Function at 0x448090
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x68fc2e
mov eax, dword fs:[0]
push eax
sub esp, 0xa4
push ebx
push ebp
push esi
push edi
mov eax, dword [0x70c004]
xor eax, esp
push eax
lea eax, [esp + 0xb8]
mov dword fs:[0], eax
mov edi, ecx
push 0x550
call fcn.0045c111
add esp, 4
mov dword [esp + 0x44], eax
xor esi, esi
mov dword [esp + 0xc0], esi
cmp eax, esi
je 0x4480ef
mov ecx, dword [edi + 8]
push ecx
push eax
call fcn.00451320
jmp 0x4480f1
xor eax, eax
or ebp, 0xffffffff
mov dword [esp + 0xc0], ebp
mov dword [edi + 0xc], eax
mov eax, dword [edi + 8]
lea ecx, [eax + 0x80918]
call fcn.0046f4f8
mov ecx, eax
call fcn.004741a6
fstp dword [esp + 0x38]
mov eax, dword [edi + 8]
lea ecx, [esp + 0x3c]
push ecx
lea ecx, [eax + 0x80918]
call fcn.0046f4f8
mov ecx, eax
call fcn.00474569
mov eax, dword [edi + 8]
mov edx, dword [edi + 0x10]
lea ecx, [edi + 0x10]
mov dword [edi + 0x18], eax
mov eax, dword [edx]
call eax
mov eax, dword [edi + 0xc]
mov dword [edi + 0x1c], eax
mov al, byte [edi + 0x2fc7ff]
mov byte [edi + 0x14f8], al
mov eax, dword [edi + 0x2fc7ec]
sub eax, esi
je 0x448202
sub eax, 1
jne 0x448287
lea ebx, [edi + 0x2c]
push 1
mov eax, ebx
call fcn.0044fd00
cmp dword [eax], esi
je 0x44818c
push 1
mov eax, ebx
call fcn.0044fd00
mov ecx, dword [eax]
mov edx, dword [ecx]
mov eax, dword [edx + 0x74]
call eax
mov ebx, 0x10
push ebx
mov ebp, 0xf
push str.obje000_001.bmp
lea ecx, [esp + 0x64]
mov dword [esp + 0x7c], ebp
mov dword [esp + 0x78], esi
mov byte [esp + 0x68], 0
call fcn.004051a0
push esi
push 1
mov dword [esp + 0xc8], 2
mov edx, dword [edi + 0x1500]
mov edx, dword [edx + 0x140]
lea ecx, [edi + 0x1500]
push 0x15
lea eax, [esp + 0x68]
push eax
call edx
mov dword [esp + 0xc0], 0xffffffff
cmp dword [esp + 0x74], ebx
jb 0x448291
mov eax, dword [esp + 0x60]
push eax
call fcn.0045c06d
add esp, 4
jmp 0x448291
lea ebx, [edi + 0x2c]
push esi
mov eax, ebx
call fcn.0044fd00
cmp dword [eax], esi
je 0x448222
push esi
mov eax, ebx
call fcn.0044fd00
mov ecx, dword [eax]
mov edx, dword [ecx]
mov eax, dword [edx + 0x74]
call eax
push 0x10
push str.obje000_000.bmp
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], esi
mov byte [esp + 0x28], 0
call fcn.004051a0
push esi
push 1
mov dword [esp + 0xc8], 1
mov edx, dword [edi + 0x1500]
mov edx, dword [edx + 0x140]
lea ecx, [edi + 0x1500]
push 0x15
lea eax, [esp + 0x28]
push eax
call edx
mov dword [esp + 0xc0], ebp
cmp dword [esp + 0x34], 0x10
jb 0x448287
mov eax, dword [esp + 0x20]
push eax
call fcn.0045c06d
add esp, 4
mov ebp, 0xf
mov ebx, 0x10
push ebx
push str.obje001_000.bmp
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x38], esi
mov byte [esp + 0x28], 0
call fcn.004051a0
push esi
push 1
mov dword [esp + 0xc8], 3
mov edx, dword [edi + 0x1628]
mov edx, dword [edx + 0x140]
lea ecx, [edi + 0x1628]
push 0x15
lea eax, [esp + 0x28]
push eax
call edx
mov dword [esp + 0xc0], 0xffffffff
cmp dword [esp + 0x34], ebx
jb 0x4482f4
mov eax, dword [esp + 0x20]
push eax
call fcn.0045c06d
add esp, 4
push ebx
push str.obje002_000.bmp
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x38], esi
mov byte [esp + 0x28], 0
call fcn.004051a0
push 0
push 1
mov dword [esp + 0xc8], 4
mov edx, dword [edi + 0x16bc]
mov edx, dword [edx + 0x140]
lea esi, [edi + 0x16bc]
