Function at 0x480d20
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x438
mov eax, dword [0x57f7c4]
xor eax, esp
mov dword [esp + 0x434], eax
push ebx
push ebp
mov ebp, dword [esp + 0x444]
push esi
mov esi, ecx
cmp byte [esi + 0x5808], 2
push edi
mov dword [esp + 0x20], esi
ja 0x481d67
push 0x3ff
lea eax, [esp + 0x45]
push 0
push eax
mov byte [esp + 0x4c], 0
call fcn.0051d6f0
movzx eax, word [ebp]
add eax, 0xffff08ff
add esp, 0xc
cmp eax, 0xe
ja case.0x480d7d.63242
jmp dword [eax*4 + 0x481d8c]
lea eax, [ebp + 7]
mov byte [ebp + 0x1b], 0
call fcn.00414d40
mov edi, eax
test edi, edi
jne 0x480da6
push esi
mov ecx, 0xf701
call fcn.00480770
jmp 0x481d70
movzx eax, byte [ebp + 2]
cmp eax, 0x12
ja case.default.0x480daf
jmp dword [eax*4 + 0x481dc8]
mov eax, dword [ebp + 3]
cmp eax, 3
ja case.default.0x480daf
test eax, eax
jne 0x480dcc
cmp word [edi + 0x136], 0x1e
ja case.default.0x480daf
movzx ecx, byte [edi + 0x12f]
push eax
push ecx
lea edx, [esp + 0x48]
push str.Grow__d___d
push edx
call fcn.0051a8cd
mov al, byte [ebp + 3]
mov byte [edi + 0x12f], al
movzx ebx, al
add esp, 0x10
mov eax, edi
call fcn.0047abe0
push 0
push edi
xor ecx, ecx
call fcn.0049b9c0
jmp 0x481765
mov ecx, dword [ebp + 3]
cmp ecx, 0x50
ja case.default.0x480daf
cmp byte [edi + 0x12f], 0
jne 0x480e23
cmp ecx, 0x1e
ja case.default.0x480daf
movzx eax, word [edi + 0x136]
cmp ax, word [ebp + 3]
je case.default.0x480daf
push ecx
movzx eax, ax
push eax
lea ecx, [esp + 0x48]
push str.Level__d___d
push ecx
call fcn.0051a8cd
movzx eax, word [ebp + 3]
movzx ebx, word [edi + 0x136]
movzx ecx, ax
mov word [edi + 0x136], ax
movzx eax, byte [edi + 0x12f]
add esp, 0x10
dec ecx
call fcn.00464ff0
mov dword [edi + 0x13c], eax
mov dword [esp + 0x17], eax
push 7
lea eax, [esp + 0x18]
mov edx, 0xf701
push eax
mov ecx, edi
mov word [esp + 0x1c], dx
mov byte [esp + 0x1e], 0x10
call fcn.004ed0e0
movzx ecx, word [edi + 0x136]
push ecx
mov eax, ebx
mov ecx, edi
call fcn.0049bd70
push 0
push edi
xor ecx, ecx
call fcn.0049b9c0
movzx eax, byte [esi + 0x134]
cmp eax, 5
ja case.default.0x480ebb
jmp dword [eax*4 + 0x481e14]
movzx edx, word [edi + 0x16c]
mov byte [esp + 0x16], 5
mov dword [esp + 0x17], edx
jmp case.default.0x480ebb
movzx eax, word [edi + 0x174]
mov byte [esp + 0x16], 7
mov dword [esp + 0x17], eax
jmp case.default.0x480ebb
movzx ecx, word [edi + 0x16e]
mov byte [esp + 0x16], 6
jmp 0x480f24
movzx edx, word [edi + 0x176]
mov byte [esp + 0x16], 9
mov dword [esp + 0x17], edx
jmp case.default.0x480ebb
movzx eax, word [edi + 0x170]
mov byte [esp + 0x16], 8
