, [ecx + ebp]
mov word [eax + 0x86e010], cx
lea ecx, [esi + esi]
mov word [eax + 0x86db60], cx
mov ecx, dword [esp + 0x24]
mov word [eax + 0x86dcf0], dx
mov edx, dword [0x85c26c]
inc di
mov word [eax + 0x86e1a0], bx
inc ebx
add ecx, edx
cmp ebx, 4
mov word [eax + 0x86de80], si
mov dword [esp + 0x24], ecx
jl 0x407050
mov ebx, dword [0x85c268]
lea ecx, [ebx + ebx*4]
mov eax, 0x2aaaaaab
imul ecx
mov ax, word [0x85c26c]
movsx ecx, di
shl ecx, 1
mov word [ecx + 0x86dcf0], ax
mov esi, edx
shr esi, 0x1f
add esi, edx
mov eax, 0x2aaaaaab
imul ebx
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, esi
xor ebp, ebp
inc di
mov word [0x86e330], di
mov edi, dword [0x85c100]
mov word [ecx + 0x86db60], ax
dec edi
mov word [ecx + 0x86e1a0], 9
mov word [ecx + 0x86e010], bp
mov word [ecx + 0x86de80], si
mov ecx, edi
imul ecx, ecx, 0x1c
cmp byte [ecx + 0x864d10], 0x23
jne 0x407120
dec edi
cmp edi, 0xffffffff
jne 0x407166
mov ebx, dword [esp + 0x2f4]
lea eax, [ebx + ebx*2]
lea eax, [eax*4 + 0x8ddd08]
mov dword [esp + 0x24], eax
mov ecx, dword [eax]
sub esp, 0xc
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [edx + 4], ecx
push str.A_motley_collection_of__CITYNAMEs_finest_have_gathered_at_the_tavern_this_evening.
mov esi, 0x8ebf58
mov dword [edx + 8], eax
call fcn.004f7660
add esp, 0x10
jmp 0x40727c
mov eax, dword [0x8ebf5c]
cmp eax, 6
jl 0x4071c5
cmp eax, 0xb
jg 0x4071c5
mov ecx, edi
imul ecx, ecx, 0x1c
mov al, byte [ecx + 0x864d10]
cmp al, 0x20
jl 0x4071b9
cmp al, 0x3f
jg 0x4071b9
mov ebx, dword [esp + 0x2f4]
lea eax, [ebx + ebx*2]
lea eax, [eax*4 + 0x8ddd08]
mov dword [esp + 0x24], eax
mov ecx, dword [eax]
sub esp, 0xc
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [edx + 4], ecx
mov dword [edx + 8], eax
push str.The_citizens_of__CITYNAME_have_gathered_at_the_tavern_this_evening_to_discuss_the_latest_happenings___including_the_fact_that
jmp 0x407238
sub esp, 0xc
mov ecx, esp
push str.A_motley_collection_of__CITYNAMEs_finest_have_gathered_at_the_tavern_this_evening_to_discuss_the_latest_happenings___apparently
jmp 0x407213
mov ecx, edi
imul ecx, ecx, 0x1c
mov al, byte [ecx + 0x864d10]
cmp al, 0x20
jl 0x407209
cmp al, 0x3f
jg 0x407209
mov ebx, dword [esp + 0x2f4]
lea eax, [ebx + ebx*2]
lea eax, [eax*4 + 0x8ddd08]
mov dword [esp + 0x24], eax
mov ecx, dword [eax]
sub esp, 0xc
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [edx + 4], ecx
mov dword [edx + 8], eax
push str.The_citizens_of__CITYNAME_have_gathered_at_the_tavern_this_evening_to_discuss_the_latest_happenings___including_the_fact_that:_n
jmp 0x407238
sub esp, 0xc
mov ecx, esp
push str.A_motley_collection_of__CITYNAMEs_finest_have_gathered_at_the_tavern_this_evening_to_discuss_the_latest_happenings___apparently:_n
mov ebx, dword [esp + 0x304]
lea eax, [ebx + ebx*2]
lea eax, [eax*4 + 0x8ddd08]
mov dword [esp + 0x34], eax
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [ecx + 4], edx
mov dword [ecx + 8], eax
mov esi, 0x8ebf58
call fcn.004f7660
add esp, 0x10
mov ecx, edi
call fcn.0043a970
mov eax, dword [0x8ebf5c]
cmp eax, 6
jl 0x40727c
cmp eax, 0xb
jg 0x40727c
mov edi, 0x86bb48
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x407261
mov cx, word [0x6fc94c]
mov dl, byte [0x6fc94e]
mov word [edi], cx
mov byte [edi + 2], dl
mov eax, dword [0x72e650]
and eax, 0xb
cmp al, 0xb
jne 0x407297
cmp dword [0x72e65c], ebp
jne 0x407297
push str._Your_inquiries_here_are_completed._n
jmp 0x40729c
push str._Who_would_you_like_to_talk_to__n
mov esi, 0x8ebf58
call fcn.004f7680
add esp, 4
push ebp
push 0x38
call fcn.00487950
mov eax, dword [esp + 0x30]
add esp, 8
call fcn.00406ce0
test byte [0x85c164], 0x20
mov dword [esp + 0x28], eax
mov word [0x86e330], bp
je 0x4072d7
mov dword [0x72e650], ebp
cmp dword [0x72e64c], 1
jne 0x4072ea
mov dword [0x72e64c], 0xffffffff
cmp eax, 0x203
jne 0x408018
test byte [0x72e650], 1
jne 0x407e2d
mov eax, 0x13f6
call fcn.00484110
mov eax, 3
call fcn.00484050
mov edi, ebx
shl edi, 5
mov eax, dword [edi + 0x862b70]
test ah, 0x20
je 0x4073a1
push str.Shhh__cant_talk_now._The_captain_of_the_guardll_lock_me_up_for_loose_talk._n
mov esi, 0x8ebf58
call fcn.004f7660
add esp, 4
push ebp
push 0x28
call fcn.00487950
mov eax, 0x1403
call fcn.00484110
mov eax, dword [0x85c268]
mov ecx, dword [0x85c26c]
push ebp
push ebp
push 0xffffffffffffffff
push ebp
cdq
push fcn.00484b30
push 0xffffffffffffffff
and edx, 0xf
add eax, edx
push ebp
sar eax, 4
push 0x6f7896
push eax
mov eax, 0x2aaaaaab
imul ecx
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
push ecx
call fcn.00430160
push 0x8c9334
call fcn.00489090
add esp, 0x34
push 0x8c9338
call fcn.00489090
jmp 0x407f5c
or dword [0x72e650], 1
push str.The_bartender_motions_you_over_
mov esi, 0x8ebf58
mov dword [esp + 0x24], ebp
call fcn.004f7660
mov esi, dword [sym.imp.MSVCR71.dll_rand]
add esp, 4
call esi
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x407403
push 0xffffffffffffffff
mov ecx, 0x73
mov eax, ebx
call fcn.0044c660
add esp, 4
cmp eax, ebp
jle 0x407403
lea edx, [eax + eax*2]
movsx eax, word [edx*4 + 0x85c8b4]
test eax, eax
mov dword [esp + 0x20], eax
mov ebp, 1
jne 0x4074d3
mov ebx, dword [esp + 0x2f4]
push ebx
call fcn.00406210
add esp, 4
test eax, eax
jne 0x407424
push ebx
call fcn.00406210
add esp, 4
test eax, eax
je 0x407457
call esi
and eax, 0x80000001
jns 0x407432
dec eax
or eax, 0xfffffffe
inc eax
je 0x40743e
mov eax, 0x1400
call fcn.00484110
mov edi, 0x86bb48
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x407444
mov ax, word [0x6fc888]
mov word [edi], ax
jmp 0x4074ce
cmp byte [edi + 0x862b74], 4
je 0x4074bc
cmp dword [edi + 0x862b80], 3
jg 0x4074bc
cmp dword [edi + 0x862b7c], 0x3c
jge 0x407479
push str.The_economy_here_stinks__Ill_bet_if_we_got_a_new_governor_from_a_nearby_settlement_things_would_really_pick_up._n
jmp 0x4074c1
call esi
cdq
mov ecx, 0x32
idiv ecx
mov eax, dword [edi + 0x862b7c]
add edx, 0x8c
cmp eax, edx
jle 0x40749a
push str.Theres_a_whole_lot_of_stinkin_rich_folks_in_this_town._A_pirate_attack_might_put_the_fear_of_God_in_em__n
jmp 0x4074c1
movzx edx, byte [edi + 0x862b75]
cmp edx, dword [0x863b74]
mov esi, 0x8ebf58
jge 0x4074b5
push str.This_town_needs_some_fresh_blood._I_understand_some_European_immigrants_have_arrived_at_the_nearest_Jesuit_Mission._n
jmp 0x4074c6
push str.This_town_is_bustin_at_the_seams._An_indian_attack_might_run_off_some_of_the_riff_raff._n
jmp 0x4074c6
push str.Wheres_your_parrot__he_asks._n
mov esi, 0x8ebf58
call fcn.004f7680
add esp, 4
mov ebp, 1
mov edi, dword [esp + 0x2f4]
push 0xffffffffffffffff
push 0x1e
call fcn.0044d130
mov ebx, eax
add esp, 8
test ebx, ebx
mov dword [esp + 0x10], ebx
jle 0x4074fb
shl eax, 5
cmp dword [eax + 0x85c974], edi
je 0x40750d
push 0xffffffffffffffff
push 0x28
call fcn.0044d130
mov ebx, eax
add esp, 8
mov dword [esp + 0x10], ebx
test ebx, ebx
jle 0x407ec9
mov eax, 0x1403
call fcn.00484110
shl ebx, 5
mov eax, dword [ebx + 0x85c97c]
cmp eax, 0xffffffff
mov dword [esp + 0x18], eax
je 0x407557
imul eax, eax, 0x45c
cmp word [eax + 0x8162f8], 0
jl 0x407557
movsx ecx, word [eax + 0x816338]
cmp ecx, edi
jne 0x407557
mov ecx, dword [eax + 0x816350]
test ch, 2
jne 0x407570
cmp dword [ebx + 0x85c970], 0x1e
jne 0x4076b9
cmp dword [ebx + 0x85c974], edi
jne 0x4076b9
mov eax, dword [ebx + 0x85c98c]
lea edx, [eax + eax*8]
mov eax, dword [edx*4 + 0x863b88]
xor ebp, ebp
sub esp, 0xc
cmp eax, 0x28
jl 0x40759e
lea eax, [eax + eax*2 - 0x78]
mov edx, esp
lea ecx, [eax*4 + 0x8cd178]
push str.The_bartender_motions_you_over__The__EVILNAME_is_hiding_in_the_back._If_you_wish__I_will_take_you_to_him._n
jmp 0x4075fb
cmp eax, 0x1e
jl 0x4075ea
lea ecx, [eax - 0x1e]
lea edx, [ecx + ecx*2]
lea eax, [edx*4 + 0x8cd19c]
mov esi, dword [eax]
mov edx, esp
mov dword [edx], esi
mov esi, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [edx + 4], esi
mov dword [edx + 8], eax
mov eax, dword [esp + 0x1c]
cdq
mov esi, 0x1a
idiv esi
mov esi, 0x8ebf58
add dl, 0x41
movsx edx, dl
push edx
push ecx
push str.The_bartender_motions_you_over__The__NPCADJECTIVE__CHAR.__NPCNAME_is_hiding_in_the_back._If_you_wish__I_will_take_you_to_him._n
call fcn.004f7660
add esp, 0x18
jmp 0x407618
lea eax, [eax + eax*2]
mov edx, esp
lea ecx, [eax*4 + 0x8cd100]
push str.The_bartender_motions_you_over__The__TOP10_is_hiding_in_the_back._If_you_wish__I_will_take_you_to_him._n
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov ecx, dword [ecx + 8]
mov dword [edx + 4], eax
mov esi, 0x8ebf58
mov dword [edx + 8], ecx
call fcn.004f7660
add esp, 0x10
push str._Yes__he_must_answer_to_me._n_No__the_time_is_not_right._n
mov esi, 0x8ebf58
call fcn.004f7680
mov eax, dword [ebx + 0x85c98c]
lea edx, [eax + eax*8]
mov ecx, dword [edx*4 + 0x863b88]
add esp, 4
push 4
add ecx, 0xc8
call fcn.0042f7a0
add esp, 4
push 0
push 0x30
call fcn.00487950
mov eax, dword [0x85c268]
mov ecx, dword [0x85c26c]
push 0
push 0
push 0xffffffffffffffff
cdq
push 0
push fcn.00484b30
push 0xffffffffffffffff
and edx, 0xf
add eax, edx
sar eax, 4
push 0
push 0x6f7896
push eax
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
call fcn.00430160
add esp, 0x30
test eax, eax
push 0x8c9334
je 0x409c5f
call fcn.00489090
add esp, 4
push 0x8c9338
call fcn.00489090
add esp, 4
mov edi, dword [esp + 0x18]
cmp edi, 0xffffffff
je 0x407ec1
imul edi, edi, 0x45c
cmp word [edi + 0x8162f8], 0
jl 0x407ec1
