Function at 0x4260f0
Capabilities:
Check for peb beingdebugged flag
Get process heap flags

Disassembly:
push 0xffffffffffffffff
push 0x4eb381
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc
push ebx
push ebp
push esi
mov ebp, ecx
push edi
mov dword [esp + 0x18], ebp
call fcn.0045ae70
xor ebx, ebx
mov dword [ebp], 0x4f350c
mov dword [ebp + 8], str.CharCreation_gump
mov dword [ebp + 0x60], ebx
mov dword [ebp + 0x54], 0x4ec
mov dword [ebp + 0x64], ebx
mov dword [ebp + 0x98], 0xffffffff
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x4c], ebx
mov dword [ebp + 0x48], ebx
mov dword [ebp + 0x44], ebx
lea edi, [ebp + 0x24]
mov dword [ebp + 0x40], ebx
mov eax, dword [ebp + 0x54]
lea esi, [ebp + 0x20]
push edi
push esi
push eax
mov dword [esp + 0x30], ebx
call fcn.004447f0
mov dword [esi], 0x280
mov dword [edi], 0x1e0
mov ecx, dword [esi]
mov eax, 1
mov dword [ebp + 0x1c], ecx
mov dword [ebp + 0x30], ebx
mov dword [ebp + 0x34], ebx
mov dword [ebp + 0x104], 0xee
mov dword [ebp + 0x108], 0x62
mov dword [ebp + 0x14], ebx
mov dword [ebp + 0x18], eax
mov dword [ebp + 0x124], eax
mov ecx, str.NONE
mov dword [ebp + 0x128], ebx
mov dword [ebp + 0x138], ecx
mov dword [ebp + 0x13c], ebx
mov dword [ebp + 0x144], ebx
mov dword [ebp + 0x140], ebx
mov dword [ebp + 0x148], ebx
mov eax, 0x203b
mov dword [ebp + 0x14c], str.Short
mov dword [ebp + 0x150], eax
mov dword [ebp + 0x158], 0x758
mov dword [ebp + 0x154], eax
mov dword [ebp + 0x15c], 0x737
mov eax, 0x203c
mov dword [ebp + 0x160], str.Long
mov dword [ebp + 0x164], eax
mov dword [ebp + 0x16c], 0x752
mov dword [ebp + 0x168], eax
mov dword [ebp + 0x170], 0x72d
mov eax, 0x203d
mov dword [ebp + 0x174], str.Pony_Tail
mov dword [ebp + 0x178], eax
mov dword [ebp + 0x180], 0x755
mov dword [ebp + 0x17c], eax
mov dword [ebp + 0x184], 0x735
mov eax, 0x2044
mov dword [ebp + 0x188], str.Mohawk
mov dword [ebp + 0x18c], eax
mov dword [ebp + 0x194], 0x753
mov dword [ebp + 0x190], eax
mov dword [ebp + 0x198], 0x733
mov eax, 0x2045
mov dword [ebp + 0x19c], str.Pageboy
mov dword [ebp + 0x1a0], eax
mov dword [ebp + 0x1a8], 0x754
mov dword [ebp + 0x1a4], eax
mov dword [ebp + 0x1ac], 0x734
mov eax, 0x204a
mov dword [ebp + 0x1b0], str.Topknot
mov dword [ebp + 0x1b4], eax
mov dword [ebp + 0x1bc], 0x751
mov dword [ebp + 0x1b8], eax
mov dword [ebp + 0x1c0], 0x730
mov eax, 0x2047
mov dword [ebp + 0x1c4], str.Curly
mov dword [ebp + 0x1c8], eax
mov dword [ebp + 0x1d0], 0x750
mov dword [ebp + 0x1cc], eax
mov dword [ebp + 0x1d4], 0x72f
mov eax, 0x2048
mov dword [ebp + 0x1d8], str.Receding
mov dword [ebp + 0x1dc], eax
mov dword [ebp + 0x1e4], 0x756
mov edx, dword [ebp + 0x18]
mov dword [ebp + 0x1e0], eax
shl edx, 3
mov eax, 0x2049
push str.framedata_for_CDumbGump
push edx
mov dword [ebp + 0x1e8], 0x736
mov dword [ebp + 0x1ec], str.2_Tails
mov dword [ebp + 0x1f0], eax
mov dword [ebp + 0x1f8], 0x74e
mov dword [ebp + 0x1f4], eax
mov dword [ebp + 0x1fc], 0x72c
mov dword [ebp + 0x200], str.Buns
mov dword [ebp + 0x204], ebx
mov dword [ebp + 0x20c], ebx
mov dword [ebp + 0x208], 0x2046
mov dword [ebp + 0x210], 0x731
mov dword [ebp + 0x214], ebx
mov dword [ebp + 0x234], ecx
mov dword [ebp + 0x218], 0x2040
mov dword [ebp + 0x238], str.Goatee
mov dword [ebp + 0x21c], 0x203e
mov dword [ebp + 0x23c], str.Long_beard
mov dword [ebp + 0x220], 0x203f
mov dword [ebp + 0x240], str.Short_beard