mov dword [esp + 0x17], eax
jmp case.default.0x480ebb
movzx ecx, word [edi + 0x172]
mov byte [esp + 0x16], 0xa
mov dword [esp + 0x17], ecx
push 7
lea edx, [esp + 0x18]
push edx
mov ecx, edi
call fcn.004ed0e0
movzx ebx, word [edi + 0x136]
mov eax, edi
call fcn.0047ac20
mov eax, edi
call fcn.0047aaa0
jmp 0x481765
mov al, byte [edi + 0x12f]
test al, al
jne 0x480f86
mov eax, dword [0x589278]
cmp dword [ebp + 3], eax
ja case.default.0x480daf
mov ebx, 1
lea ecx, [ecx]
mov ecx, ebx
xor eax, eax
call fcn.00464ff0
cmp dword [ebp + 3], eax
jb 0x480fcb
inc ebx
cmp ebx, 0x1e
jl 0x480f70
jmp 0x480fcf
movzx eax, al
cmp eax, 4
mov dword [esp + 0x20], eax
jge 0x480fa0
imul eax, eax, 0x11c
mov eax, dword [eax + 0x589318]
jmp 0x480fa5
mov eax, dword [0x58931c]
cmp dword [ebp + 3], eax
ja case.default.0x480daf
mov ebx, 1
mov eax, dword [esp + 0x20]
mov ecx, ebx
call fcn.00464ff0
cmp dword [ebp + 3], eax
jb 0x480fcb
inc ebx
cmp ebx, 0x46
jl 0x480fb3
jmp 0x480fcf
mov dword [esp + 0x20], ebx
mov eax, dword [ebp + 3]
push eax
mov eax, dword [edi + 0x13c]
push eax
lea ecx, [esp + 0x48]
push str.Exp__d___d
push ecx
call fcn.0051a8cd
mov edx, dword [ebp + 3]
add esp, 0x10
mov eax, edi
mov dword [edi + 0x13c], edx
call fcn.0047aaa0
movzx ebx, word [edi + 0x136]
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x48105c
mov word [edi + 0x136], ax
mov eax, edi
call fcn.0047ac20
movzx eax, word [edi + 0x136]
push eax
mov eax, ebx
mov ecx, edi
call fcn.0049bd70
push 0
push edi
xor ecx, ecx
call fcn.0049b9c0
movzx edx, word [edi + 0x136]
mov ecx, 0xf701
push 7
lea eax, [esp + 0x18]
mov word [esp + 0x18], cx
push eax
mov ecx, edi
mov byte [esp + 0x1e], 1
mov dword [esp + 0x1f], edx
call fcn.004ed0e0
mov ebx, dword [ebp + 3]
jmp 0x481765
mov ecx, dword [ebp + 3]
mov edx, dword [edi + 0x140]
push ecx
push edx
lea eax, [esp + 0x48]
push str.Money__d___d
push eax
call fcn.0051a8cd
mov ebx, dword [ebp + 3]
add esp, 0x10
mov eax, edi
mov dword [edi + 0x140], ebx
call fcn.0047aae0
jmp 0x481765
mov eax, dword [ebp + 3]
cmp eax, 0x6fff
ja case.default.0x480daf
movzx ecx, word [edi + 0x138]
push eax
push ecx
lea edx, [esp + 0x48]
push str.StatPoint__d___d
push edx
call fcn.0051a8cd
movzx eax, word [ebp + 3]
mov word [edi + 0x138], ax
movzx ebx, ax
add esp, 0x10
mov eax, edi
call fcn.0047ac60
jmp 0x481765
mov eax, dword [ebp + 3]
cmp eax, 0x6fff
ja case.default.0x480daf
push eax
movzx eax, word [edi + 0x13a]
push eax
lea ecx, [esp + 0x48]
push str.SkillPoint__d___d
push ecx
call fcn.0051a8cd
movzx eax, word [ebp + 3]
mov word [edi + 0x13a], ax
movzx ebx, ax