mov eax, dword [edi + 0x816350]
test ah, 2
jne 0x407ae0
movsx esi, word [edi + 0x816338]
mov eax, dword [esp + 0x2f4]
cmp esi, eax
jne 0x407917
mov edx, dword [edi + 0x816340]
mov ecx, dword [0x85c150]
sub ecx, edx
imul ecx, ecx, 0x1e
mov eax, 0x57619f1
imul ecx
mov ecx, dword [ebx + 0x85c98c]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, 2
lea ecx, [ecx + ecx*8]
mov ecx, dword [ecx*4 + 0x863b88]
push eax
movsx eax, word [edi + 0x816336]
sub esp, 0xc
cmp ecx, 0x28
jl 0x40777a
lea edx, [eax + eax*2]
lea eax, [edx*4 + 0x8ddd08]
mov esi, dword [eax]
mov edx, esp
mov dword [edx], esi
mov esi, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [edx + 4], esi
sub esp, 0xc
mov dword [edx + 8], eax
lea ecx, [ecx + ecx*2 - 0x78]
mov eax, esp
lea edx, [ecx*4 + 0x8cd178]
push str.The_bartender_motions_you_over__The_evil__EVILNAME_is_on_his_way_here__he_set_sail_from__CITYNAME__NUM_days_ago._n
jmp 0x407815
cmp ecx, 0x1e
jl 0x4077e5
lea eax, [eax + eax*2]
lea edx, [eax*4 + 0x8ddd08]
mov esi, dword [edx]
mov eax, esp
mov dword [eax], esi
mov esi, dword [edx + 4]
mov edx, dword [edx + 8]
mov dword [eax + 4], esi
mov dword [eax + 8], edx
add ecx, 0xffffffe2
lea eax, [ecx + ecx*2]
lea edx, [eax*4 + 0x8cd19c]
mov esi, dword [edx]
sub esp, 0xc
mov eax, esp
mov dword [eax], esi
mov esi, dword [edx + 4]
mov edx, dword [edx + 8]
mov dword [eax + 4], esi
mov dword [eax + 8], edx
mov eax, dword [esp + 0x2c]
cdq
mov esi, 0x1a
idiv esi
mov esi, 0x8ebf58
add dl, 0x41
movsx eax, dl
push eax
push ecx
push str.The_bartender_motions_you_over__The_evil__NPCADJECTIVE__CHAR.__NPCNAME_is_on_his_way_here__he_set_sail_from__CITYNAME__NUM_days_ago._n
call fcn.004f7660
add esp, 0x28
jmp 0x407832
lea edx, [eax + eax*2]
lea eax, [edx*4 + 0x8ddd08]
mov esi, dword [eax]
mov edx, esp
mov dword [edx], esi
mov esi, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [edx + 4], esi
sub esp, 0xc
mov dword [edx + 8], eax
lea ecx, [ecx + ecx*2]
mov eax, esp
lea edx, [ecx*4 + 0x8cd100]
push str.The_bartender_motions_you_over__The_evil__TOP10_is_on_his_way_here__he_set_sail_from__CITYNAME__NUM_days_ago._n
mov ecx, dword [edx]
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov edx, dword [edx + 8]
mov dword [eax + 4], ecx
mov esi, 0x8ebf58
mov dword [eax + 8], edx
call fcn.004f7660
add esp, 0x20
push str._I_see._Ill_note_that_in_my_log._n
mov esi, 0x8ebf58
call fcn.004f7680
add esp, 4
push 0
push 0x30
call fcn.00487950
mov eax, dword [ebx + 0x85c98c]
lea eax, [eax + eax*8]
mov ecx, dword [eax*4 + 0x863b88]
push 4
add ecx, 0xc8
call fcn.0042f7a0
mov eax, dword [0x85c268]
mov ecx, dword [0x85c26c]
add esp, 0xc
push 0
push 0
push 0xffffffffffffffff
push 0
cdq
push fcn.00484b30
push 0xffffffffffffffff
and edx, 0xf
add eax, edx
push 0
sar eax, 4
push 0x6f7896
push eax
mov eax, 0x66666667
imul ecx
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
push ecx
call fcn.00430160
push 0x8c9334
call fcn.00489090
add esp, 0x2c
push 0x8c9338
call fcn.00489090
mov eax, dword [esp + 0x14]
cdq
mov ecx, 0x1a
idiv ecx
mov esi, dword [ebx + 0x85c98c]
movsx ecx, word [edi + 0x816336]
add esp, 4
xor ebp, ebp
add edx, 0x41
push edx
lea edx, [esi + esi*8]
mov eax, dword [edx*4 + 0x863b88]
push eax
push ecx
push 0x44
call fcn.0043a8d0
add esp, 0x10
test esi, esi
jle 0x407acd
mov eax, esi
call fcn.00449490
push esi
call fcn.0044a670
jmp 0x407add
movsx edx, word [edi + 0x816336]
cmp edx, eax
jne 0x407ae0
mov eax, dword [edi + 0x816340]
mov ecx, dword [0x85c150]
sub ecx, eax
imul ecx, ecx, 0x1e
mov eax, 0x57619f1
imul ecx
mov ecx, dword [ebx + 0x85c98c]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [esi + esi*2]
sub esp, 0xc
lea edx, [edx*4 + 0x8ddd08]
mov ebp, dword [edx]
mov esi, esp
add eax, 2
mov dword [esi], ebp
mov ebp, dword [edx + 4]
mov edx, dword [edx + 8]
lea ecx, [ecx + ecx*8]
mov ecx, dword [ecx*4 + 0x863b88]
push eax
sub esp, 0xc
cmp ecx, 0x28
mov dword [esi + 4], ebp
mov dword [esi + 8], edx
jl 0x407997
lea eax, [ecx + ecx*2 - 0x78]
mov edx, esp
lea ecx, [eax*4 + 0x8cd178]
push str.The_bartender_motions_you_over__The_evil__EVILNAME_was_seen_in_town__but_set_sail__NUM_days_ago_in_the_direction_of__CITYNAME._n
jmp 0x4079e1
cmp ecx, 0x1e
jl 0x4079d0
add ecx, 0xffffffe2
lea eax, [ecx + ecx*2]
lea edx, [eax*4 + 0x8cd19c]
mov esi, dword [edx]
mov eax, esp
mov dword [eax], esi
mov esi, dword [edx + 4]
mov edx, dword [edx + 8]
mov dword [eax + 4], esi
push ecx
push str.The_bartender_motions_you_over__The_evil__NPCADJECTIVE__NPCNAME_was_seen_in_town__but_set_sail__NUM_days_ago_in_the_direction_of__CITYNAME._n
mov esi, 0x8ebf58
mov dword [eax + 8], edx
call fcn.004f7660
add esp, 0x24
jmp 0x4079fe
lea eax, [ecx + ecx*2]
mov edx, esp
lea ecx, [eax*4 + 0x8cd100]
push str.The_bartender_motions_you_over__The_evil__TOP10_was_seen_in_town__but_set_sail__NUM_days_ago_in_the_direction_of__CITYNAME._n
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov ecx, dword [ecx + 8]
mov dword [edx + 4], eax
mov esi, 0x8ebf58
mov dword [edx + 8], ecx
call fcn.004f7660
add esp, 0x20
push str._Hmmmm__Ill_note_that_in_my_log._n
mov esi, 0x8ebf58
call fcn.004f7680
add esp, 4
push 0
push 0x30
call fcn.00487950
mov eax, dword [ebx + 0x85c98c]
lea edx, [eax + eax*8]
mov ecx, dword [edx*4 + 0x863b88]
push 4
add ecx, 0xc8
call fcn.0042f7a0
mov eax, dword [0x85c268]
mov ecx, dword [0x85c26c]
add esp, 0xc
push 0
push 0
push 0xffffffffffffffff
cdq
push 0
push fcn.00484b30
push 0xffffffffffffffff
and edx, 0xf
add eax, edx
sar eax, 4
push 0
push 0x6f7896
push eax
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
call fcn.00430160
push 0x8c9334
call fcn.00489090
add esp, 0x2c
push 0x8c9338
call fcn.00489090
mov esi, dword [ebx + 0x85c98c]
movsx eax, word [edi + 0x816338]
add esp, 4
lea ecx, [esi + esi*8]
mov edx, dword [ecx*4 + 0x863b88]
xor ebp, ebp
push ebp
push edx
push eax
push 0x44
call fcn.0043a8d0
add esp, 0x10
test esi, esi
jle 0x407acd
mov eax, esi
call fcn.00449490
push esi
call fcn.0044a670
jmp 0x407add
mov ecx, dword [esp + 0x18]
mov eax, 0x6f7896
push 1
call fcn.00444d70
add esp, 4
cmp word [edi + 0x8162f8], 0
jl 0x407ec1
mov eax, dword [esp + 0x2f4]
mov ecx, dword [esp + 0x18]
call fcn.00405d90
cmp eax, 0x73
jge 0x407ec1
mov ecx, dword [0x85c100]
imul ecx, ecx, 0x1c
cmp byte [ecx + 0x864cf4], 0x44
je 0x407ec1
mov eax, dword [edi + 0x816350]
test ah, 2
mov eax, dword [ebx + 0x85c98c]
jne 0x407c78
movsx ecx, word [edi + 0x816338]
lea edx, [eax + eax*8]
mov eax, dword [edx*4 + 0x863b88]
sub esp, 0xc
cmp eax, 0x28
jl 0x407bc4
lea ecx, [ecx + ecx*2]
lea edx, [ecx*4 + 0x8ddd08]
mov esi, dword [edx]
mov ecx, esp
mov dword [ecx], esi
mov esi, dword [edx + 4]
mov edx, dword [edx + 8]
mov dword [ecx + 4], esi
mov dword [ecx + 8], edx
movsx ecx, word [edi + 0x816336]
lea ecx, [ecx + ecx*2]
lea edx, [ecx*4 + 0x8ddd08]
mov esi, dword [edx]
sub esp, 0xc
mov ecx, esp
mov dword [ecx], esi
mov esi, dword [edx + 4]
mov edx, dword [edx + 8]
mov dword [ecx + 4], esi
mov dword [ecx + 8], edx
lea eax, [eax + eax*2 - 0x78]
lea ecx, [eax*4 + 0x8cd178]
mov eax, dword [ecx]
sub esp, 0xc
mov edx, esp
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov ecx, dword [ecx + 8]
mov dword [edx + 4], eax
push str.The_bartender_scratches_his_head__The_evil__EVILNAME__Last_I_heard_he_had_left__CITYNAME_and_was_headed_in_the_direction_of__CITYNAME._n
mov esi, 0x8ebf58
mov dword [edx + 8], ecx
call fcn.004f7660
add esp, 0x28
jmp 0x407d5a
lea edx, [ecx + ecx*2]
lea ecx, [edx*4 + 0x8ddd08]
mov esi, dword [ecx]
mov edx, esp
mov dword [edx], esi
mov esi, dword [ecx + 4]
mov ecx, dword [ecx + 8]
mov dword [edx + 4], esi
mov dword [edx + 8], ecx
movsx ecx, word [edi + 0x816336]
lea edx, [ecx + ecx*2]
lea ecx, [edx*4 + 0x8ddd08]
mov esi, dword [ecx]
sub esp, 0xc
mov edx, esp
mov dword [edx], esi
mov esi, dword [ecx + 4]
mov ecx, dword [ecx + 8]
mov dword [edx + 4], esi
sub esp, 0xc
cmp eax, 0x1e
mov dword [edx + 8], ecx
jl 0x407c45
add eax, 0xffffffe2
lea edx, [eax + eax*2]
lea ecx, [edx*4 + 0x8cd19c]
mov esi, dword [ecx]
mov edx, esp
mov dword [edx], esi
mov esi, dword [ecx + 4]
mov ecx, dword [ecx + 8]
mov dword [edx + 4], esi
push eax
push str.The_bartender_scratches_his_head__The_evil__NPCADJECTIVE__NPCNAME__Last_I_heard_he_had_left__CITYNAME_and_was_headed_in_the_direction_of__CITYNAME._n
mov esi, 0x8ebf58
mov dword [edx + 8], ecx
call fcn.004f7660
add esp, 0x2c
jmp 0x407d5a
lea edx, [eax + eax*2]
lea eax, [edx*4 + 0x8cd100]
mov edx, dword [eax]
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [ecx + 4], edx
push str.The_bartender_scratches_his_head__The_evil__TOP10__Last_I_heard_he_had_left__CITYNAME_and_was_headed_in_the_direction_of__CITYNAME._n
mov esi, 0x8ebf58
mov dword [ecx + 8], eax
call fcn.004f7660
add esp, 0x28
jmp 0x407d5a
lea ecx, [eax + eax*8]
mov eax, dword [ecx*4 + 0x863b88]
movsx ecx, word [edi + 0x816338]
sub esp, 0xc
cmp eax, 0x28
jl 0x407cd4
lea edx, [ecx + ecx*2]
lea ecx, [edx*4 + 0x8ddd08]
mov esi, dword [ecx]
mov edx, esp
mov dword [edx], esi
mov esi, dword [ecx + 4]
mov ecx, dword [ecx + 8]
mov dword [edx + 4], esi
mov dword [edx + 8], ecx
lea edx, [eax + eax*2 - 0x78]
lea eax, [edx*4 + 0x8cd178]
mov edx, dword [eax]
sub esp, 0xc
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [ecx + 4], edx
mov dword [ecx + 8], eax
push str.The_bartender_scratches_his_head__The_evil__EVILNAME__Last_I_heard_he_was_holed_up_in__CITYNAME._n