mov dword [ebp + 0x224], 0x2041
mov dword [ebp + 0x244], str.Moustache
mov dword [ebp + 0x228], 0x204b
mov dword [ebp + 0x248], str.Short_beard_moustache
mov dword [ebp + 0x22c], 0x204c
mov dword [ebp + 0x24c], str.Long_beard_moustache
mov dword [ebp + 0x230], 0x204d
mov dword [ebp + 0x250], str.Vandyke
call fcn.00479630
mov ecx, dword [ebp + 0x18]
mov edi, eax
shl ecx, 3
mov edx, ecx
xor eax, eax
shr ecx, 2
mov dword [ebp + 0x3c], edi
push str.dumb_frame0
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov eax, dword [esi]
imul eax, dword [ebp + 0x24]
lea ecx, [eax + eax + 4]
push ecx
call fcn.00479630
mov edx, dword [ebp + 0x3c]
mov dword [edx + 4], eax
mov eax, dword [ebp + 0x3c]
mov dx, word [esi]
mov ecx, dword [eax + 4]
mov word [ecx], dx
mov eax, dword [ebp + 0x3c]
mov dx, word [ebp + 0x24]
mov ecx, dword [eax + 4]
xor eax, eax
mov word [ecx + 2], dx
mov ecx, dword [esi]
imul ecx, dword [ebp + 0x24]
mov edx, dword [ebp + 0x3c]
shl ecx, 1
mov edi, dword [edx + 4]
mov edx, ecx
add edi, 4
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
mov esi, 0x7d
and ecx, 3
push 0x9d1c
rep stosb byte es:[edi], al
mov dword [ebp + 0xf0], ebx
mov dword [ebp + 0xf8], ebx
mov dword [ebp + 0xf4], ebx
mov dword [ebp + 0x100], ebx
mov dword [ebp + 0xfc], ebx
mov eax, dword [ebp + 0x124]
lea eax, [eax + eax*4]
mov ecx, dword [ebp + eax*4 + 0x13c]
mov dword [ebp + 0x12c], ecx
mov edx, dword [ebp + 0x128]
mov eax, dword [ebp + edx*4 + 0x214]
mov dword [ebp + 0x130], eax
mov dword [ebp + 0x134], ebx
mov dword [ebp + 0x254], 0x52
mov dword [ebp + 0x258], esi
mov dword [ebp + 0x25c], 0x1db
mov dword [ebp + 0x260], esi
mov dword [ebp + 0x264], 0xe
mov dword [ebp + 0x26c], 0x18
mov dword [ebp + 0x270], 0x79
mov dword [ebp + 0x268], 0x2d
mov dword [ebp + 0x274], 0xf
call fcn.004ddf8e
add esp, 0x20
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x24], 1
je 0x4265a4
mov ecx, dword [ebp + 0x274]
mov edx, dword [ebp + 0x260]
push ebx
push 0xe14
push ebp
push 1
push 0x118
lea edx, [ecx + edx - 2]
push esi
push edx
mov edx, dword [ebp + 0x25c]
lea ecx, [ecx + edx - 1]
push ecx
mov ecx, eax
call fcn.0046b690
jmp 0x4265a6
xor eax, eax
mov dword [ebp + 0xc0], eax
mov dword [eax + 0x6c], ebx
mov ecx, dword [ebp + 0xc0]
push 1
push ebp
mov byte [esp + 0x2c], bl
call fcn.0045a530
mov edx, dword [ebp + 0xc0]
xor eax, eax
push 0x9d1c
mov ax, word [edx + 0xb4]
mov dword [ebp + 0xf4], eax
mov ecx, dword [ebp + 0xc0]
mov dword [ecx + 0x98], 0x186c3
call fcn.004ddf8e
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x24], 2
je 0x426634
mov edx, dword [ebp + 0x274]
mov ecx, dword [ebp + 0x260]
push ebx
push 0xe14
push ebp
push 2
push 0x118
lea ecx, [edx + ecx - 2]
push esi
push ecx
mov ecx, dword [ebp + 0x25c]
lea edx, [edx + ecx - 1]
mov ecx, eax
push edx
call fcn.0046b690
jmp 0x426636
xor eax, eax
mov dword [ebp + 0xc4], eax
mov dword [eax + 0x6c], ebx
mov ecx, dword [ebp + 0xc4]
push 1
push ebp
mov byte [esp + 0x2c], bl
call fcn.0045a530
mov eax, dword [ebp + 0xc4]
xor edx, edx
push 0x9d1c
mov dword [eax + 0x98], 0x186c5
mov ecx, dword [ebp + 0xc4]
mov dx, word [ecx + 0xb4]
mov dword [ebp + 0xf8], edx
call fcn.004ddf8e
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x24], 3
je 0x4266c3
mov edx, dword [ebp + 0x274]
mov ecx, dword [ebp + 0x260]
push ebx
push 0xe14
push ebp
push ebx
push 0x118