push 0x15
lea eax, [esp + 0x28]
push eax
mov ecx, esi
call edx
mov dword [esp + 0xc0], 0xffffffff
cmp dword [esp + 0x34], ebx
jb 0x44835a
mov eax, dword [esp + 0x20]
push eax
call fcn.0045c06d
add esp, 4
mov ecx, 2
push ecx
mov eax, 1
push eax
push esi
lea ecx, [edi + 0x1750]
call fcn.004c3ce9
push 0x14
xor esi, esi
push str.MsgWinSquareFilename
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x38], esi
mov byte [esp + 0x28], 0
call fcn.004051a0
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x60]
push edx
mov dword [esp + 0xc8], 5
call fcn.0046f7b8
mov ecx, eax
call fcn.004704b6
push esi
push 1
mov byte [esp + 0xc8], 6
mov edx, dword [edi + 0x1760]
lea ecx, [edi + 0x1760]
push 0x15
push eax
mov eax, dword [edx + 0x140]
call eax
cmp dword [esp + 0x74], ebx
jb 0x4483e7
mov ecx, dword [esp + 0x60]
push ecx
call fcn.0045c06d
add esp, 4
mov dword [esp + 0xc0], 0xffffffff
mov dword [esp + 0x74], ebp
mov dword [esp + 0x70], esi
mov byte [esp + 0x60], 0
cmp dword [esp + 0x34], ebx
jb 0x448412
mov edx, dword [esp + 0x20]
push edx
call fcn.0045c06d
add esp, 4
mov eax, dword [edi + 8]
push ebx
push str.obje007_000.bmp
lea ecx, [esp + 0x24]
mov dword [edi + 0x1f98], eax
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x38], esi
mov byte [esp + 0x28], 0
call fcn.004051a0
push esi
push 1
mov dword [esp + 0xc8], 7
mov eax, dword [edi + 0x1efc]
mov eax, dword [eax + 0x140]
lea ecx, [edi + 0x1efc]
push 0x15
lea edx, [esp + 0x28]
push edx
call eax
mov dword [esp + 0xc0], 0xffffffff
cmp dword [esp + 0x34], ebx
jb 0x44847e
mov ecx, dword [esp + 0x20]
push ecx
call fcn.0045c06d
add esp, 4
xor ebx, ebx
mov dword [esp + 0x48], 4
mov dword [esp + 0x50], 5
lea esi, [edi + 0x1fc4]
mov eax, dword [esp + 0x48]
push eax
xor eax, eax
push eax
mov ecx, dword [esp + 0x58]
mov edx, dword [esi]
mov edx, dword [edx + 0x84]
mov eax, 3
push eax
xor eax, eax
push eax
mov eax, 2
push eax
xor eax, eax
push eax
mov eax, 1
push eax
xor eax, eax
push eax
push eax
push eax
push ecx
mov eax, 1
push eax
lea eax, [edi + 0x1efc]
push eax
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0x18]
push 0
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 8]
push 1
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 0xc]
push 0
mov ecx, esi
call edx
mov eax, ebx
cdq
and edx, 3
add eax, edx
sar eax, 2
mov dword [esp + 0x18], eax
fild dword [esp + 0x18]
fmul qword [0x6d00f8]
fadd qword [0x6d0190]
fld dword [esp + 0x38]
fld st(0)
fmulp st(2)
fxch st(1)
call fcn.0064b350
mov ebp, eax
mov eax, ebx
and eax, 0x80000003
jns 0x448538
dec eax
or eax, 0xfffffffc
inc eax
mov dword [esp + 0x18], eax
fild dword [esp + 0x18]
fmul qword [0x6d00f0]
fadd qword [0x6d0470]
fmulp st(1)
call fcn.0064b350
mov edx, dword [esi]
push eax
mov eax, dword [edx + 0x2c]
push ebp
mov ecx, esi
call eax
fld dword [esp + 0x38]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x3c]
push ecx
push edx
push ecx
mov ecx, esi
fstp dword [esp]
call fcn.004c32e5
push 0
push esi
lea eax, [edi + 0x1f90]
push eax
call fcn.0044e770
inc ebx
add esi, 0x84
cmp ebx, 8
jb 0x448496
mov eax, dword [edi + 8]
mov esi, 0x10
push esi
mov ebx, 0xf
push str.obje009_000.bmp
lea ecx, [esp + 0x24]
mov dword [edi + 0x1fbc], 2
mov dword [edi + 0x28a0], eax
mov dword [edi + 0x2d88], eax