jmp 0x407d4d
lea ecx, [ecx + ecx*2]
lea edx, [ecx*4 + 0x8ddd08]
mov esi, dword [edx]
mov ecx, esp
mov dword [ecx], esi
mov esi, dword [edx + 4]
mov edx, dword [edx + 8]
sub esp, 0xc
cmp eax, 0x1e
mov dword [ecx + 4], esi
mov dword [ecx + 8], edx
jl 0x407d2c
add eax, 0xffffffe2
lea ecx, [eax + eax*2]
lea edx, [ecx*4 + 0x8cd19c]
mov esi, dword [edx]
mov ecx, esp
mov dword [ecx], esi
mov esi, dword [edx + 4]
mov edx, dword [edx + 8]
mov dword [ecx + 4], esi
push eax
push str.The_bartender_scratches_his_head__The_evil__NPCADJECTIVE__NPCNAME__Last_I_heard_he_was_holed_up_in__CITYNAME._n
mov esi, 0x8ebf58
mov dword [ecx + 8], edx
call fcn.004f7660
add esp, 0x20
jmp 0x407d5a
lea eax, [eax + eax*2]
lea ecx, [eax*4 + 0x8cd100]
mov eax, dword [ecx]
mov edx, esp
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov ecx, dword [ecx + 8]
mov dword [edx + 4], eax
mov dword [edx + 8], ecx
push str.The_bartender_scratches_his_head__The_evil__TOP10__Last_I_heard_he_was_holed_up_in__CITYNAME._n
mov esi, 0x8ebf58
call fcn.004f7660
add esp, 0x1c
push str._Well__Ill_note_that_in_my_log._n
mov esi, 0x8ebf58
call fcn.004f7680
add esp, 4
push 0
push 0x30
call fcn.00487950
mov eax, dword [ebx + 0x85c98c]
lea edx, [eax + eax*8]
mov ecx, dword [edx*4 + 0x863b88]
push 4
add ecx, 0xc8
call fcn.0042f7a0
mov eax, dword [0x85c268]
mov ecx, dword [0x85c26c]
add esp, 0xc
push 0
push 0
push 0xffffffffffffffff
cdq
push 0
push fcn.00484b30
push 0xffffffffffffffff
and edx, 0xf
add eax, edx
sar eax, 4
push 0
push 0x6f7896
push eax
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
call fcn.00430160
push 0x8c9334
call fcn.00489090
add esp, 0x2c
push 0x8c9338
call fcn.00489090
mov ebx, dword [ebx + 0x85c98c]
movsx eax, word [edi + 0x816338]
add esp, 4
lea ecx, [ebx + ebx*8]
mov edx, dword [ecx*4 + 0x863b88]
push 0
push edx
push eax
push 0x44
call fcn.0043a8d0
add esp, 0x10
test ebx, ebx
jle 0x407eac
mov eax, ebx
call fcn.00449490
push ebx
call fcn.0044a670
add esp, 4
mov ebp, 0x8cccd0
mov eax, dword [esp + 0x28]
xor edi, edi
cmp eax, 0x200
mov dword [esp + 0x2c], edi
jne 0x4093fd
mov esi, dword [0x72e65c]
cmp esi, 3
jl 0x409c50
mov ecx, dword [esp + 0x2f4]
shl ecx, 5
mov ecx, dword [ecx + 0x862b7c]
mov eax, 0x51eb851f
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, edi
je 0x4090d4
dec eax
je 0x4090c0
dec eax
je 0x4090a5
mov edx, dword [0x86bab0]
push edx
push esi
push str.Despite_the_booming_economy__an_adventurous_band_of__NUM_men_offers_to_join_your_current_crew_of__NUM._n_Welcome_aboard_mates__n_Sorry_lads__were_full._n
mov esi, 0x8ebf58
call fcn.004f7660
add esp, 0xc
jmp 0x409107
mov ecx, dword [esp + 0x18]
push 1
mov eax, 0x6f7896
call fcn.00444d70
jmp 0x407e2a
test ebp, ebp
je 0x407e2d
push 0
push 0x30
mov dword [0x8ccc44], 0xbf000000
call fcn.00487950
mov eax, dword [0x85c268]
mov ecx, dword [0x85c26c]
push 0
push 0
push 0xffffffffffffffff
push 0
cdq
push fcn.00484b30
push 0xffffffffffffffff
and edx, 0xf
add eax, edx
push 0
sar eax, 4
push 0x6f7896
push eax
mov eax, 0x2aaaaaab
imul ecx
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
push ecx
call fcn.00430160
push 0x8c9334
call fcn.00489090
add esp, 0x34
push 0x8c9338
call fcn.00489090
mov eax, dword [esp + 0x24]
add esp, 4
test eax, eax
jle 0x407f5f
mov dword [0x8ccc44], 0
mov esi, eax
call fcn.00413080
push 3
mov eax, 0x6f7896
mov ecx, esi
call fcn.00444d70
add esp, 4
mov eax, dword [0x8c09f8]
cmp eax, 0x1403
mov dword [0x8cc900], 1
jne 0x407f8b
mov eax, 0x1404
call fcn.00484110
mov dword [0x8cc900], 2
jmp 0x407fa1
cmp eax, 0x1400
mov eax, 0x1408
je 0x407f9c
mov eax, 0x13fe
call fcn.00484110
mov eax, dword [0x85c268]
mov ecx, dword [0x85c26c]
push 0
push 0
push 0xffffffffffffffff
cdq
push 0
push fcn.00484b30
push 0x270f
and edx, 0xf
add eax, edx
sar eax, 4
push 0
push 0x6f7896
push eax
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
mov byte [0x86bb48], 0
call fcn.00430160
push 0x8c9334
call fcn.00489090
add esp, 0x2c
push 0x8c9338
call fcn.00489090
mov dword [0x8cc900], 0
mov dword [esp + 0x18], 0x1393
jmp 0x407e2a
cmp eax, 0x202
jne 0x407e2d
test byte [0x72e650], 2
jne 0x407e2d
mov eax, 2
mov byte [esp + 0x1f], 0
mov dword [esp + 0x10], 0xffffffff
call fcn.00484050
mov edi, ebx
shl edi, 5
mov eax, dword [edi + 0x862b70]
test ah, 0x20
mov dword [esp + 0x14], edi
je 0x40839e
mov eax, 0x1586
call fcn.00484110
push str.The_barmaid_is_annoyed_by_the_pushy_captain_of_the_guard._Buzz_off_you_young_whippersnapper_or_Ill_run_you_through__he_threatens._You_reply..._n
mov esi, 0x8ebf58
call fcn.004f7660
add esp, 4
push str._Pardon_my_insolence__sir._n_Ill_teach_you_some_manners__knave__n
call fcn.004f7680
add esp, 4
push ebp
push 0x30
call fcn.00487950
mov eax, dword [0x85c268]
mov ecx, dword [0x85c26c]
push ebp
push ebp
push 0xffffffffffffffff
push ebp
cdq
push fcn.00484b30
push 0xffffffffffffffff
and edx, 0xf
add eax, edx
push ebp
sar eax, 4
push 0x6f7896
push eax
mov eax, 0x2aaaaaab
imul ecx
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
push ecx
call fcn.00430160
add esp, 0x30
cmp eax, 1
push 0x8c9334
jne 0x408377
call fcn.00489090
add esp, 4
push 0x8c9338
call fcn.00489090
add esp, 4
mov eax, 0x158c
call fcn.00484110
mov eax, dword [0x85c268]
mov ecx, dword [0x85c26c]
push 0
push 0
push 0xffffffffffffffff
cdq
push 0
push fcn.00484b30
push 0x270f
and edx, 0xf
add eax, edx
sar eax, 4
push 0
push 0x6f7896
push eax
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
mov dword [0x8cc900], 1
mov byte [0x86bb48], 0
call fcn.00430160
push 0x8c9334
call fcn.00489090
add esp, 0x2c
push 0x8c9338
call fcn.00489090
add esp, 4
mov dword [0x8cc900], 0
call fcn.004ae690
mov eax, dword [0x728a84]
mov edx, dword [0x72ed78]
dec eax
mov dword [0x728a84], eax
mov ecx, dword [eax*4 + 0x7288f4]
push 0
mov dword [0x7283bc], ecx
push 1
mov dword [edx + 0x5c], 0xa
call fcn.004a8210
call fcn.004ae970
push str.Annoying_Captain
call fcn.004f7660
movsx ecx, byte [edi + 0x862b74]
mov ebx, dword [esp + 0x300]
add esp, 0xc
lea eax, [esp + 0x3c]
push eax
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push ecx
push 2
push 0xffffffffffffffff
push 4
mov ebp, 0x8cccd0
lea edx, [esp + 0x90]
push 0xffffffffffffffff
push edx
mov ecx, 5
mov dword [esp + 0x64], ebp
mov dword [esp + 0x68], ebp
mov dword [esp + 0x6c], ebp
mov dword [esp + 0x7c], ebx
mov byte [esp + 0x80], 0
call fcn.0041b1d0
mov ecx, dword [eax + 4]
mov edx, dword [eax + 8]
mov esi, dword [eax]
add esp, 0x28
mov dword [esp + 0x68], ecx
mov dword [esp + 0x6c], edx
mov eax, dword [0x8c0bcc]
test eax, eax
jne 0x40822b
call fcn.004ae970
jmp 0x408238
push str.Camera_All
call fcn.004aea30
add esp, 4
mov al, byte [0x85c164]
test al, al
mov eax, dword [0x7283bc]
jns 0x408268
mov ecx, dword [0x728a84]
mov dword [ecx*4 + 0x7288f4], eax
mov ecx, dword [0x728a84]
inc ecx
and eax, 0xfffffffa
mov dword [0x728a84], ecx
or eax, 0x20
jmp 0x40827e
mov edx, dword [0x728a84]
mov dword [edx*4 + 0x7288f4], eax
inc dword [0x728a84]
and eax, 0xfffffffa
mov ecx, dword [esp + 0x38]
push 0
mov dword [0x7283bc], eax
mov eax, dword [esp + 0x34]
push 1
push eax
push ecx
call fcn.004a7fb0
add esp, 0x10
cmp esi, 1
jne 0x40a4e9
and dword [edi + 0x862b70], 0xffffdfff
mov eax, 0x146e
call fcn.00484110
push str.My__but_youre_a_bold_one._That_quick_sword_of_yours_will_come_in_handy_around_these_parts._Looks_like_more_men_are_looking_to_join_your_crew._n
mov esi, 0x8ebf58
call fcn.004f7660
add esp, 4
push 0
push 0x30
call fcn.00487950
mov eax, dword [0x85c268]
mov ecx, dword [0x85c26c]
push 0
push 0
push 0xffffffffffffffff
cdq
push 0
push fcn.00484b30
push 0xffffffffffffffff
and edx, 0xf
add eax, edx
sar eax, 4
push 0
push 0x6f7896
push eax
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
call fcn.00430160
push 0x8c9334
call fcn.00489090
add esp, 0x34
push 0x8c9338
call fcn.00489090
imul ebx, ebx, 0x94
mov edx, dword [0x72e65c]
add word [ebx + 0x85dfc2], 0xa
lea eax, [ebx + 0x85dfc2]
add edx, 0xa
add esp, 4
mov eax, 0x145a
mov dword [0x72e65c], edx
mov dword [0x72e64c], 0
call fcn.00484110
lea esi, [esp + 0x3c]
mov dword [esp + 0x14], 0x139d
call fcn.0040a610
jmp 0x408f51
call fcn.00489090
add esp, 4
push 0x8c9338
call fcn.00489090
add esp, 4
mov dword [esp + 0x14], 0x1388
mov ebp, 0x8cccd0
jmp 0x408f51
mov eax, 0x145a
call fcn.00484110
mov dword [esp + 0x18], ebp
call dword [sym.imp.MSVCR71.dll_rand]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x4083e0
mov edx, dword [edi + 0x862b68]
mov ebx, dword [edi + 0x862b6c]
push edx
call fcn.00449500
add esp, 4
test eax, eax
mov dword [esp + 0x18], eax
jne 0x408d34
nop
mov byte [0x86bb48], 0
call dword [sym.imp.MSVCR71.dll_rand]
and eax, reloc.OLEAUT32.dll_VariantInit
jns 0x4083f9
dec eax
or eax, 0xfffffff8
inc eax
cmp eax, 7
ja case.default.0x408402
jmp dword [eax*4 + 0x40a5cc]
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 0x862b70]
test ch, 2
je case.default.0x408402
mov edx, dword [0x728638]
mov edi, eax
movsx ecx, byte [edi + 0x862b74]
mov al, byte [ecx*2 + 0x86ba88]
cmp al, 1
mov esi, 0x8ebf58
jne 0x40846d
mov eax, dword [0x72863c]
push ecx
sub esp, 0xc
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [0x728640]
mov dword [ecx + 4], eax
push str.The_barmaid_eyes_you_warmly__Congratulations__PCNAME__I_hear_youve_been_given_an__NATIONALITY_Letter_of_Marque.