lea ecx, [edx + ecx - 2]
push esi
push ecx
mov ecx, dword [ebp + 0x25c]
lea edx, [edx + ecx - 1]
mov ecx, eax
push edx
call fcn.0046b690
jmp 0x4266c5
xor eax, eax
mov dword [ebp + 0xbc], eax
mov dword [eax + 0x6c], ebx
mov ecx, dword [ebp + 0xbc]
push 1
push ebp
mov byte [esp + 0x2c], bl
call fcn.0045a530
mov eax, dword [ebp + 0xbc]
xor edx, edx
push 0x9d1c
mov dword [eax + 0x98], 0x186c7
mov ecx, dword [ebp + 0xbc]
mov dx, word [ecx + 0xb4]
mov dword [ebp + 0xf0], edx
call fcn.004ddf8e
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x24], 4
je 0x426754
mov edx, dword [ebp + 0x274]
mov ecx, dword [ebp + 0x260]
push 1
push 0xe14
push ebp
push 3
push 0x118
lea ecx, [edx + ecx - 2]
push esi
push ecx
mov ecx, dword [ebp + 0x25c]
lea edx, [edx + ecx - 1]
mov ecx, eax
push edx
call fcn.0046b690
jmp 0x426756
xor eax, eax
mov dword [ebp + 0xc8], eax
mov dword [eax + 0x6c], ebx
mov ecx, dword [ebp + 0xc8]
push 1
push ebp
mov byte [esp + 0x2c], bl
call fcn.0045a530
mov eax, dword [ebp + 0xc8]
xor edx, edx
push 0x9d1c
mov dword [eax + 0x98], 0x186c8
mov ecx, dword [ebp + 0xc8]
mov dx, word [ecx + 0xb4]
mov dword [ebp + 0x100], edx
call fcn.004ddf8e
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x24], 5
je 0x4267e5
mov edx, dword [ebp + 0x274]
mov ecx, dword [ebp + 0x260]
push 1
push 0xe14
push ebp
push 4
push 0x118
lea ecx, [edx + ecx - 2]
push esi
push ecx
mov ecx, dword [ebp + 0x25c]
lea edx, [edx + ecx - 1]
mov ecx, eax
push edx
call fcn.0046b690
jmp 0x4267e7
xor eax, eax
mov dword [ebp + 0xcc], eax
mov dword [eax + 0x6c], ebx
mov ecx, dword [ebp + 0xcc]
push 1
push ebp
mov byte [esp + 0x2c], bl
call fcn.0045a530
mov eax, dword [ebp + 0xcc]
xor edx, edx
push 0x1cc
mov dword [eax + 0x98], 0x186c9
mov ecx, dword [ebp + 0xcc]
mov dx, word [ecx + 0xb4]
mov dword [ebp + 0xfc], edx
call fcn.004ddf8e
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x24], 6
je 0x426867
push ebx
push ebx
push 1
push 0x386
push 5
push 0x10
push ebx
push 0x1e
push 0xd2
push ebp
push 0x3f
push 0xfa
mov ecx, eax
call fcn.0042aed0
jmp 0x426869
xor eax, eax
mov dword [ebp + 0xb0], eax
mov word [eax + 0xea], bx
mov eax, dword [ebp + 0xb0]
mov byte [esp + 0x24], bl
mov word [eax + 0xec], bx
mov ecx, dword [ebp + 0xb0]
mov word [ecx + 0xe8], bx
mov edx, dword [ebp + 0xb0]
mov byte [edx + 0xee], 7
mov eax, dword [ebp + 0xb0]
mov byte [eax + 0xef], 2
mov ecx, dword [ebp + 0xb0]
mov edx, dword [ecx]
call dword [edx + 0x178]
mov eax, dword [ebp + 0xb0]
push 1
push ebp
mov dword [eax + 0x98], 0x186cb
mov ecx, dword [ebp + 0xb0]
mov dword [ecx + 0xc8], 1
mov ecx, dword [ebp + 0xb0]
call fcn.0045a530
push 0x1cc
call fcn.004ddf8e
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x24], 7
je 0x426943
mov edx, dword [ebp + 0x274]
mov esi, dword [ebp + 0x258]
push ebx
push ebx
push ebx
push 0x481
push 9
mov ecx, edx
push 0x10
push 2
add ecx, esi
mov esi, dword [ebp + 0x254]
push 0x1e
push 0xa0
push ebp
add edx, esi
push ecx
push edx
mov ecx, eax
call fcn.0042aed0
mov edx, eax
mov dword [esp + 0x10], edx
jmp 0x426949
mov dword [esp + 0x10], ebx
mov edx, ebx
mov edi, str.Hair_Style
or ecx, 0xffffffff
xor eax, eax
mov dword [edx + 0xf4], ebx
repne scasb al, byte es:[edi]
not ecx
lea esi, [edx + 0xf8]
sub edi, ecx
mov eax, ecx
mov dword [esp + 0x14], esi
mov esi, edi
mov edi, dword [esp + 0x14]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