add esp, 0x10
mov eax, edi
call fcn.0047aca0
jmp 0x481765
mov ecx, dword [ebp + 3]
cmp ecx, 0x6fff
ja case.default.0x480daf
movzx eax, word [edi + 0x16c]
cmp cx, ax
je case.default.0x480daf
movzx edx, ax
push ecx
push edx
lea eax, [esp + 0x48]
push str.STR__d___d
push eax
call fcn.0051a8cd
movzx ecx, word [edi + 0x16c]
movzx eax, word [ebp + 3]
sub eax, ecx
add word [edi + 0x16c], ax
movzx ecx, word [edi + 0x16c]
add dword [edi + 0x121c], eax
add esp, 0x10
mov esi, edi
movzx ebx, cx
call fcn.00460e40
mov eax, dword [edi + 0x582c]
push 9
lea ecx, [esp + 0x18]
mov edx, 0x610
push ecx
mov ecx, dword [0x58796c]
mov word [esp + 0x1c], dx
mov dword [esp + 0x1e], eax
mov byte [esp + 0x22], 1
mov word [esp + 0x23], bx
call fcn.004ed2d0
mov esi, dword [esp + 0x20]
jmp 0x481765
mov ecx, dword [ebp + 3]
cmp ecx, 0x6fff
ja case.default.0x480daf
movzx eax, word [edi + 0x16e]
cmp cx, ax
je case.default.0x480daf
movzx edx, ax
push ecx
push edx
lea eax, [esp + 0x48]
push str.DEX__d___d
push eax
call fcn.0051a8cd
movzx ecx, word [edi + 0x16e]
movzx eax, word [ebp + 3]
sub eax, ecx
add word [edi + 0x16e], ax
movzx ecx, word [edi + 0x16e]
add dword [edi + 0x1220], eax
add esp, 0x10
mov esi, edi
mov dword [esp + 0x14], eax
movzx ebx, cx
call fcn.00460e40
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x20]
lea edx, [eax + eax*4]
add dword [esi + 0x180], edx
call fcn.00490960
push 0
xor edx, edx
xor ecx, ecx
mov eax, esi
call fcn.00490da0
mov eax, 0x610
mov ecx, dword [edi + 0x582c]
mov word [esp + 0x24], ax
mov dword [esp + 0x26], ecx
mov byte [esp + 0x2a], 2
mov word [esp + 0x2b], bx
push 9
lea edx, [esp + 0x28]
jmp 0x481759
mov ecx, dword [ebp + 3]
cmp ecx, 0x6fff
ja case.default.0x480daf
movzx eax, word [edi + 0x174]
cmp cx, ax
je case.default.0x480daf
push ecx
movzx eax, ax
push eax
lea ecx, [esp + 0x48]
push str.REC__d___d
push ecx
call fcn.0051a8cd
movzx eax, word [ebp + 3]
movzx edx, word [edi + 0x174]
sub eax, edx
add word [edi + 0x174], ax
movzx ecx, word [edi + 0x174]
add dword [edi + 0x122c], eax
add esp, 0x10
mov esi, edi
mov dword [esp + 0x14], eax
movzx ebx, cx
call fcn.00460e40
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x20]
lea eax, [eax + eax*4]
add dword [esi + 0x178], eax
call fcn.00490830
push 0
xor edx, edx
xor ecx, ecx
mov eax, esi
call fcn.00490da0
mov edx, dword [edi + 0x582c]
mov ecx, 0x610
push 9
lea eax, [esp + 0x28]
mov word [esp + 0x28], cx
mov dword [esp + 0x2a], edx
mov byte [esp + 0x2e], 5
mov word [esp + 0x2f], bx
push eax
jmp 0x48175a
mov ecx, dword [ebp + 3]
cmp ecx, 0x6fff