mov dword [ecx + 8], edx
call fcn.004f7660
add esp, 0x14
push str.I_expect_youll_be_dripping_in_gold_the_next_time_you_visit_this_tavern._n
call fcn.004f7680
jmp 0x4084c4
movzx eax, al
push eax
mov eax, dword [0x72863c]
sub esp, 0xc
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [0x728640]
mov dword [ecx + 4], eax
push str.The_barmaid_eyes_you_warmly__Congratulations__PCNAME__I_hear_youve_been_promoted_to__RANK._n
mov dword [ecx + 8], edx
call fcn.004f7660
add esp, 0x14
push str.Well__shucks__you_reply_modestly._n
mov esi, 0x8ebf58
call fcn.004f7680
movsx eax, byte [edi + 0x862b74]
movzx ecx, byte [eax*2 + 0x86ba88]
add esp, 4
push 4
add ecx, 0x1f4
call fcn.0042f7a0
mov eax, 0x146e
add esp, 4
call fcn.00484110
and dword [edi + 0x862b70], 0xfffffdff
jmp case.default.0x408402
mov ebp, 0x14
mov esi, 8
mov edi, 0x8185da
nop
cmp word [edi - 2], 0xffff
je 0x408553
cmp word [edi], 4
jne 0x408553
mov ecx, dword [esp + 0x14]
movsx dx, byte [ecx + 0x862b74]
cmp word [edi + 2], dx
je 0x408553
mov ecx, esi
and ecx, reloc.OLEAUT32.dll_VariantInit
jns 0x40851e
dec ecx
or ecx, 0xfffffff8
inc ecx
mov eax, 1
shl eax, cl
mov ecx, dword [0x86bb34]
test ecx, eax
jne 0x408553
xor ecx, ecx
mov eax, esi
call fcn.00405e20
mov ebx, eax
cmp ebx, ebp
jge 0x408553
movsx eax, word [edi + 0x3e]
mov ecx, esi
call fcn.00405d90
cmp ebx, eax
jg 0x408553
mov ebp, ebx
mov dword [esp + 0x10], esi
add edi, 0x45c
inc esi
cmp edi, 0x85befa
jl 0x4084f0
mov eax, dword [esp + 0x10]
cmp eax, 0xffffffff
je case.default.0x408402
or dword [0x72e650], 2
mov edi, eax
call fcn.00413080
mov ebx, edi
and ebx, reloc.OLEAUT32.dll_VariantInit
jns 0x40858c
dec ebx
or ebx, 0xfffffff8
inc ebx
mov eax, dword [0x7287c8]
mov ecx, dword [0x7287cc]
sub esp, 0xc
mov edx, esp
mov dword [edx], eax
mov eax, dword [0x7287d0]
mov dword [edx + 4], ecx
push ebx
push str.Its_rumored_that_theres_a_skilled__SPEC_on_board_the__SHIPNAME.
mov esi, 0x8ebf58
mov dword [edx + 8], eax
call fcn.004f7660
imul edi, edi, 0x45c
movsx eax, word [edi + 0x816338]
lea ecx, [eax + eax*2]
lea edx, [ecx*4 + 0x8ddd08]
mov ecx, dword [edx]
add esp, 8
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov edx, dword [edx + 8]
mov dword [eax + 4], ecx
movsx ecx, word [edi + 0x8162fc]
mov dword [eax + 8], edx
movsx eax, word [edi + 0x8162f8]
push eax
push ecx
push str._I_believe_shes__ANATIONALITY__SHIPTYPE_bound_for__CITYNAME__the_barmaid_whispers._n
call fcn.004f7680
mov edx, dword [edi + 0x816350]
movsx esi, word [edi + 0x8162fc]
or edx, 0xa8000
mov dword [edi + 0x816350], edx
movsx edx, word [edi + 0x816338]
push ebx
push edx
push esi
push 0x42
mov dword [edi + 0x816310], 0
call fcn.0043a8d0
push esi
lea ecx, [ebx + 0x292]
call fcn.0042f7a0
add esp, 0x2c
jmp case.default.0x408402
xor ebp, ebp
mov edi, 8
mov esi, 0x8185dc
cmp word [esi - 4], 0xffff
je 0x4086b0
mov ax, word [esi]
cmp ax, 4
je 0x4086b0
mov ecx, dword [esp + 0x14]
movsx dx, byte [ecx + 0x862b74]
cmp ax, dx
je 0x4086b0
mov eax, dword [esi + 0x54]
test ah, 2
jne 0x4086b0
cmp word [esi - 2], 6
je 0x4086b0
xor ecx, ecx
mov eax, edi
call fcn.00405e20
mov ebx, eax
cmp ebx, 0x14
jge 0x4086b0
movsx eax, word [esi + 0x3c]
mov ecx, edi
call fcn.00405d90
cmp ebx, eax
jg 0x4086b0
movsx eax, word [esi + 0x2c]
cmp eax, ebp
jle 0x4086b0
mov ebp, eax
mov dword [esp + 0x10], edi
add esi, 0x45c
inc edi
cmp esi, 0x85befc
jl 0x408653
mov eax, dword [esp + 0x10]
cmp eax, 0xffffffff
je case.default.0x408402
or dword [0x72e650], 2
mov edi, eax
call fcn.00413080
imul edi, edi, 0x45c
mov ax, word [edi + 0x816328]
cmp ax, 0x3e8
movsx eax, ax
jg 0x4086f5
mov eax, 0x3e8
movsx ecx, ax
mov word [edi + 0x816328], ax
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x64
push eax
movsx eax, word [edi + 0x816338]
lea ecx, [eax + eax*2]
lea edx, [ecx*4 + 0x8ddd08]
mov ecx, dword [edx]
sub esp, 0xc
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov edx, dword [edx + 8]
mov dword [eax + 4], ecx
mov ecx, dword [0x7287c8]
mov dword [eax + 8], edx
mov edx, dword [0x7287cc]
sub esp, 0xc
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [0x7287d0]
mov dword [eax + 4], edx
push str.Its_rumored_that_the__SHIPNAME_bound_for__CITYNAME_is_carrying_over__NUM_in_gold_
mov esi, 0x8ebf58
mov dword [eax + 8], ecx
call fcn.004f7660
movsx edx, word [edi + 0x8162f8]
movsx eax, word [edi + 0x8162fc]
push edx
push eax
push str._I_believe_shes__ANATIONALITY__SHIPTYPE__the_barmaid_whispers._n
call fcn.004f7680
movsx ecx, word [edi + 0x8162fc]
movsx eax, word [edi + 0x8162f8]
add esp, 0x2c
push ecx
cdq
mov ecx, 9
idiv ecx
or dword [edi + 0x816350], 0x28000
mov dword [edi + 0x816310], 0
mov ecx, edx
add ecx, 0x64
call fcn.0042f7a0
add esp, 4
mov eax, 0x1464
call fcn.00484110
jmp case.default.0x408402
mov ax, word [0x864008]
cmp word [0x86bb18], ax
jle case.default.0x408402
mov ecx, dword [0x728638]
movsx edx, ax
push edx
mov edx, dword [0x72863c]
sub esp, 0xc
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [0x728640]
mov dword [eax + 4], edx
push str.The_barmaid_notices_you_immediately__I_tremble_with_apprehension__PCNAME._Its_said_youre_now_the__ORDINAL_most_notorious_pirate_on_the_entire_Spanish_Main._n
mov esi, 0x8ebf58
mov dword [eax + 8], ecx
call fcn.004f7660
add esp, 0x14
push str.Fear_not__madam__you_reply_graciously._n
call fcn.004f7680
mov dx, word [0x864008]
add esp, 4
push 4
mov ecx, 0x194
mov word [0x86bb18], dx
call fcn.0042f7a0
add esp, 4
mov eax, 0x146e
call fcn.00484110
jmp case.default.0x408402
mov esi, dword [0x724a08]
cmp esi, 0xffffffff
je case.default.0x408402
mov eax, dword [0x85c100]
imul eax, eax, 0x1c
cmp byte [eax + 0x864cf4], 0x40
je case.default.0x408402
mov edx, dword [esp + 0x14]
mov ebx, dword [edx + 0x862b6c]
mov edi, dword [edx + 0x862b68]
mov ecx, esi
shl ecx, 5
mov eax, dword [ecx + 0x862b6c]
mov ecx, dword [ecx + 0x862b68]
sub eax, ebx
sub ecx, edi
jns 0x40889a
neg ecx
test eax, eax
jge 0x4088a0
neg eax
cmp ecx, eax
jle 0x4088a9
lea eax, [eax + ecx*2]
jmp 0x4088ac
lea eax, [ecx + eax*2]
cdq
sub eax, edx
sar eax, 1
cmp eax, 0x73
jge case.default.0x408402
lea ecx, [esi + esi*2]
lea edx, [ecx*4 + 0x8ddd08]
mov ecx, dword [edx]
sub esp, 0xc
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov edx, dword [edx + 8]
mov dword [eax + 4], ecx
push str.Its_rumored_that_the_Spanish_Treasure_Fleet_is_headed_for__CITYNAME_with_a_fortune_in_gold_bullion__n_Indeed__Ill_note_that_in_my_log._n
mov esi, 0x8ebf58
mov dword [eax + 8], edx
call fcn.004f7660
mov eax, dword [0x724a08]
push 0
push 0
push eax
push 0x40
call fcn.0043a8d0
add esp, 0x20
mov eax, 0x818630
mov ecx, dword [eax]
test ch, 0x10
je 0x408910
or ecx, 0x20000
mov dword [eax], ecx
add eax, 0x45c
cmp eax, 0x85bf50
jl 0x408901
push 0
mov ecx, 0x7e
call fcn.0042f7a0
or dword [0x72e650], 2
add esp, 4
mov eax, 0x1464
call fcn.00484110
jmp case.default.0x408402
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 0x862b6c]
mov edx, dword [eax + 0x862b68]
xor ebp, ebp
mov ebx, 0x5c
mov edi, 1
mov dword [esp + 0x20], ecx
mov dword [esp + 0x2c], edx
mov esi, 0x86401e
lea ebx, [ebx]
movsx eax, word [esi]
mov ecx, dword [esp + 0x20]
shl eax, 5
sub ecx, dword [eax + 0x862b6c]
mov edx, dword [esp + 0x2c]
sub edx, dword [eax + 0x862b68]
jns 0x40898e
neg edx
test ecx, ecx
jge 0x408994
neg ecx
cmp edx, ecx
jle 0x40899d
lea ecx, [ecx + edx*2]
jmp 0x4089a0
lea ecx, [edx + ecx*2]
mov eax, ecx
mov ecx, dword [esi - 0xa]
cdq
sub eax, edx
sar eax, 1
test ecx, ecx
je 0x4089ba
cmp eax, ebx
jge 0x4089ba
test eax, eax
je 0x4089ba
mov ebx, eax
mov ebp, edi
add esi, 0x1c
inc edi
cmp esi, 0x86411a
jl 0x408970
test ebp, ebp
je case.default.0x408402
mov edi, ebp
imul edi, edi, 0x1c
movsx esi, word [edi + 0x864002]
push 0xc0008000
mov eax, esi
shl eax, 5
mov ecx, dword [eax + 0x862b6c]
mov edx, dword [eax + 0x862b68]
push 0x270f
push 0xffffffffffffffff
push ecx
push edx
call fcn.0045fc10
add esp, 0x14
cmp word [edi + 0x864006], 0
mov dword [esp + 0x18], eax
jne 0x408acc
movsx eax, word [edi + 0x864004]
push eax
mov eax, esi
call fcn.00415290
mov ebx, dword [sym.imp.MSVCR71.dll_rand]
movsx esi, ax
imul esi, esi, 0x45c
add esp, 4
mov word [edi + 0x864006], ax
mov word [esi + 0x816326], bp
call ebx
cdq
mov ecx, 0x64
idiv ecx
mov ecx, dword [edi + 0x863ff8]
mov word [esi + 0x816330], bp
mov eax, edx