push 1
and ecx, 3
push ebp
rep movsb byte es:[edi], byte [esi]
mov ecx, edx
mov byte [esp + 0x2c], bl
mov dword [edx + 0xbc], ebx
call fcn.0045a530
mov esi, dword [esp + 0x10]
mov ecx, esi
mov edx, dword [esi]
call dword [edx + 0x178]
mov dword [esi + 0x98], 0x186c4
mov eax, dword [ebp + 0x274]
mov ecx, dword [ebp + 0x254]
push 0x1d0
add eax, ecx
mov dword [ebp + 0x10c], eax
mov ecx, dword [ebp + 0x258]
mov edi, dword [ebp + 0x274]
mov esi, dword [ebp + 0x264]
add ecx, edi
add ecx, esi
mov dword [ebp + 0x110], ecx
mov edx, dword [ebp + 0x270]
mov dword [ebp + 0x114], edx
call fcn.004ddf8e
mov esi, eax
add esp, 4
mov dword [esp + 0x14], esi
cmp esi, ebx
mov byte [esp + 0x24], 8
je 0x426a55
mov ax, word [ebp + 0x26c]
mov cx, word [ebp + 0x114]
mov edx, dword [ebp + 0x110]
push ebx
mov edi, dword [ebp + 0x10c]
push ebx
push ebx
push 0x386
push 9
push 0xa
push 2
push eax
push ecx
push ebp
push edx
push edi
mov ecx, esi
call fcn.0042aed0
mov dword [esi], 0x4f3390
mov word [esi + 0x1cc], bx
mov word [esi + 0x1ce], bx
mov dword [esi + 0x1c8], 0xffffffff
jmp 0x426a57
xor esi, esi
mov dword [ebp + 0xa0], esi
mov dword [esi + 0x1c8], 0xfd
mov eax, dword [ebp + 0xa0]
push 1
push ebp
mov byte [esp + 0x2c], bl
mov dword [eax + 0xbc], ebx
mov ecx, dword [ebp + 0xa0]
call fcn.0045a530
mov ecx, dword [ebp + 0xa0]
mov edx, dword [ebp + 0x12c]
mov dword [ecx + 0xf4], edx
mov eax, dword [ebp + 0x124]
mov edx, dword [ebp + 0xa0]
or ecx, 0xffffffff
lea eax, [eax + eax*4]
add edx, 0xf8
mov edi, dword [ebp + eax*4 + 0x138]
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebp + 0xa0]
mov edx, dword [ecx]
call dword [edx + 0x178]
mov eax, dword [ebp + 0xa0]
push 0x1cc
mov dword [eax + 0x98], 0x186c4
mov ecx, dword [ebp + 0xa0]
mov edx, dword [ecx + 0xf4]
mov dword [ebp + 0x12c], edx
call fcn.004ddf8e
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x24], 9
je 0x426b5b
mov edx, dword [ebp + 0x274]
mov edi, dword [ebp + 0x268]
mov esi, dword [ebp + 0x258]
push ebx
push ebx
push ebx
mov ecx, edx
push 0x481
push 9
add ecx, edi
push 0x10
push 2
add ecx, esi
mov esi, dword [ebp + 0x254]
push 0x1e
push 0xa0
push ebp
add edx, esi
push ecx
push edx
mov ecx, eax
call fcn.0042aed0
jmp 0x426b5d
xor eax, eax
mov dword [ebp + 0xec], eax
mov dword [eax + 0xf4], ebx
mov edx, dword [ebp + 0xec]
mov edi, str.Facial_Hair_Style
or ecx, 0xffffffff
xor eax, eax
add edx, 0xf8
push 1
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push ebp
mov eax, ecx
mov esi, edi
mov edi, edx
mov byte [esp + 0x2c], bl
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebp + 0xec]
mov dword [ecx + 0xbc], ebx
mov ecx, dword [ebp + 0xec]
call fcn.0045a530
mov ecx, dword [ebp + 0xec]
mov edx, dword [ecx]
call dword [edx + 0x178]
mov eax, dword [ebp + 0xec]
push 0x1d0
mov dword [eax + 0x98], 0x186c5
mov ecx, dword [ebp + 0x274]
add ecx, dword [ebp + 0x254]
mov dword [ebp + 0x11c], ecx
mov edx, dword [ebp + 0x268]
mov eax, dword [ebp + 0x258]
mov edi, dword [ebp + 0x274]
mov esi, dword [ebp + 0x264]
add edx, eax
add edx, edi
add edx, esi
mov dword [ebp + 0x120], edx
mov eax, dword [ebp + 0x270]
mov dword [ebp + 0x118], eax
call fcn.004ddf8e
mov esi, eax
add esp, 4
mov dword [esp + 0x14], esi
cmp esi, ebx
mov byte [esp + 0x24], 0xa
je 0x426c85
mov ax, word [ebp + 0x26c]
mov cx, word [ebp + 0x118]