ja case.default.0x480daf
movzx eax, word [edi + 0x170]
cmp cx, ax
je case.default.0x480daf
push ecx
movzx ecx, ax
push ecx
lea edx, [esp + 0x48]
push str.INT__d___d
push edx
call fcn.0051a8cd
movzx ecx, word [edi + 0x170]
movzx eax, word [ebp + 3]
sub eax, ecx
add word [edi + 0x170], ax
movzx ecx, word [edi + 0x170]
add dword [edi + 0x1224], eax
add esp, 0x10
mov esi, edi
movzx ebx, cx
call fcn.00460e40
mov byte [esp + 0x2a], 3
mov eax, dword [edi + 0x582c]
push 9
lea ecx, [esp + 0x28]
mov edx, 0x610
push ecx
mov ecx, dword [0x58796c]
mov dword [esp + 0x2e], eax
mov word [esp + 0x2c], dx
mov word [esp + 0x33], bx
call fcn.004ed2d0
mov esi, dword [esp + 0x20]
jmp 0x481765
mov ecx, dword [ebp + 3]
cmp ecx, 0x6fff
ja case.default.0x480daf
movzx eax, word [edi + 0x176]
cmp cx, ax
je case.default.0x480daf
movzx edx, ax
push ecx
push edx
lea eax, [esp + 0x48]
push str.LUC__d___d
push eax
call fcn.0051a8cd
movzx ecx, word [edi + 0x176]
movzx eax, word [ebp + 3]
sub eax, ecx
add word [edi + 0x176], ax
movzx ecx, word [edi + 0x176]
add dword [edi + 0x1230], eax
add esp, 0x10
mov esi, edi
movzx ebx, cx
call fcn.00460e40
mov byte [esp + 0x2a], 6
jmp 0x48137f
mov ecx, dword [ebp + 3]
cmp ecx, 0x6fff
ja case.default.0x480daf
movzx eax, word [edi + 0x172]
cmp cx, ax
je case.default.0x480daf
movzx edx, ax
push ecx
push edx
lea eax, [esp + 0x48]
push str.WIS__d___d
push eax
call fcn.0051a8cd
movzx ecx, word [edi + 0x172]
movzx eax, word [ebp + 3]
sub eax, ecx
add word [edi + 0x172], ax
movzx ecx, word [edi + 0x172]
add dword [edi + 0x1228], eax
add esp, 0x10
mov esi, edi
mov dword [esp + 0x14], eax
movzx ebx, cx
call fcn.00460e40
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x20]
lea edx, [eax + eax*4]
add dword [esi + 0x17c], edx
call fcn.00490a70
push 0
xor edx, edx
xor ecx, ecx
mov eax, esi
call fcn.00490da0
mov ecx, dword [edi + 0x582c]
mov eax, 0x610
mov word [esp + 0x24], ax
mov dword [esp + 0x26], ecx
mov byte [esp + 0x2a], 4
mov word [esp + 0x2b], bx
push 9
lea edx, [esp + 0x28]
jmp 0x481759
mov eax, dword [ebp + 3]
cmp eax, 0xffff
ja case.default.0x480daf
push eax
movzx eax, word [edi + 0x164]
push eax
lea ecx, [esp + 0x48]
push str.HG__d___d
push ecx
call fcn.0051a8cd
movzx eax, word [ebp + 3]
add esp, 0x10
movzx ebx, ax
mov word [edi + 0x164], ax
mov eax, dword [edi + 0x582c]
mov edx, 0x605
push 9
lea ecx, [esp + 0x28]
mov word [esp + 0x28], dx
mov dword [esp + 0x2a], eax
mov byte [esp + 0x2e], 1
mov word [esp + 0x2f], bx
push ecx
jmp 0x48175a
mov eax, dword [ebp + 3]
cmp eax, 0x6fff
ja case.default.0x480daf