mov dword [esp + 0x2c], eax
mov eax, 0x66666667
imul ecx
mov ecx, dword [esp + 0x2c]
sar edx, 2
add ecx, edx
mov eax, edx
shr eax, 0x1f
add eax, ecx
mov ecx, dword [esi + 0x816350]
or ecx, 0x4400
test ebp, ebp
mov word [esi + 0x816328], ax
mov dword [esi + 0x816350], ecx
jl 0x408acc
lea ecx, [ebp + 1]
mov dword [esp + 0x20], ecx
lea ebx, [ebx]
call ebx
mov ecx, eax
and ecx, reloc.OLEAUT32.dll_VariantInit
jns 0x408ab1
dec ecx
or ecx, 0xfffffff8
inc ecx
mov eax, dword [esp + 0x20]
mov edx, 1
shl edx, cl
not edx
and word [esi + 0x816324], dx
dec eax
mov dword [esp + 0x20], eax
jne 0x408aa0
mov eax, dword [edi + 0x863ffc]
test al, 2
movsx ebx, word [edi + 0x864006]
jne 0x408c4e
push ebp
push 0xffffffffffffffff
or eax, 2
push ebx
push 6
mov dword [edi + 0x863ffc], eax
call fcn.004493f0
movsx esi, ax
mov dword [esp + 0x30], esi
mov word [edi + 0x864000], ax
mov ax, word [edi + 0x864002]
lea esi, [esi + esi*8]
shl esi, 2
add esp, 0x10
mov word [esi + 0x863b7c], ax
call dword [sym.imp.MSVCR71.dll_rand]
cdq
mov ecx, 6
idiv ecx
cmp edx, 5
ja case.default.0x408b2d
jmp dword [edx*4 + 0x40a5ec]
mov eax, 8
jmp 0x408b61
mov eax, 1
jmp 0x408b61
mov eax, 7
jmp 0x408b61
mov eax, 2
jmp 0x408b61
mov eax, 4
jmp 0x408b61
mov eax, 6
jmp 0x408b61
or eax, 0xffffffff
or byte [esi + 0x863b80], 8
mov word [esi + 0x863b82], ax
mov eax, dword [esp + 0x20]
call fcn.00449490
mov eax, ebx
call fcn.00413080
mov eax, dword [esp + 0x18]
lea edx, [eax + eax*2]
lea eax, [edx*4 + 0x8ddd08]
mov edx, dword [eax]
sub esp, 0xc
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [ecx + 4], edx
mov dword [ecx + 8], eax
movsx eax, word [edi + 0x864002]
lea ecx, [eax + eax*2]
lea edx, [ecx*4 + 0x8ddd08]
mov ecx, dword [edx]
sub esp, 0xc
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov edx, dword [edx + 8]
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
movsx eax, word [edi + 0x864008]
push eax
lea ecx, [ebp + ebp*2]
lea edx, [ecx*4 + 0x8cd100]
mov ecx, dword [edx]
sub esp, 0xc
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov edx, dword [edx + 8]
mov dword [eax + 4], ecx
push str._TOP10___the__ORDINAL_most_notorious_pirate_in_the_Caribbean___sails_out_of_the_pirate_haven__CITYNAME_near_the_city_of__CITYNAME.
mov esi, 0x8ebf58
mov dword [eax + 8], edx
call fcn.004f7660
imul ebx, ebx, 0x45c
movsx ecx, word [ebx + 0x816328]
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x64
add esp, 0x2c
push eax
push str.Hes_known_to_carry_over__NUM_gold_doubloons__n
call fcn.004f7680
movsx eax, word [edi + 0x864002]
mov ecx, dword [esp + 0x28]
shl eax, 5
lea eax, [eax + 0x862b70]
mov dword [esp + 0x20], ecx
or dword [eax], 0x101
jmp 0x408c67
movsx edx, word [edi + 0x864008]
movsx eax, word [edi + 0x864000]
push edx
push eax
call fcn.00449730
mov dword [esp + 0x20], eax
or dword [0x72e650], 2
mov eax, dword [esp + 0x20]
add esp, 8
test eax, eax
mov dword [esp + 0x10], 0xffffffff
je case.default.0x408402
push 4
lea ecx, [ebp + 0x27c]
call fcn.0042f7a0
jmp 0x408d17
call dword [sym.imp.MSVCR71.dll_rand]
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne case.default.0x408402
xor eax, eax
xor ecx, ecx
movsx edx, word [ecx*2 + 0x86ba78]
cmp edx, eax
jge 0x408cc3
mov eax, edx
mov dword [esp + 0x34], ecx
inc ecx
cmp ecx, 4
jl 0x408cb1
test eax, eax
je case.default.0x408402
mov edi, dword [esp + 0x34]
neg eax
push eax
push edi
push str.Its_rumored_the__NATIONALITY_have_put_a_price_on_your_head_of__NUM_000_gold_pieces__the_barmaid_whispers._n
mov esi, 0x8ebf58
call fcn.004f7660
add esp, 0xc
push 4
lea ecx, [edi + 0x190]
call fcn.0042f7a0
jmp 0x408d17
call dword [sym.imp.MSVCR71.dll_rand]
cdq
mov ecx, 5
idiv ecx
test edx, edx
jne case.default.0x408402
push str.Its_pretty_quiet_around_here__sweetie._n
mov esi, 0x8ebf58
call fcn.004f7660
mov eax, dword [0x72e650]
add esp, 4
or eax, 2
mov dword [0x72e650], eax
mov al, byte [0x86bb48]
test al, al
je 0x4083e0
push 0
push 0x34
call fcn.00487950
mov al, byte [0x86bb48]
add esp, 8
test al, al
je 0x408e6a
mov eax, dword [0x85c268]
mov ecx, dword [0x85c26c]
push 0
push 0
push 0xffffffffffffffff
cdq
push 0
push fcn.00484b30
push 0xffffffffffffffff
and edx, 0xf
add eax, edx
sar eax, 4
push 0
push 0x6f7896
push eax
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
call fcn.00430160
mov edx, dword [0x8eed78]
add esp, 0x28
mov ecx, 0x8eed78
call dword [edx + 0x18]
test al, al
jne 0x408dbe
push 0
push str.The_audio_manager_has_not_been_properly_initialized_yet
mov eax, 1
call fcn.004887a0
add esp, 8
mov ebp, 0x8cccd0
jmp 0x408e02
sub esp, 0x64
mov ebp, 0x8cccd0
lea eax, [esp + 0x14c]
mov ebx, esp
mov dword [esp + 0x1ac], ebp
mov dword [esp + 0x14c], 0x1f
mov dword [esp + 0x184], 0x8c9334
call fcn.00498530
mov edi, 0x8e87b4
call fcn.004a1410
mov dword [esp + 0x148], ebp
mov eax, dword [0x8eed78]
mov ecx, 0x8eed78
call dword [eax + 0x18]
test al, al
jne 0x408e29
push 0
push str.The_audio_manager_has_not_been_properly_initialized_yet
mov eax, 1
call fcn.004887a0
add esp, 8
jmp 0x408e6f
sub esp, 0x64
lea eax, [esp + 0x1b4]
mov ebx, esp
mov dword [esp + 0x214], ebp
mov dword [esp + 0x1b4], 0x1f
mov dword [esp + 0x1ec], 0x8c9338
call fcn.00498530
mov edi, 0x8e87b4
call fcn.004a1410
mov dword [esp + 0x1b0], ebp
jmp 0x408e6f
mov ebp, 0x8cccd0
mov edi, dword [esp + 0x10]
xor ebx, ebx
cmp edi, ebx
jl 0x408f0d
mov eax, edi
call fcn.00413080
mov eax, edi
imul eax, eax, 0x45c
movsx ecx, word [eax + 0x816338]
lea ecx, [ecx + ecx*2]
lea edx, [ecx*4 + 0x8ddd08]
mov esi, dword [edx]
sub esp, 0xc
mov ecx, esp
mov dword [ecx], esi
mov esi, dword [edx + 4]
mov edx, dword [edx + 8]
mov dword [ecx + 4], esi
mov dword [ecx + 8], edx
movsx ecx, word [eax + 0x8162f8]
movsx edx, word [eax + 0x8162fc]
push ecx
push edx
push str._NATIONALITY__SHIPTYPE_headed_for__CITYNAME
mov esi, 0x8ebf58
call fcn.004f7660
push 3
mov eax, 0x86bb48
mov ecx, edi
call fcn.00444d70
add esp, 0x1c
mov byte [esp + 0x1f], 1
push ebx
call fcn.0042e1a0
add esp, 4
cmp eax, ebx
jne 0x408ee7
mov eax, dword [0x72e650]
or eax, 2
mov dword [0x86e35c], ebx
mov dword [0x86e360], ebx
mov dword [0x72e650], eax
mov eax, dword [esp + 0x18]
cmp eax, ebx
je 0x408f49
push eax
call fcn.0044a670
add esp, 4
mov byte [esp + 0x1f], 1
push ebx
call fcn.0042e1a0
add esp, 4
cmp eax, ebx
jne 0x408f23
mov eax, dword [0x72e650]
or eax, 2
mov dword [0x86e35c], ebx
mov dword [0x86e360], ebx
mov dword [0x72e650], eax
mov dword [esp + 0x14], 0x139d
mov eax, dword [0x8c09f8]
add eax, 8
call fcn.00484110
mov al, byte [esp + 0x1f]
test al, al
mov dword [0x8cc900], 1
mov byte [0x86bb48], 0
jne 0x408fbc
mov eax, dword [0x85c268]
mov ecx, dword [0x85c26c]
push 0
push 0
push 0xffffffffffffffff
cdq
push 0
push fcn.00484b30
push 0x270f
and edx, 0xf
add eax, edx
sar eax, 4
push 0
push 0x6f7896
push eax
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
call fcn.00430160
add esp, 0x28
mov edx, dword [0x8eed78]
mov ecx, 0x8eed78
call dword [edx + 0x18]
test al, al
jne 0x408fe4
push 0
push str.The_audio_manager_has_not_been_properly_initialized_yet
mov eax, 1
call fcn.004887a0
add esp, 8
jmp 0x409023
sub esp, 0x64
lea eax, [esp + 0x2ec]
mov ebx, esp
mov dword [esp + 0x34c], ebp
mov dword [esp + 0x2ec], 0x1f
mov dword [esp + 0x324], 0x8c9334
call fcn.00498530
mov edi, 0x8e87b4
call fcn.004a1410
mov dword [esp + 0x2e8], ebp
mov eax, dword [0x8eed78]
mov ecx, 0x8eed78
call dword [eax + 0x18]
test al, al
jne 0x409057
push 0
push str.The_audio_manager_has_not_been_properly_initialized_yet
mov eax, 1
call fcn.004887a0
add esp, 8
mov dword [0x8cc900], 0
jmp 0x407e32
sub esp, 0x64
lea eax, [esp + 0x284]
mov ebx, esp
mov dword [esp + 0x2e4], ebp
mov dword [esp + 0x284], 0x1f
mov dword [esp + 0x2bc], 0x8c9338
call fcn.00498530
mov edi, 0x8e87b4
call fcn.004a1410
mov dword [esp + 0x280], ebp
mov dword [0x8cc900], 0
jmp 0x407e32
mov eax, dword [0x86bab0]
push eax
push esi
push str.The_locals_are_mostly_content__yet_a_eager_band_of__NUM_men_offers_to_join_your_current_crew_of__NUM._n_Welcome_aboard_mates__n_Sorry_lads__were_full._n
mov esi, 0x8ebf58
call fcn.004f7660
add esp, 0xc
jmp 0x409107
mov ecx, dword [0x86bab0]
push ecx
push esi
sub esp, 0xc
mov edx, esp
push str.Jobs_are_scarce_in__CITYNAME._An_experienced_band_of__NUM_men_offers_to_join_your_current_crew_of__NUM._n_Welcome_aboard_mates__n_Sorry_lads__were_full._n