mov edx, dword [ebp + 0x120]
push ebx
mov edi, dword [ebp + 0x11c]
push ebx
push ebx
push 0x386
push 1
push 0xa
push 2
push eax
push ecx
push ebp
push edx
push edi
mov ecx, esi
call fcn.0042aed0
mov dword [esi], 0x4f3390
mov word [esi + 0x1cc], bx
mov word [esi + 0x1ce], bx
mov dword [esi + 0x1c8], 0xffffffff
jmp 0x426c87
xor esi, esi
mov dword [ebp + 0xa4], esi
mov dword [esi + 0x1c8], 0xfd
mov ecx, dword [ebp + 0xa4]
push 1
push ebp
mov byte [esp + 0x2c], bl
mov dword [ecx + 0xbc], ebx
mov ecx, dword [ebp + 0xa4]
call fcn.0045a530
mov edx, dword [ebp + 0x128]
mov eax, dword [ebp + 0xa4]
mov ecx, dword [ebp + edx*4 + 0x214]
mov dword [eax + 0xf4], ecx
mov eax, dword [ebp + 0x128]
mov edx, dword [ebp + 0xa4]
or ecx, 0xffffffff
mov edi, dword [ebp + eax*4 + 0x234]
xor eax, eax
add edx, 0xf8
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebp + 0xa4]
mov edx, dword [ecx]
call dword [edx + 0x178]
mov eax, dword [ebp + 0xa4]
push 0x6160
mov dword [eax + 0x98], 0x186c5
mov ecx, dword [ebp + 0xa4]
mov edx, dword [ecx + 0xf4]
mov dword [ebp + 0x130], edx
call fcn.004ddf8e
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x24], 0xb
je 0x426d80
mov edx, dword [ebp + 0x274]
mov esi, dword [ebp + 0x260]
push ebx
mov ecx, edx
push 0xdac
push ebx
add ecx, esi
mov esi, dword [ebp + 0x25c]
push ebp
push 0x28
push 0x82
add edx, esi
push ecx
push edx
mov ecx, eax
call fcn.00429870
jmp 0x426d82
xor eax, eax
mov esi, 1
mov dword [ebp + 0xd8], eax
mov dword [eax + 0x6c], esi
mov ecx, dword [ebp + 0xd8]
push esi
push ebp
mov byte [esp + 0x2c], bl
call fcn.0045a530
mov edx, dword [ebp + 0xd8]
mov edi, str.Skin_Tone
mov eax, dword [edx + 0xcc]
mov dword [edx + eax*4 + 0xe0], esi
mov ecx, dword [edx + 0xcc]
mov word [edx + ecx*2 + 0x270], 0x481
mov eax, dword [edx + 0xcc]
or ecx, 0xffffffff
lea eax, [eax + eax*4]
shl eax, 4
lea esi, [eax + edx + 0x338]
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov dword [esp + 0x14], esi
mov eax, ecx
mov esi, edi
mov edi, dword [esp + 0x14]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [edx + 0xcc]
inc edi
mov dword [edx + 0xcc], edi
mov ecx, dword [ebp + 0xd8]
call fcn.00429ed0
mov ecx, dword [ebp + 0xd8]
push 0x6160
mov dword [ecx + 0x98], 0x186c7
call fcn.004ddf8e
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x24], 0xc
je 0x426e7b
mov edx, dword [ebp + 0x274]
mov edi, dword [ebp + 0x268]
mov esi, dword [ebp + 0x260]
mov ecx, edx
push ebx
add ecx, edi
push 0xdac
push ebx
add ecx, esi
mov esi, dword [ebp + 0x25c]
push ebp
push 0x28
push 0x82
add edx, esi
push ecx
push edx
mov ecx, eax
call fcn.00429870
jmp 0x426e7d
xor eax, eax
mov esi, 1
mov dword [ebp + 0xdc], eax
mov dword [eax + 0x6c], esi
mov ecx, dword [ebp + 0xdc]
push esi
push ebp
mov byte [esp + 0x2c], bl
call fcn.0045a530
mov edx, dword [ebp + 0xdc]
mov edi, str.Shirt_Color
mov eax, dword [edx + 0xcc]
mov dword [edx + eax*4 + 0xe0], esi
mov ecx, dword [edx + 0xcc]
mov word [edx + ecx*2 + 0x270], 0x481
mov eax, dword [edx + 0xcc]
or ecx, 0xffffffff
lea eax, [eax + eax*4]
shl eax, 4
lea esi, [eax + edx + 0x338]
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov dword [esp + 0x14], esi
mov eax, ecx
mov esi, edi
mov edi, dword [esp + 0x14]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [edx + 0xcc]
inc edi
mov dword [edx + 0xcc], edi
mov ecx, dword [ebp + 0xdc]