movsx edx, word [edi + 0x166]
push eax
push edx
lea eax, [esp + 0x48]
push str.VG__d___d
push eax
call fcn.0051a8cd
movzx eax, word [ebp + 3]
mov word [edi + 0x166], ax
movsx ebx, ax
mov edx, dword [edi + 0x582c]
add esp, 0x10
mov ecx, 0x605
push 9
lea eax, [esp + 0x28]
mov word [esp + 0x28], cx
mov dword [esp + 0x2a], edx
mov byte [esp + 0x2e], 2
mov word [esp + 0x2f], bx
push eax
jmp 0x48175a
mov eax, dword [ebp + 3]
cmp eax, 0x100
ja case.default.0x480daf
movzx ecx, byte [edi + 0x168]
push eax
push ecx
lea edx, [esp + 0x48]
push str.CG__d___d
push edx
call fcn.0051a8cd
mov al, byte [ebp + 3]
mov byte [edi + 0x168], al
movzx ebx, al
add esp, 0x10
mov eax, 0x605
jmp 0x481243
mov eax, dword [ebp + 3]
cmp eax, 0x100
ja case.default.0x480daf
push eax
movzx eax, byte [edi + 0x169]
push eax
lea ecx, [esp + 0x48]
push str.OG__d___d
push ecx
call fcn.0051a8cd
mov al, byte [ebp + 3]
add esp, 0x10
movzx ebx, al
mov byte [edi + 0x169], al
mov eax, dword [edi + 0x582c]
mov edx, 0x605
push 9
lea ecx, [esp + 0x28]
mov word [esp + 0x28], dx
mov dword [esp + 0x2a], eax
mov byte [esp + 0x2e], 2
mov word [esp + 0x2f], bx
push ecx
jmp 0x48175a
mov eax, dword [ebp + 3]
cmp eax, 0x100
ja case.default.0x480daf
movzx edx, byte [edi + 0x16a]
push eax
push edx
lea eax, [esp + 0x48]
push str.IG__d___d
push eax
call fcn.0051a8cd
mov al, byte [ebp + 3]
mov byte [edi + 0x16a], al
movzx ebx, al
jmp 0x481564
mov eax, dword [0x582224]
cmp dword [ebp + 3], eax
jb 0x481673
mov dword [ebp + 3], eax
mov ecx, dword [ebp + 3]
mov edx, dword [edi + 0x148]
push ecx
push edx
lea eax, [esp + 0x48]
push str.KillCount__d___d
push eax
call fcn.0051a8cd
mov ecx, dword [ebp + 3]
mov eax, dword [edi + 0x582c]
add esp, 0x10
mov edx, 0x60c
mov word [esp + 0x14], dx
mov dword [edi + 0x148], ecx
mov ebx, dword [ebp + 3]
push 0xb
lea edx, [esp + 0x18]
mov dword [esp + 0x1f], ecx
mov ecx, dword [0x58796c]
push edx
mov dword [esp + 0x1e], eax
mov byte [esp + 0x22], 0
call fcn.004ed2d0
mov ecx, dword [esi + 0xdc]
mov edx, dword [edi + 0x148]
mov eax, 0x522
mov word [esp + 0x24], ax
lea eax, [esp + 0x24]
mov dword [esp + 0x26], ecx
mov dword [esp + 0x2a], edx
push eax
lea ecx, [esi + 0xd0]
mov edx, 0xa
call fcn.004d5250
jmp 0x481765
mov eax, dword [0x5823ac]
cmp dword [ebp + 3], eax
jb 0x48170d
mov dword [ebp + 3], eax
mov ecx, dword [ebp + 3]
mov edx, dword [edi + 0x14c]
push ecx
push edx
lea eax, [esp + 0x48]
push str.DeathCount__d___d
push eax
call fcn.0051a8cd
mov ecx, dword [ebp + 3]
mov eax, dword [edi + 0x582c]
mov edx, 0x60c
add esp, 0x10
mov dword [edi + 0x14c], ecx