jmp 0x4090e6
mov ecx, dword [0x86bab0]
push ecx
push esi
sub esp, 0xc
mov edx, esp
push str.Times_are_tough_in__CITYNAME._A_hardy_band_of__NUM_men_offers_to_join_your_current_crew_of__NUM._n_Welcome_aboard_mates__n_Sorry_lads__were_full._n
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov dword [edx], ecx
mov ecx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [edx + 4], ecx
mov esi, 0x8ebf58
mov dword [edx + 8], eax
call fcn.004f7660
add esp, 0x18
push edi
push 0x38
call fcn.00487950
add esp, 8
mov eax, 0x14be
call fcn.00484110
mov edx, dword [0x8eed78]
mov ecx, 0x8eed78
call dword [edx + 0x18]
test al, al
jne 0x409143
push edi
push str.The_audio_manager_has_not_been_properly_initialized_yet
mov eax, 1
call fcn.004887a0
add esp, 8
jmp 0x409184
sub esp, 0x64
lea eax, [esp + 0x21c]
mov ebx, esp
mov dword [esp + 0x27c], ebp
mov dword [esp + 0x21c], 0x1f
mov dword [esp + 0x254], 0x8c9334
call fcn.00498530
mov edi, 0x8e87b4
call fcn.004a1410
mov dword [esp + 0x218], ebp
xor edi, edi
mov eax, dword [0x8eed78]
mov ecx, 0x8eed78
call dword [eax + 0x18]
test al, al
jne 0x4091aa
push edi
push str.The_audio_manager_has_not_been_properly_initialized_yet
mov eax, 1
call fcn.004887a0
add esp, 8
jmp 0x4091eb
sub esp, 0x64
lea eax, [esp + 0xe4]
mov ebx, esp
mov dword [esp + 0x144], ebp
mov dword [esp + 0xe4], 0x1f
mov dword [esp + 0x11c], 0x8c9338
call fcn.00498530
mov edi, 0x8e87b4
call fcn.004a1410
mov dword [esp + 0xe0], ebp
xor edi, edi
push 0xbf800000
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x131
or esi, 0xffffffff
mov eax, 0x8c9334
or ecx, 0xffffffff
call fcn.00488840
add esp, 0x10
mov eax, 4
call fcn.00484050
push edi
push edi
push 0xffffffffffffffff
push edi
push fcn.00484b30
push 0xffffffffffffffff
call fcn.00406e80
mov ecx, dword [0x85c26c]
neg eax
sbb eax, eax
inc eax
push eax
mov eax, 0x2aaaaaab
imul ecx
mov ecx, edx
push 0x6f7896
shr ecx, 0x1f
add ecx, edx
push 6
push ecx
call fcn.00430160
add esp, 0x28
test eax, eax
jne 0x4092e1
mov eax, dword [esp + 0x2f4]
mov edx, dword [0x72e65c]
imul eax, eax, 0x94
mov ecx, dword [0x86bab0]
add ecx, edx
mov word [eax + 0x85dfc2], di
push edi
xor eax, eax
mov dword [0x86bab0], ecx
mov dword [0x72e65c], edi
mov ebx, 1
call fcn.0045bb50
add esp, 4
mov eax, 0x14c4
call fcn.00484110
push 0x8c9334
call fcn.00489090
add esp, 4
push 0x8c9338
call fcn.00489090
add esp, 4
push 0xbf800000
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12e
or esi, 0xffffffff
mov eax, 0x8c9334
or ecx, 0xffffffff
call fcn.00488840
mov dword [0x72e64c], ebx
jmp 0x409331
mov eax, 0x14c6
call fcn.00484110
push 0x8c9334
call fcn.00489090
add esp, 4
push 0x8c9338
call fcn.00489090
add esp, 4
push 0xbf800000
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12f
or esi, 0xffffffff
mov eax, 0x8c9334
or ecx, 0xffffffff
call fcn.00488840
mov ebx, dword [esp + 0x3c]
mov dword [0x72e64c], 2
mov eax, dword [0x85c268]
mov ecx, dword [0x85c26c]
add esp, 0x10
push edi
push edi
push 0xffffffffffffffff
push edi
cdq
push fcn.00484b30
push 0x270f
and edx, 0xf
add eax, edx
push edi
sar eax, 4
push 0x6f7896
push eax
mov eax, 0x2aaaaaab
imul ecx
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
push ecx
mov dword [0x8cc900], 1
mov byte [0x86bb48], 0
call fcn.00430160
push 0x8c9334
call fcn.00489090
add esp, 0x2c
push 0x8c9338
call fcn.00489090
add esp, 4
cmp ebx, edi
mov dword [0x8cc900], edi
mov dword [esp + 0x14], 0x13a7
je 0x409c50
push 0x8c9334
call fcn.00489090
add esp, 4
push 0x8c9338
call fcn.00489090
add esp, 4
push 0xbf800000
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x130
or esi, 0xffffffff
mov eax, 0x8c9334
or ecx, 0xffffffff
call fcn.00488840
add esp, 0x10
mov eax, 0x1388
call fcn.00484110
jmp 0x407002
cmp eax, 0x201
jne 0x409c45
test byte [0x72e650], 8
jne 0x409c50
mov ecx, dword [0x72e650]
mov ebx, dword [0x85c158]
or ecx, 8
add ebx, 2
mov dword [0x72e650], ecx
imul ebx, ebx, 0x64
mov ecx, dword [0x85c270]
cmp ecx, edi
je 0x40944c
cmp dword [0x85c384], 5
jle 0x40944c
mov eax, ebx
cdq
sub eax, edx
sar eax, 1
mov ebx, eax
mov eax, dword [0x86bab4]
cmp eax, ebx
jl 0x409642
mov edi, dword [esp + 0x2f4]
shl edi, 5
mov dl, byte [edi + 0x862b70]
test dl, dl
js 0x409642
mov edx, dword [0x85c380]
test dh, 0xf
jne 0x409484
test ecx, ecx
jne 0x409642
mov ebp, dword [sym.imp.MSVCR71.dll_rand]
xor edx, edx
cmp eax, 0x3e8
setl dl
add edx, 2
mov esi, edx
test esi, esi
jle 0x409648
call ebp
cdq
idiv esi
test edx, edx
je 0x40963b
mov eax, dword [0x85c270]
test eax, eax
jne 0x409513
mov eax, dword [edi + 0x862b6c]
mov ecx, dword [edi + 0x862b68]
push 0
push 0xffffffffffffffff
push eax
push ecx
push 0
call fcn.004933a0
mov eax, dword [0x85c384]
add esp, 0x14
cmp eax, 0xffffffff
jne 0x4094ec
mov dword [0x85c270], 0
jmp 0x409650
lea edx, [eax + eax*2]
push ebx
lea eax, [edx*4 + 0x8cd100]
mov edx, dword [eax]
sub esp, 0xc
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [ecx + 4], edx
mov dword [ecx + 8], eax
push str.A_mysterious_traveler_offers_to_sell_you_part_of_a_secret_map_showing_the_location_of_the_pirate__TOP10s_buried_treasure_for__NUM
jmp 0x40953d
mov eax, dword [0x85c384]
lea ecx, [eax + eax*2]
push ebx
lea edx, [ecx*4 + 0x8cd100]
mov ecx, dword [edx]
sub esp, 0xc
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov edx, dword [edx + 8]
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
push str.A_mysterious_traveler_offers_to_sell_you_an_additional_part_of_a_secret_map_showing_the_location_of__TOP10s_buried_treasure_for__NUM
mov esi, 0x8ebf58
call fcn.004f7660
add esp, 0x14
push 0
push 0x38
call fcn.00487950
mov eax, 0x152c
call fcn.00484110
mov eax, 1
call fcn.00484050
mov eax, dword [0x85c268]
push 0
push 0
push 0xffffffffffffffff
cdq
push 0
push fcn.00484b30
push 0xffffffffffffffff
and edx, 0xf
add eax, edx
sar eax, 4
push 0
push 0x6f7896
push eax
mov eax, dword [0x85c26c]
cdq
and edx, 0xf
add eax, edx
sar eax, 4
push eax
call fcn.00430160
add esp, 0x30
test eax, eax
push 0x8c9334
jne 0x409606
call fcn.00489090
add esp, 4
push 0x8c9338
call fcn.00489090
mov ecx, dword [0x86bab4]
mov eax, dword [edi + 0x862b6c]
add esp, 4
push 0
sub ecx, ebx
push 1
mov dword [0x86bab4], ecx
mov ecx, dword [edi + 0x862b68]
push eax
push ecx
push 0
call fcn.004933a0
mov eax, dword [edi + 0x862b70]
add esp, 0x14
or eax, 0x80
mov dword [edi + 0x862b70], eax
mov eax, 0x1532
jmp 0x409b73
call fcn.00489090
add esp, 4
push 0x8c9338
call fcn.00489090
mov eax, dword [0x85c380]
add esp, 4
cmp eax, 0xf00
jne 0x409631
mov dword [0x85c270], 0
mov eax, 0x1534
jmp 0x409b73
mov eax, dword [0x86bab4]
jmp 0x409648
mov ebp, dword [sym.imp.MSVCR71.dll_rand]
test eax, eax
jl 0x409b78
mov eax, 0x1522
call fcn.00484110
mov eax, 1
call fcn.00484050
call ebp
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x4097a4
push 0x28
push 0x28
or edi, 0xffffffff
call fcn.0044d130
add esp, 8
mov esi, eax
call ebp
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x4096ca
test esi, esi
jg 0x4096ca
cmp dword [0x86bab4], 0x3e8
jl 0x4096ca
cmp word [0x86bb1c], 4
jge 0x4096ca
mov eax, dword [0x85c3b8]
test eax, eax
je 0x4098ce
mov eax, dword [0x85c4c8]
test ah, 0xf
jne 0x4098ce
mov ebx, dword [esp + 0x2f4]
mov eax, ebx
call fcn.004289d0
mov ecx, eax
mov edi, dword [0x72e654]
mov eax, 0x66666667
imul ecx
mov ecx, dword [0x85c158]
sar edx, 2
mov eax, edx
shr eax, 0x1f
lea esi, [edx + eax + 5]
mov al, byte [edi + 0x86bb20]
add ecx, 2
imul esi, ecx
imul esi, esi, 0x32
cmp al, 2
jne 0x409733
lea esp, [esp]
call ebp
cdq
mov ecx, 0x64
idiv ecx
test edx, edx
je 0x409733
call ebp
cdq
mov ecx, 0x11
idiv ecx
mov edi, edx
cmp byte [edi + 0x86bb20], 2
je 0x409710
mov al, byte [0x86bb2c]
test al, al
jne 0x40975f
imul ebx, ebx, 0x94
cmp word [ebx + 0x85df78], 1
je 0x40975a
call ebp
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x40975f
mov edi, 0xc
mov al, byte [edi + 0x86bb20]
cmp al, 2
jge 0x409650
test al, al
lea ebp, [esi + esi*2]
jne 0x409a28
mov eax, dword [0x728638]
mov ecx, dword [0x72863c]
mov ebp, esi
push ebp
push edi
sub esp, 0xc
mov edx, esp
mov dword [edx], eax
mov eax, dword [0x728640]
mov dword [edx + 4], ecx
push edi
mov dword [edx + 8], eax
push str.A_mysterious_traveler_offers_to_sell_you__APROP1.__PCNAME___PROP3_and_can_be_yours_for_only__NUM_gold_pieces.