call fcn.00429ed0
mov ecx, dword [ebp + 0xdc]
push 0x6160
mov dword [ecx + 0x98], 0x186c8
call fcn.004ddf8e
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x24], 0xd
je 0x426f75
mov edx, dword [ebp + 0x274]
mov ecx, dword [ebp + 0x268]
mov esi, dword [ebp + 0x260]
push ebx
lea ecx, [edx + ecx*2]
push 0xdac
push ebx
add ecx, esi
mov esi, dword [ebp + 0x25c]
push ebp
push 0x28
push 0x82
add edx, esi
push ecx
push edx
mov ecx, eax
call fcn.00429870
jmp 0x426f77
xor eax, eax
mov esi, 1
mov dword [ebp + 0xe0], eax
mov dword [eax + 0x6c], esi
mov ecx, dword [ebp + 0xe0]
push esi
push ebp
mov byte [esp + 0x2c], bl
call fcn.0045a530
mov edx, dword [ebp + 0xe0]
mov edi, str.Pants_Color
mov eax, dword [edx + 0xcc]
mov dword [edx + eax*4 + 0xe0], esi
mov ecx, dword [edx + 0xcc]
mov word [edx + ecx*2 + 0x270], 0x481
mov eax, dword [edx + 0xcc]
or ecx, 0xffffffff
lea eax, [eax + eax*4]
shl eax, 4
lea esi, [eax + edx + 0x338]
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov dword [esp + 0x14], esi
mov eax, ecx
mov esi, edi
mov edi, dword [esp + 0x14]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [edx + 0xcc]
inc edi
mov dword [edx + 0xcc], edi
mov ecx, dword [ebp + 0xe0]
call fcn.00429ed0
mov ecx, dword [ebp + 0xe0]
push 0x6160
mov dword [ecx + 0x98], 0x186c9
call fcn.004ddf8e
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x24], 0xe
je 0x42706f
mov edx, dword [ebp + 0x274]
mov ecx, dword [ebp + 0x268]
mov esi, dword [ebp + 0x260]
push ebx
lea ecx, [edx + ecx*2]
push 0xdac
push ebx
add ecx, esi
mov esi, dword [ebp + 0x25c]
push ebp
push 0x28
push 0x82
add edx, esi
push ecx
push edx
mov ecx, eax
call fcn.00429870
jmp 0x427071
xor eax, eax
mov dword [ebp + 0xe4], eax
mov dword [eax + 0x6c], ebx
mov ecx, dword [ebp + 0xe4]
push 1
push ebp
mov byte [esp + 0x2c], bl
call fcn.0045a530
mov edx, dword [ebp + 0xe4]
mov edi, str.Skirt_Color
mov eax, dword [edx + 0xcc]
mov dword [edx + eax*4 + 0xe0], 1
mov ecx, dword [edx + 0xcc]
mov word [edx + ecx*2 + 0x270], 0x481
mov eax, dword [edx + 0xcc]
or ecx, 0xffffffff
lea eax, [eax + eax*4]
shl eax, 4
lea esi, [eax + edx + 0x338]
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov dword [esp + 0x14], esi
mov eax, ecx
mov esi, edi
mov edi, dword [esp + 0x14]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [edx + 0xcc]
inc edi
mov dword [edx + 0xcc], edi
mov ecx, dword [ebp + 0xe4]
call fcn.00429ed0
mov ecx, dword [ebp + 0xe4]
push 0x6160
mov dword [ecx + 0x98], 0x186ca
call fcn.004ddf8e
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x24], 0xf
je 0x42716b
mov esi, dword [ebp + 0x274]
mov edx, dword [ebp + 0x268]
push ebx
push 0xdac
lea ecx, [esi + edx*2]
push ebx
add edx, ecx
mov ecx, dword [ebp + 0x260]
push ebp
push 0x28
add edx, ecx
push 0x82
push edx
mov edx, dword [ebp + 0x25c]
add esi, edx
mov ecx, eax
push esi
call fcn.00429870
jmp 0x42716d
xor eax, eax
mov esi, 1
mov dword [ebp + 0xd0], eax
mov dword [eax + 0x6c], esi
mov ecx, dword [ebp + 0xd0]
push esi
push ebp
mov byte [esp + 0x2c], bl
call fcn.0045a530
mov edx, dword [ebp + 0xd0]
mov edi, str.Hair_Color
mov eax, dword [edx + 0xcc]
mov dword [edx + eax*4 + 0xe0], esi
mov ecx, dword [edx + 0xcc]
mov word [edx + ecx*2 + 0x270], 0x481
mov eax, dword [edx + 0xcc]
or ecx, 0xffffffff
lea eax, [eax + eax*4]
shl eax, 4
lea esi, [eax + edx + 0x338]