mov ebx, dword [ebp + 3]
mov word [esp + 0x24], dx
mov dword [esp + 0x26], eax
mov byte [esp + 0x2a], 1
mov dword [esp + 0x2b], ecx
push 0xb
lea edx, [esp + 0x28]
push edx
mov ecx, dword [0x58796c]
call fcn.004ed2d0
mov cl, byte [ebp + 2]
push 7
lea edx, [esp + 0x3c]
mov eax, 0xf701
mov byte [esp + 0x3e], cl
push edx
mov ecx, edi
mov word [esp + 0x40], ax
mov dword [esp + 0x43], ebx
call fcn.004ed0e0
push esi
call fcn.004807a0
lea eax, [esp + 0x40]
lea ebx, [edi + 0x184]
push eax
mov edi, str.SetStatus
mov ecx, esi
call fcn.00480990
jmp 0x481d70
movzx eax, byte [ebp + 2]
cmp eax, 1
jl 0x481d70
movzx ecx, byte [ebp + 3]
call fcn.004059b0
mov edi, eax
test edi, edi
je 0x481d70
movzx eax, byte [ebp + 4]
test eax, eax
jle 0x4817df
push eax
push edi
mov ecx, esi
call fcn.0046bd10
test al, al
jne 0x4817ef
push esi
mov ecx, 0xf702
call fcn.00480770
jmp 0x481d70
push esi
call fcn.004807a0
movzx ecx, byte [ebp + 4]
push ecx
add edi, 4
push edi
lea edx, [esp + 0x48]
push str.name_s_count_d
push edx
call fcn.0051a8cd
add esp, 0x10
lea eax, [esp + 0x40]
push eax
mov ebx, 0x571e2f
mov edi, str.ItemCreate
mov ecx, esi
call fcn.00480990
jmp 0x481d70
lea eax, [ebp + 2]
mov byte [ebp + 0x16], 0
call fcn.00414db0
mov dword [esp + 0x14], eax
test eax, eax
je 0x4818ae
mov ecx, esi
call fcn.00457cf0
test al, al
je 0x4818ae
movzx ebx, byte [ebp + 0x17]
cmp ebx, 1
jl 0x4818ae
movzx edi, byte [ebp + 0x18]
mov ecx, edi
mov eax, ebx
call fcn.004059b0
mov ebp, eax
test ebp, ebp
je 0x4818ae
push edi
mov edi, dword [esp + 0x18]
push ebx
push edi
call fcn.0046c6a0
test al, al
je 0x4818ae
push esi
call fcn.004807a0
add ebp, 4
push ebp
lea ecx, [esp + 0x44]
push str.name_s
push ecx
call fcn.0051a8cd
add esp, 0xc
lea edx, [esp + 0x40]
lea ebx, [edi + 0x184]
push edx
mov edi, str.ItemRemove
mov ecx, esi
call fcn.00480990
jmp 0x481d70
push esi
mov ecx, 0xf703
call fcn.00480770
jmp 0x481d70
cmp dword [esi + 0xe0], 0
je 0x481945
mov al, 0x14
cmp byte [ebp + 4], al
jbe 0x4818d1
mov byte [ebp + 4], al
movzx edi, word [ebp + 2]
mov eax, edi
mov ecx, 0x587c68
call fcn.00408c00
mov dword [esp + 0x14], eax
test eax, eax
je 0x481945
mov ecx, dword [esi + 0xe0]
movzx eax, byte [ebp + 4]
push ecx
lea ebx, [esi + 0xd0]
mov ecx, edi
call fcn.004245a0
test al, al
je 0x481945
push esi
call fcn.004807a0
movzx edx, byte [ebp + 4]
mov eax, dword [esp + 0x14]
push edx
add eax, 2
push eax
lea ecx, [esp + 0x48]
push str.name_s_count_d
push ecx
call fcn.0051a8cd
add esp, 0x10
lea edx, [esp + 0x40]
push edx
mov ebx, 0x571e2f
mov edi, str.MobCreate
mov ecx, esi