jmp 0x409a4e
xor esi, esi
call ebp
cdq
mov ecx, 0x2c
idiv ecx
mov edi, edx
shl edx, 5
mov eax, dword [edx + 0x862b70]
test al, 1
jne 0x4097c3
test eax, eax
jns 0x4097c9
inc esi
cmp esi, 0x64
jl 0x4097a6
lea eax, [edi + edi*2]
lea ecx, [eax*4 + 0x8ddd08]
mov eax, dword [ecx]
sub esp, 0xc
mov edx, esp
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov ecx, dword [ecx + 8]
mov dword [edx + 4], eax
push str.A_mysterious_traveler_offers_to_share_with_you_information_from_his_recent_visit_to__CITYNAME._n_Sure__tell_me_more._n_Not_interested._n
mov esi, 0x8ebf58
mov dword [edx + 8], ecx
call fcn.004f7660
push 0
push 0x38
call fcn.00487950
mov eax, 0x1536
call fcn.00484110
mov eax, dword [0x85c26c]
push 0
push 0
push 0xffffffffffffffff
push 0
push fcn.00484b30
cdq
push 0xffffffffffffffff
push 0
and edx, 0xf
push 0x6f7896
add eax, edx
mov esi, 8
sar eax, 4
push esi
push eax
call fcn.00430160
add esp, 0x40
test eax, eax
push 0x8c9334
jne 0x4098a3
call fcn.00489090
add esp, 4
push 0x8c9338
call fcn.00489090
add esp, 4
push edi
push 0
mov eax, edi
shl eax, 5
mov ebp, dword [eax + 0x862b70]
mov edx, dword [eax + 0x862b6c]
push 0
push 0
or ebp, 1
push 6
mov dword [eax + 0x862b70], ebp
mov eax, dword [eax + 0x862b68]
push edx
push eax
call fcn.00446120
add esp, 0x1c
mov eax, 0x1537
call fcn.00484110
or dword [0x72e650], esi
jmp 0x409b78
call fcn.00489090
add esp, 4
push 0x8c9338
call fcn.00489090
mov eax, dword [0x72e650]
add esp, 4
or eax, esi
mov dword [0x72e650], eax
mov eax, 0x153e
jmp 0x409b73
push str.I_have_heard_amazing_news_of_your_family_which_I_will_reveal_to_you_for_1000
mov esi, 0x8ebf58
call fcn.004f7660
add esp, 4
push 0
push 0x38
call fcn.00487950
mov eax, 0x1536
call fcn.00484110
mov eax, dword [0x85c26c]
push 0
push 0
push 0xffffffffffffffff
push 0
push fcn.00484b30
cdq
push 0xffffffffffffffff
push 0
and edx, 0xf
push 0x6f7896
add eax, edx
sar eax, 4
push 8
push eax
call fcn.00430160
add esp, 0x30
test eax, eax
push 0x8c9334
jne 0x4099fc
call fcn.00489090
add esp, 4
push 0x8c9338
call fcn.00489090
add esp, 4
call fcn.0044c1e0
push 0
push 0x38
mov esi, eax
call fcn.00487950
movsx ecx, word [0x86bb1c]
push 4
add ecx, 0x286
call fcn.0042f7a0
mov ecx, dword [0x85c26c]
add esp, 0xc
push 0
push 0
mov eax, 0x66666667
imul ecx
push 0xffffffffffffffff
push 0
push fcn.00484b30
push 0xffffffffffffffff
sar edx, 1
push 0
mov ecx, edx
push 0x6f7896
shr ecx, 0x1f
add ecx, edx
push 8
push ecx
call fcn.00430160
mov eax, 0x153c
call fcn.00484110
push 0x8c9334
call fcn.00489090
add esp, 0x2c
push 0x8c9338
call fcn.00489090
imul esi, esi, 0x45c
movsx eax, word [esi + 0x8162fe]
shl eax, 5
mov esi, dword [eax + 0x85c98c]
add esp, 4
test esi, esi
jle 0x4099ed
mov eax, esi
call fcn.00449490
push esi
call fcn.0044a670
add esp, 4
sub dword [0x86bab4], 0x3e8
jmp 0x409b78
call fcn.00489090
add esp, 4
push 0x8c9338
call fcn.00489090
mov eax, dword [0x72e650]
add esp, 4
or eax, 8
mov dword [0x72e650], eax
mov eax, 0x153e
jmp 0x409b73
mov edx, dword [0x728638]
mov eax, dword [0x72863c]
push ebp
push edi
sub esp, 0xc
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [0x728640]
mov dword [ecx + 4], eax
push edi
mov dword [ecx + 8], edx
push str.A_mysterious_traveler_offers_to_sell_you__APROP2.__PCNAME___PROP3_and_can_be_yours_for_only__NUM_gold_pieces.
mov esi, 0x8ebf58
call fcn.004f7660
mov eax, dword [0x86bab4]
add esp, 0x1c
cmp eax, ebp
push eax
jge 0x409a74
push str.Unfortunately_you_only_have__NUM_gold_pieces._n
call fcn.004f7680
add esp, 8
jmp 0x409a90
push str._You_currently_have__NUM
call fcn.004f7680
push str._Ill_take_it._n_Thats_too_much_for_me._n
mov esi, 0x8ebf58
call fcn.004f7680
add esp, 0xc
push 0
push 0x30
call fcn.00487950
movsx eax, byte [edi + 0x86bb20]
mov ecx, eax
shl ecx, 4
add ecx, edi
push 4
lea ecx, [eax + ecx + 0x12c]
call fcn.0042f7a0
add esp, 0xc
mov eax, 0x1522
call fcn.00484110
mov ecx, dword [0x85c26c]
push 0
push 0
push 0xffffffffffffffff
mov eax, 0x2aaaaaab
imul ecx
push 0
push fcn.00484b30
push 0xffffffffffffffff
push 0
mov eax, edx
push 0x6f7896
shr eax, 0x1f
add eax, edx
push 8
push eax
call fcn.00430160
add esp, 0x28
test eax, eax
push 0x8c9334
jne 0x409b4c
call fcn.00489090
add esp, 4
push 0x8c9338
call fcn.00489090
movsx ecx, byte [edi + 0x86bb20]
add esp, 4
push 0
push ecx
push edi
push 0x25
call fcn.0043a8d0
sub dword [0x86bab4], ebp
mov cl, byte [edi + 0x86bb20]
add esp, 0x10
inc cl
inc word [0x864012]
mov byte [edi + 0x86bb20], cl
mov eax, 0x1528
jmp 0x409b73
call fcn.00489090
add esp, 4
push 0x8c9338
call fcn.00489090
mov eax, dword [0x72e650]
add esp, 4
or eax, 8
mov dword [0x72e650], eax
mov eax, 0x152a
call fcn.00484110
mov eax, dword [0x8c09f8]
mov ecx, dword [0x85c26c]
push 0
push 0
push 0xffffffffffffffff
cmp eax, 0x1537
mov eax, dword [0x85c268]
push 0
mov dword [0x8cc900], 1
mov byte [0x86bb48], 0
push fcn.00484b30
cdq
jne 0x409bde
push 0x1f4
and edx, 0xf
add eax, edx
sar eax, 4
push 0
push 0x6f7896
push eax
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [0x8ccc44], 0xbf000000
push eax
jmp 0x409c02
push 0x270f
and edx, 0xf
add eax, edx
push 0
sar eax, 4
push 0x6f7896
push eax
mov eax, 0x2aaaaaab
imul ecx
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
push ecx
call fcn.00430160
add esp, 0x28
push 0x8c9334
call fcn.00489090
add esp, 4
push 0x8c9338
call fcn.00489090
add esp, 4
mov eax, 0x1388
mov dword [0x8cc900], 0
mov dword [esp + 0x14], 0x13b1
call fcn.00484110
jmp 0x407002
cmp eax, 0x209
je 0x40a4f7
mov eax, 0x1388
call fcn.00484110
jmp 0x407002
call fcn.00489090
add esp, 4
push 0x8c9338
call fcn.00489090
mov edx, dword [esp + 0x2f8]
mov ecx, dword [0x728638]
mov eax, 0x8cccd0
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [0x728640]
mov dword [esp + 0x60], edx
mov edx, dword [0x72863c]
mov dword [eax + 4], edx
push str.You_have_found_me_at_last_Mr.__PCNAME__but_you_will_regret_crossing_swords_with_me__En_Garde__n
mov esi, 0x8ebf58
mov dword [esp + 0x58], 0
mov byte [esp + 0x68], 0
mov dword [eax + 8], ecx
call fcn.004f7660
add esp, 0x10
mov ecx, 0x30
call fcn.00487df0
mov ebx, 0x86bb48
lea eax, [esp + 0x3c]
call fcn.00412f10
push str.Guards__take_this_pathetic_creature_and_escort_him_to_the_prison.
call fcn.004f7660
add esp, 4
push str.Perhaps_he_will_think_twice_before_challenging_a_master_swordsman_such_as_myself__n
call fcn.004f7680
add esp, 4
mov ecx, 0x30
call fcn.00487df0
lea eax, [esp + 0x44]
call fcn.00412f10
mov ebp, dword [esp + 0x10]
shl ebp, 5
mov eax, dword [ebp + 0x85c984]
sub eax, 0x1e
je 0x409dc4
sub eax, 0xa
je 0x409d6e
sub eax, 2
jne 0x409eea
push str.The_evil_Marquis_leaps_out_of_the_window_and_disappears.
call fcn.004f7660
add esp, 4
push str.Among_the_papers_in_his_room_is_a_fragment_of_a_map_showing_the_location_of_his_secret_hideout__deep_in_indian_territory.
call fcn.004f7680
add esp, 4
mov ecx, 0x30
call fcn.00487df0
lea eax, [esp + 0x40]
call fcn.00412f10
mov dword [esp + 0x48], 0x2a
jmp 0x409eea
push str.You_are_a_master_swordsman__sir._I_will_reveal_to_you_the_truth_that_you_seek.
mov esi, 0x8ebf58
call fcn.004f7660
movsx edx, word [0x86bb1c]
add esp, 4
push edx
push str.Your__RELATIVE_is_held_captive_in_a_remote_location.
call fcn.004f7680
push str.This_map_should_help_you_in_your_quest_to_restore_your_family._n
call fcn.004f7680
add esp, 0xc
mov ecx, 0x30
call fcn.00487df0
mov ebx, 0x86bb48
lea eax, [esp + 0x40]
call fcn.00412f10
mov dword [esp + 0x48], 0x28
jmp 0x409eea
push str.You_are_a_master_swordsman__sir.
mov esi, 0x8ebf58
call fcn.004f7660
mov eax, dword [ebp + 0x85c978]
lea eax, [eax + eax*2]
lea ecx, [eax*4 + 0x8ddd08]
mov eax, dword [ecx]
sub esp, 8
mov edx, esp
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov ecx, dword [ecx + 8]
mov dword [edx + 4], eax
push str.I_will_return_to_face_justice_in__CITYNAME.