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov dword [esp + 0x14], esi
mov eax, ecx
mov esi, edi
mov edi, dword [esp + 0x14]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [edx + 0xcc]
inc edi
mov dword [edx + 0xcc], edi
mov ecx, dword [ebp + 0xd0]
call fcn.00429ed0
mov ecx, dword [ebp + 0xd0]
push 0x6160
mov dword [ecx + 0x98], 0x186c3
call fcn.004ddf8e
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x24], 0x10
je 0x427265
mov edx, dword [ebp + 0x274]
mov ecx, dword [ebp + 0x268]
mov esi, dword [ebp + 0x260]
push ebx
lea ecx, [edx + ecx*4]
push 0xdac
push ebx
add ecx, esi
mov esi, dword [ebp + 0x25c]
push ebp
push 0x28
push 0x82
add edx, esi
push ecx
push edx
mov ecx, eax
call fcn.00429870
jmp 0x427267
xor eax, eax
mov esi, 1
mov dword [ebp + 0xd4], eax
mov dword [eax + 0x6c], esi
mov ecx, dword [ebp + 0xd4]
push esi
push ebp
mov byte [esp + 0x2c], bl
call fcn.0045a530
mov edx, dword [ebp + 0xd4]
mov edi, str.Facial_Hair_Color
mov eax, dword [edx + 0xcc]
mov dword [edx + eax*4 + 0xe0], esi
mov ecx, dword [edx + 0xcc]
mov word [edx + ecx*2 + 0x270], 0x481
mov eax, dword [edx + 0xcc]
or ecx, 0xffffffff
lea eax, [eax + eax*4]
shl eax, 4
lea esi, [eax + edx + 0x338]
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov dword [esp + 0x14], esi
mov eax, ecx
mov esi, edi
mov edi, dword [esp + 0x14]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [edx + 0xcc]
inc edi
mov dword [edx + 0xcc], edi
mov ecx, dword [ebp + 0xd4]
call fcn.00429ed0
mov ecx, dword [ebp + 0xd4]
push 0xec
mov dword [ecx + 0x98], 0x186c5
call fcn.004ddf8e
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x24], 0x11
je 0x427359
mov edx, dword [ebp + 0x108]
mov ecx, dword [ebp + 0x104]
push ebx
push 0x712
push 0x710
push 0x421420
push ebx
push ebx
add edx, 0x136
push ebp
add ecx, 0x48
push edx
push ecx
mov ecx, eax
call fcn.00422990
jmp 0x42735b
xor eax, eax
mov edi, 1
mov dword [ebp + 0xb4], eax
mov dword [eax + 0xac], 0x711
mov ecx, dword [ebp + 0xb4]
push edi
push ebp
mov byte [esp + 0x2c], bl
call fcn.0045a530
mov edx, dword [ebp + 0xb4]
mov esi, 0x186c6
push 0xec
mov dword [edx + 0x6c], edi
mov eax, dword [ebp + 0xb4]
mov dword [eax + 0x98], esi
call fcn.004ddf8e
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x24], 0x12
je 0x4273e8
mov ecx, dword [ebp + 0x108]
mov edx, dword [ebp + 0x104]
push ebx
push 0x70f
push 0x70d
push 0x421420
push ebx
push ebx
add ecx, 0x136
push ebp
add edx, 0x48
push ecx
push edx
mov ecx, eax
call fcn.00422990
jmp 0x4273ea
xor eax, eax
mov dword [ebp + 0xb8], eax
mov dword [eax + 0xac], 0x70e
mov ecx, dword [ebp + 0xb8]
push edi
push ebp
mov byte [esp + 0x2c], bl
call fcn.0045a530
mov eax, dword [ebp + 0xb8]
push 0xec
mov dword [eax + 0x6c], ebx
mov ecx, dword [ebp + 0xb8]
mov dword [ecx + 0x98], esi
call fcn.004ddf8e
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x24], 0x13
je 0x427462
push ebx
push 0x15a6
push 0x15a4
push 0x41f260
push ebx
push ebx
push ebp
push 0x1bd
push 0x262
mov ecx, eax
call fcn.00422990
mov esi, eax
jmp 0x427464
xor esi, esi
push edi
push ebp
mov ecx, esi
mov byte [esp + 0x2c], bl
mov dword [esi + 0xac], 0x15a5
call fcn.0045a530
push 0xec
mov dword [esi + 0x98], 0x186cd
call fcn.004ddf8e
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x24], 0x14
je 0x4274c7
push ebx
push 0x15a3
push 0x15a1
push 0x41f3a0
push ebx
push ebx
push ebp
push 0x1bd