call fcn.00480990
jmp 0x481d70
push esi
mov ecx, 0xf704
call fcn.00480770
jmp 0x481d70
cmp dword [esi + 0xe0], 0
je 0x481a40
mov al, 0x14
cmp byte [ebp + 4], al
jbe 0x48196c
mov byte [ebp + 4], al
movzx edi, word [ebp + 2]
mov eax, edi
mov ecx, 0x587c68
call fcn.00408c00
mov dword [esp + 0x14], eax
test eax, eax
je 0x481a40
mov ecx, dword [esi + 0xe0]
movzx eax, byte [ebp + 4]
push ecx
lea ebx, [esi + 0xd0]
mov ecx, edi
call fcn.004245a0
test al, al
je 0x481a40
mov cl, byte [ebp + 4]
fld dword [ebx]
mov ax, word [ebp + 2]
mov edx, 0x818
mov word [esp + 0x24], dx
mov edx, dword [esi + 0xe0]
mov byte [esp + 0x28], cl
mov word [esp + 0x26], ax
mov eax, dword [edx + 0x28]
mov cx, word [eax + 0x78]
fstp dword [esp + 0x2b]
fld dword [esi + 0xd4]
push 0x13
fstp dword [esp + 0x33]
lea edx, [esp + 0x28]
fld dword [esi + 0xd8]
mov word [esp + 0x2d], cx
mov ecx, dword [0x587968]
fstp dword [esp + 0x37]
push edx
call fcn.004ed2d0
push esi
call fcn.004807a0
movzx eax, byte [ebp + 4]
mov ecx, dword [esp + 0x14]
push eax
add ecx, 2
push ecx
lea edx, [esp + 0x48]
push str.name_s_count_d
push edx
call fcn.0051a8cd
add esp, 0x10
lea eax, [esp + 0x40]
push eax
mov ebx, 0x571e2f
mov edi, str.MobCreateAll
mov ecx, esi
call fcn.00480990
jmp 0x481d70
push esi
mov ecx, 0xf70f
call fcn.00480770
jmp 0x481d70
cmp dword [esi + 0xe0], 0
je 0x481ad4
movzx edi, word [ebp + 2]
mov eax, edi
mov ecx, 0x587c68
call fcn.00408c00
mov ebx, eax
test ebx, ebx
je 0x481ad4
movzx edx, byte [ebp + 4]
mov eax, dword [esi + 0xe0]
lea ecx, [esi + 0xd0]
push ecx
mov ecx, dword [esi + 0xe8]
push edx
mov edx, dword [esi + 0xe4]
push edi
push eax
call fcn.00424c30
test al, al
je 0x481ad4
push esi
call fcn.004807a0
movzx eax, byte [ebp + 4]
push eax
add ebx, 2
push ebx
lea ecx, [esp + 0x48]
push str.name_s_count_d
push ecx
call fcn.0051a8cd
add esp, 0x10
lea edx, [esp + 0x40]
push edx
mov ebx, 0x571e2f
mov edi, str.MobRemove
mov ecx, esi
call fcn.00480990
jmp 0x481d70
push esi
mov ecx, 0xf705
call fcn.00480770
jmp 0x481d70
mov ecx, dword [esi + 0xe0]
test ecx, ecx
je 0x481b1c
mov eax, dword [ebp + 2]
push eax
call fcn.00425430
test al, al
je 0x481b1c
push esi
call fcn.004807a0
lea ecx, [esp + 0x40]
push ecx
mov ebx, 0x571e2f
mov edi, str.PickMobRemove
mov ecx, esi
call fcn.00480990
jmp 0x481d70
push esi
mov ecx, 0xf70e
call fcn.00480770
jmp 0x481d70
cmp dword [esi + 0xe0], 0
je 0x481bc0
movzx edi, word [ebp + 3]
movzx ebp, byte [ebp + 2]
mov eax, edi
mov ecx, ebp
call fcn.00424450
mov ebx, eax
test ebx, ebx
je 0x481bc0
fld dword [esi + 0xd0]
mov ecx, dword [esi + 0xe0]