mov dword [edx + 8], ecx
call fcn.004f7680
mov esi, dword [sym.imp.MSVCR71.dll_rand]
add esp, 0x10
call esi
cdq
mov ecx, 0x11
idiv ecx
mov al, byte [0x86bb2c]
test al, al
mov edi, edx
mov dword [esp + 0x28], edi
jne 0x409e3b
call esi
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x409e3b
mov edi, 0xc
mov dword [esp + 0x28], edi
cmp byte [edi + 0x86bb20], 2
mov esi, 0x8ebf58
jge 0x409e90
mov edx, dword [ebp + 0x85c988]
push edx
push str.You_have_certainly_earned_your_reward.___NUM
call fcn.004f7680
mov al, byte [edi + 0x86bb20]
add esp, 8
test al, al
push edi
jne 0x409e6f
push str._But_perhaps_a_gift_of__RAREPROP1_will_encourage_you_to_overlook_the_overblown_charges_against_me._n
jmp 0x409e74
push str._But_perhaps_a_gift_of__RAREPROP2_will_encourage_you_to_overlook_the_overblown_charges_against_me._n
call fcn.004f7680
add esp, 8
push str._No__you_must_stand_trial._n_Excellent__Ill_take_it._n
mov esi, 0x8ebf58
call fcn.004f7680
add esp, 4
jmp 0x409ec6
mov eax, dword [ebp + 0x85c988]
push eax
push 0x6fc23c
call fcn.004f7680
mov edi, 0x86bb48
add esp, 8
dec edi
lea ebx, [ebx]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x409eb0
mov cx, word [0x6fc888]
mov word [edi], cx
mov edi, dword [esp + 0x28]
mov ecx, 0x48
call fcn.00487df0
mov ebx, 0x86bb48
lea eax, [esp + 0x40]
call fcn.00412f10
mov dword [esp + 0x4c], edi
mov dword [esp + 0x48], 0x1e
sub esp, 0x64
lea eax, [esp + 0xe4]
mov ebx, esp
mov dword [esp + 0x144], 0x8cccd0
mov dword [esp + 0xe4], 0x23
mov dword [esp + 0x11c], 0x8c932c
mov dword [esp + 0x10c], 0xbf800000
call fcn.00498530
mov edi, 0x8e87b4
call fcn.004a1410
mov eax, dword [0x728a84]
dec eax
mov dword [0x728a84], eax
mov edx, dword [eax*4 + 0x7288f4]
mov eax, dword [0x72ed78]
mov dword [0x7283bc], edx
push 0
mov dword [eax + 0x5c], 0xa
call fcn.004a79a0
mov eax, dword [ebp + 0x85c98c]
add esp, 4
or ebx, 0xffffffff
test eax, eax
mov dword [esp + 0x28], 5
mov esi, 0x8ebf58
jle 0x40a055
lea ecx, [eax + eax*8]
mov eax, dword [ecx*4 + 0x863b88]
sub esp, 0xc
cmp eax, 0x28
jl 0x409fce
lea edx, [eax + eax*2 - 0x78]
lea eax, [edx*4 + 0x8cd178]
mov edx, dword [eax]
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [ecx + 4], edx
push str._EVILNAME
mov dword [ecx + 8], eax
call fcn.004f7660
mov eax, dword [ebp + 0x85c98c]
lea ecx, [eax + eax*8]
mov ebx, dword [ecx*4 + 0x863b88]
add esp, 0x10
jmp 0x40a062
cmp eax, 0x1e
jl 0x40a02a
lea edx, [eax + eax*2 - 0x5a]
lea eax, [edx*4 + 0x8cd19c]
mov edx, dword [eax]
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [ecx + 4], edx
mov dword [ecx + 8], eax
mov eax, dword [esp + 0x1c]
cdq
mov ecx, 0x1a
idiv ecx
add dl, 0x41
movsx edx, dl
push edx
push str.Mr.__CHAR.__NPCNAME
call fcn.004f7660
add esp, 0x14
mov dword [esp + 0x28], 3
mov eax, dword [ebp + 0x85c98c]
lea eax, [eax + eax*8]
mov ebx, dword [eax*4 + 0x863b88]
jmp 0x40a062
lea ecx, [eax + eax*2]
lea edx, [ecx*4 + 0x8cd100]
mov ecx, dword [edx]
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov edx, dword [edx + 8]
mov dword [eax + 4], ecx
push str._TOP10
mov dword [eax + 8], edx
call fcn.004f7660
add esp, 0x10
jmp 0x40a018
push str.Mendoza
call fcn.004f7660
add esp, 4
mov eax, dword [0x8c0b04]
sub eax, 0
je 0x40a07a
dec eax
je 0x40a073
xor eax, eax
jmp 0x40a07f
mov eax, dword [0x8c0c1c]
jmp 0x40a07f
mov eax, dword [0x8c0c20]
mov edi, dword [esp + 0x2f4]
lea ecx, [esp + 0x3c]
push ecx
push eax
mov eax, dword [esp + 0x30]
push 0xffffffffffffffff
shl edi, 5
movsx edx, byte [edi + 0x862b74]
push ebx
push edx
push eax
push 0xffffffffffffffff
push 4
lea ecx, [esp + 0x90]
push 0xffffffffffffffff
push ecx
mov ecx, 5
mov dword [esp + 0x3c], edi
call fcn.0041b1d0
mov edx, dword [eax + 4]
mov esi, dword [eax]
mov eax, dword [eax + 8]
mov dword [esp + 0x90], edx
mov dword [esp + 0x94], eax
call fcn.00412710
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x60]
push 0
push 1
push ecx
push edx
call fcn.004a7fb0
add esp, 0x38
cmp esi, 1
jne 0x40a3f7
mov eax, dword [ebp + 0x85c984]
cmp eax, 0x1e
jne 0x40a170
push 0x8c9334
call fcn.00489090
add esp, 4
push 0x8c9338
call fcn.00489090
mov eax, dword [esp + 0x54]
add esp, 4
cmp eax, esi
jne 0x40a13d
mov eax, dword [esp + 0x4c]
mov cl, byte [eax + 0x86bb20]
inc cl
inc word [0x864012]
mov byte [eax + 0x86bb20], cl
jmp 0x40a17f
mov eax, dword [ebp + 0x85c988]
add dword [0x86bab4], eax
mov ecx, dword [ebp + 0x85c974]
push 0
push ecx
push 0x1e
push 0x27
call fcn.0043a8d0
mov eax, dword [ebp + 0x85c978]
add esp, 0x10
mov esi, 2
call fcn.004051c0
jmp 0x40a17f
push 0
push 0
push eax
push 0x27
call fcn.0043a8d0
add esp, 0x10
cmp dword [ebp + 0x85c984], 0x28
jne 0x40a1be
push 0x8c9334
call fcn.00489090
add esp, 4
push 0x8c9338
call fcn.00489090
mov edx, dword [edi + 0x862b6c]
mov eax, dword [edi + 0x862b68]
add esp, 4
push 0
push 1
push edx
push eax
push 1
call fcn.004933a0
add esp, 0x14
cmp dword [ebp + 0x85c984], 0x29
jne 0x40a36c
mov edi, dword [ebp + 0x85c974]
push str.The_governors_daughter_is_held_hostage_in_a_back_room.
mov esi, 0x8ebf58
mov dword [esp + 0x38], edi
call fcn.004f7660
mov edx, dword [0x728638]
mov eax, dword [0x72863c]
sub esp, 8
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [0x728640]
mov dword [ecx + 4], eax
mov eax, edi
mov dword [ecx + 8], edx
shl eax, 5
movsx ecx, byte [eax + 0x862b74]
movzx edx, byte [ecx*2 + 0x86ba88]
push edx
push str.Oh_dear__RANK__PCNAME__I_dreamt_every_night_that_you_would_come_to_rescue_me_
call fcn.004f7680
lea eax, [edi + edi*2]
lea ecx, [eax*4 + 0x8ddd08]
mov eax, dword [ecx]
add esp, 8
mov edx, esp
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov ecx, dword [ecx + 8]
mov dword [edx + 4], eax
push str.Let_us_return_to_my_father_in__CITYNAME_and_speak_of_our_future_together._n
mov dword [edx + 8], ecx
call fcn.004f7680
mov ecx, 0x20
call fcn.00487df0
push 0
call fcn.00488e30
sub esp, 0x50
lea eax, [esp + 0xe4]
mov ebx, esp
mov dword [esp + 0x144], 0x8cccd0
mov dword [esp + 0xe4], 0x23
mov dword [esp + 0x11c], 0x8c932c
mov dword [esp + 0x10c], 0xbf800000
call fcn.00498530
mov edi, 0x8e87b4
call fcn.004a1410
push 0x8c9334
call fcn.00489090
add esp, 4
push 0x8c9338
call fcn.00489090
mov edx, dword [esp + 0x38]
add esp, 4
push 0
push edx
push 4
call fcn.00451db0
mov eax, dword [0x8ca200]
add esp, 0xc
push eax
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
push 0x40000000
push 1
push 8
call fcn.00488cf0
mov al, byte [0x8eaeff]
add esp, 0x24
test al, al
jne 0x40a34f
sub esp, 0x64
lea eax, [esp + 0x14c]
mov ebx, esp
mov dword [esp + 0x1ac], 0x8cccd0
mov dword [esp + 0x14c], 0x22
mov dword [esp + 0x184], 0x8c932c
mov dword [esp + 0x154], 9
mov dword [esp + 0x158], 0xffffffff
mov dword [esp + 0x174], 0xbf800000
call fcn.00498530
call fcn.004a1410
mov eax, dword [ebp + 0x85c974]
mov edi, dword [esp + 0x14]
imul eax, eax, 0x94
inc word [eax + 0x85df78]
lea eax, [eax + 0x85df78]
cmp dword [ebp + 0x85c984], 0x2a
jne 0x40a3ab
push 0x8c9334
call fcn.00489090
add esp, 4
push 0x8c9338
call fcn.00489090
mov ecx, dword [edi + 0x862b6c]
mov edx, dword [edi + 0x862b68]
add esp, 4
push 0
push 1
push ecx
push edx
push 3
call fcn.004933a0
add esp, 0x14
mov eax, dword [esp + 0x10]
push 0xffffffffffffffff
push eax
call fcn.0044d240
mov eax, dword [esp + 0x20]
add esp, 8
cmp eax, 0xffffffff
je 0x40a3d2
imul eax, eax, 0x45c
mov word [eax + 0x8162f8], 0xffff
call fcn.00483c00
push 1
push 0
call fcn.004a8210
add esp, 8
lea esi, [esp + 0x3c]
call fcn.0040a610
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2e0
ret
mov edi, dword [esp + 0x2f4]
dec word [0x86ba74]
lea ecx, [edi + edi*2]
lea edx, [ecx*4 + 0x8ddd08]
mov ecx, dword [edx]
sub esp, 0xc
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov edx, dword [edx + 8]
mov dword [eax + 4], ecx
push str.You_are_arrested_and_locked_away_in_the__CITYNAME_prison._n
mov esi, 0x8ebf58
mov dword [eax + 8], edx
call fcn.004f7660
mov ecx, 0x20
call fcn.00487df0
mov eax, dword [0x728a84]
mov ecx, dword [0x72ed78]
dec eax
mov dword [0x728a84], eax
mov eax, dword [eax*4 + 0x7288f4]
mov dword [0x7283bc], eax
mov dword [ecx + 0x5c], 0xa
call fcn.00483c00
push 0
push 1
call fcn.004a8210
mov eax, edi
call fcn.00451710
mov byte [0x8ca1f0], 0
call fcn.00412710
push 0
call fcn.004a7800
mov edx, dword [0x8ca200]
add esp, 0x1c
push edx
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
push 0x40000000
push 1
push 7
call fcn.00488cf0
mov eax, dword [esp + 0x34]
add esp, 0x24
push 0xffffffffffffffff
push eax
call fcn.0044d240
mov eax, dword [esp + 0x20]
add esp, 8
cmp eax, 0xffffffff
je 0x40a4d5
imul eax, eax, 0x45c
mov word [eax + 0x8162f8], 0xffff
lea esi, [esp + 0x3c]
call fcn.0040a610
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2e0
ret
lea esi, [esp + 0x3c]
call fcn.0040a610
jmp 0x40a5a5
mov eax, 3
call fcn.0042e700
xor eax, eax
mov cl, byte [eax + 0x6f7896]
mov byte [eax + 0x8c0a80], cl
inc eax
test cl, cl
jne 0x40a503
or eax, 0xffffffff
mov dword [0x8c09f4], 1
mov word [0x86e330], di
call fcn.00484110
mov eax, dword [esp + 0x14]
call fcn.00484110
push str.Good_day__lads._n
mov esi, 0x8ebf58
call fcn.004f7660
mov ecx, dword [0x85c268]
add esp, 4
push edi
push edi
mov eax, 0x2aaaaaab
imul ecx
push 0xffffffffffffffff
push edi
push fcn.00484b30
sar edx, 1
push 0x64
mov ecx, edx
push edi
shr ecx, 0x1f
add ecx, edx
push 0x6f7896
push ecx
mov ecx, dword [0x85c26c]
mov eax, 0x55555556
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
call fcn.00430160
push 0x8c9334
call fcn.00489090
add esp, 0x2c
push 0x8c9338
call fcn.00489090
add esp, 4
call fcn.00483c00
push 1
push 0
mov word [0x86e330], 0
call fcn.004a8210
add esp, 8
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2e0
ret