push 0x24a
mov ecx, eax
call fcn.00422990
mov esi, eax
jmp 0x4274c9
xor esi, esi
push edi
push ebp
mov ecx, esi
mov byte [esp + 0x2c], bl
mov dword [esi + 0xac], 0x15a2
call fcn.0045a530
push 0xec
mov dword [esi + 0x98], 0x186cc
call fcn.004ddf8e
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x24], 0x15
je 0x427529
push ebx
push 0x158e
push 0x158c
push 0x421090
push ebx
push ebx
push ebp
push 0x10c
push 0xe
mov ecx, eax
call fcn.00422990
mov esi, eax
jmp 0x42752b
xor esi, esi
push edi
push ebp
mov ecx, esi
mov byte [esp + 0x2c], bl
mov dword [esi + 0xac], 0x158d
mov dword [esi + 0xc4], edi
call fcn.0045a530
push 0xec
mov dword [esi + 0x98], 0x186a3
call fcn.004ddf8e
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x24], 0x16
je 0x427591
push ebx
push 0x1591
push 0x158f
push 0x4210b0
push ebx
push ebx
push ebp
push 0x92
push 0xe
mov ecx, eax
call fcn.00422990
mov esi, eax
jmp 0x427593
xor esi, esi
push edi
push ebp
mov ecx, esi
mov byte [esp + 0x2c], bl
mov dword [esi + 0xac], 0x1590
mov dword [esi + 0xc4], ebx
call fcn.0045a530
push 0xec
mov dword [esi + 0x98], 0x186a0
call fcn.004ddf8e
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x24], 0x17
je 0x4275f9
push ebx
push 0x158b
push 0x1589
push 0x420c10
push ebx
push ebx
push ebp
push 4
push 0x22b
mov ecx, eax
call fcn.00422990
mov esi, eax
jmp 0x4275fb
xor esi, esi
push edi
push ebp
mov ecx, esi
mov byte [esp + 0x2c], bl
mov dword [esi + 0xac], 0x158a
call fcn.0045a530
push 0xec
mov dword [esi + 0x98], 0x186ab
call fcn.004ddf8e
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x24], 0x18
je 0x42765b
push ebx
push 0x1594
push 0x1592
push 0x4210d0
push ebx
push ebx
push ebp
push 0xcd
push 0xe
mov ecx, eax
call fcn.00422990
mov esi, eax
jmp 0x42765d
xor esi, esi
push edi
push ebp
mov ecx, esi
mov byte [esp + 0x2c], bl
mov dword [esi + 0xac], 0x1593
call fcn.0045a530
push 0xec
mov dword [esi + 0x98], 0x186a1
call fcn.004ddf8e
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x24], 0x19
je 0x4276bd
push ebx
push 0x1597
push 0x1595
push 0x4210f0
push ebx
push ebx
push ebp
push 0x1b2
push 0xe
mov ecx, eax
call fcn.00422990
mov esi, eax
jmp 0x4276bf
xor esi, esi
push edi
push ebp
mov ecx, esi
mov byte [esp + 0x2c], bl
mov dword [esi + 0xac], 0x1596
call fcn.0045a530
mov dword [esi + 0x98], 0x186a2
mov edx, dword [ebp]
mov ecx, ebp
call dword [edx + 0x174]
test eax, eax
je 0x427751
push 0xec
call fcn.004ddf8e
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x24], 0x1a
je 0x42772e
push ebx
push 0x1588
push 0x1586
push 0x420f80
push ebx
push ebx
push ebp
push 0x182
push 0xe
mov ecx, eax
call fcn.00422990
mov esi, eax
jmp 0x427730
xor esi, esi
push edi
push ebp
mov ecx, esi
mov byte [esp + 0x2c], bl
mov dword [esi + 0xac], 0x1587
call fcn.0045a530
mov dword [esi + 0x98], 0x186a5
push 0xec
call fcn.004ddf8e
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x24], 0x1b
je 0x427790
push ebx
push 0x1585
push 0x1583
push 0x420c40
push ebx
push ebx
push ebp
push 0x19a
push 0xe
mov ecx, eax
call fcn.00422990
mov esi, eax
jmp 0x427792
xor esi, esi
push edi
push ebp
mov ecx, esi
mov byte [esp + 0x2c], bl
mov dword [esi + 0xac], 0x1584
call fcn.0045a530
mov ecx, ebp
mov dword [esi + 0x98], 0x186a6
call fcn.00427b20
mov ecx, dword [esp + 0x1c]
pop edi
mov eax, ebp
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x18
ret