fstp dword [esp + 0x24]
push edi
fld dword [esi + 0xd4]
push ebp
fsub qword [0x574220]
lea edi, [esp + 0x2c]
fstp dword [esp + 0x30]
fld dword [esi + 0xd8]
fstp dword [esp + 0x34]
call fcn.004255d0
test al, al
je 0x481bc0
push esi
call fcn.004807a0
add ebx, 0x14
push ebx
lea edx, [esp + 0x44]
push str.name_s
push edx
call fcn.0051a8cd
add esp, 0xc
lea eax, [esp + 0x40]
push eax
mov ebx, 0x571e2f
mov edi, str.NpcCreate
mov ecx, esi
call fcn.00480990
jmp 0x481d70
push esi
mov ecx, 0xf70c
call fcn.00480770
jmp 0x481d70
cmp dword [esi + 0xe0], 0
je 0x481c57
movzx edi, word [ebp + 3]
movzx ebx, byte [ebp + 2]
mov eax, edi
mov ecx, ebx
call fcn.00424450
mov dword [esp + 0x14], eax
test eax, eax
je 0x481c57
movzx edx, byte [ebp + 5]
mov eax, dword [esi + 0xe0]
lea ecx, [esi + 0xd0]
push ecx
mov ecx, dword [esi + 0xe4]
push edx
push edi
push ebx
push eax
mov eax, dword [esi + 0xe8]
call fcn.004257a0
test al, al
je 0x481c57
push esi
call fcn.004807a0
mov eax, dword [esp + 0x14]
add eax, 0x14
push eax
lea ecx, [esp + 0x44]
push str.name_s
push ecx
call fcn.0051a8cd
add esp, 0xc
lea edx, [esp + 0x40]
push edx
mov ebx, 0x571e2f
mov edi, str.NpcRemove
mov ecx, esi
call fcn.00480990
jmp 0x481d70
push esi
mov ecx, 0xf70d
call fcn.00480770
jmp 0x481d70
mov ecx, 0x109e8a0
call fcn.004e9980
mov cl, byte [0x5827c8]
cmp byte [0x109e8c4], 0
mov eax, 0x204
mov word [esp + 0x14], ax
push 5
lea eax, [esp + 0x18]
mov byte [esp + 0x1b], cl
mov ecx, dword [0x587968]
sete dl
push eax
mov byte [esp + 0x1e], 4
mov byte [esp + 0x20], dl
call fcn.004ed2d0
push esi
call fcn.004807a0
mov edi, str.ServerOpen
mov edx, esi
call fcn.004807d0
jmp 0x481d70
mov ecx, 0x109e8a0
call fcn.004e9aa0
cmp byte [0x109e8c4], 0
mov dl, byte [0x5827c8]
mov ecx, 0x204
mov word [esp + 0x14], cx
push 5
lea ecx, [esp + 0x18]
sete al
push ecx
mov ecx, dword [0x587968]
mov byte [esp + 0x1f], dl
mov byte [esp + 0x1e], 4
mov byte [esp + 0x20], al
call fcn.004ed2d0
push esi
call fcn.004807a0
mov edi, str.ServerLock
mov edx, esi
call fcn.004807d0
jmp 0x481d70
push esi
mov ecx, 0xf708
call fcn.00480770
jmp 0x481d70
mov byte [ebp + 0x21], 0
add ebp, 2
mov eax, ebp
call fcn.00414c90
test eax, eax
jne 0x481d44
push esi
mov ecx, 0xf709
call fcn.00480770
jmp 0x481d70
push 0
push 9
mov ecx, eax
call fcn.004ec760
push esi
call fcn.004807a0
mov ebx, ebp
mov edi, str.UserKick
mov ecx, esi
call fcn.004808a0
jmp 0x481d70
mov ecx, esi
push 0
push 9
call fcn.004ec760
mov ecx, dword [esp + 0x444]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0051a8be
add esp, 0x438
ret 4