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x38], 0
mov byte [esp + 0x28], 0
call fcn.004051a0
push 0
push 1
mov dword [esp + 0xc8], 8
mov eax, dword [edi + 0x23e4]
mov eax, dword [eax + 0x140]
lea ecx, [edi + 0x23e4]
push 0x15
lea edx, [esp + 0x28]
push edx
call eax
or ebp, 0xffffffff
mov dword [esp + 0xc0], ebp
cmp dword [esp + 0x34], esi
jb 0x448620
mov ecx, dword [esp + 0x20]
push ecx
call fcn.0045c06d
add esp, 4
mov dword [esp + 0x34], ebx
push esi
xor ebx, ebx
push str.obje009_001.bmp
lea ecx, [esp + 0x24]
mov dword [esp + 0x38], ebx
mov byte [esp + 0x28], bl
call fcn.004051a0
push ebx
push 1
mov dword [esp + 0xc8], 9
mov edx, dword [edi + 0x28cc]
mov edx, dword [edx + 0x140]
lea ecx, [edi + 0x28cc]
push 0x15
lea eax, [esp + 0x28]
push eax
call edx
mov dword [esp + 0xc0], ebp
cmp dword [esp + 0x34], esi
jb 0x448680
mov eax, dword [esp + 0x20]
push eax
call fcn.0045c06d
add esp, 4
lea esi, [edi + 0x2478]
mov eax, 4
push eax
xor eax, eax
push eax
mov edx, dword [esi]
mov eax, 3
push eax
xor eax, eax
push eax
mov eax, 2
push eax
xor eax, eax
push eax
mov eax, 1
push eax
xor eax, eax
push eax
push eax
push eax
mov eax, 5
push eax
mov eax, 1
push eax
lea eax, [edi + 0x23e4]
push eax
mov eax, dword [edx + 0x84]
mov ecx, esi
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x18]
push 0
mov ecx, esi
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0xc]
push 1
mov ecx, esi
call eax
mov eax, ebx
cdq
and edx, 3
add eax, edx
sar eax, 2
mov dword [esp + 0x18], eax
fild dword [esp + 0x18]
fmul qword [0x6d00f8]
fst qword [esp + 0x44]
fadd qword [0x6d0468]
fld dword [esp + 0x38]
fld st(0)
fmulp st(2)
fxch st(1)
call fcn.0064b350
mov ecx, ebx
and ecx, 0x80000003
mov ebp, eax
jns 0x448724
dec ecx
or ecx, 0xfffffffc
inc ecx
mov dword [esp + 0x18], ecx
fild dword [esp + 0x18]
fmul qword [0x6d00f0]
fst qword [esp + 0x4c]
fadd qword [0x6d0460]
fmulp st(1)
call fcn.0064b350
mov edx, dword [esi]
push eax
mov eax, dword [edx + 0x2c]
push ebp
mov ecx, esi
call eax
fld dword [esp + 0x38]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x3c]
push ecx
push edx
push ecx
mov ecx, esi
fstp dword [esp]
call fcn.004c32e5
push 0
push esi
lea eax, [edi + 0x2898]
push eax
call fcn.0044e770
mov eax, 4
push eax
xor eax, eax
push eax
mov edx, dword [esi + 0x4e8]
mov eax, 3
push eax
xor eax, eax
push eax
mov eax, 2
push eax
xor eax, eax
push eax
mov eax, 1
push eax
xor eax, eax
push eax
push eax
push eax
mov eax, 5
push eax
mov eax, 1
push eax
lea ebp, [esi + 0x4e8]
lea eax, [edi + 0x28cc]
push eax
mov eax, dword [edx + 0x84]
mov ecx, ebp
call eax
mov edx, dword [ebp]
mov eax, dword [edx + 0x18]
push 1
mov ecx, ebp
call eax
fld qword [esp + 0x44]
fadd qword [0x6d00f8]
fld dword [esp + 0x38]
fld st(0)
fmulp st(2)
fxch st(1)
call fcn.0064b350
fld qword [esp + 0x4c]
fadd qword [0x6d0458]
mov dword [esp + 0x54], eax
fmulp st(1)
call fcn.0064b350
mov edx, dword [ebp]
mov edx, dword [edx + 0x2c]
push eax
mov eax, dword [esp + 0x58]
push eax
mov ecx, ebp
call edx
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
fld dword [esp + 0x38]
push eax
push ecx
push ecx
mov ecx, ebp
fstp dword [esp]
call fcn.004c32e5
push 0
push ebp
lea eax, [edi + 0x2d80]
push eax
call fcn.0044e770
inc ebx
add esi, 0x84
cmp ebx, 8
jb 0x448686
mov eax, 2
push 0x10
xor ebx, ebx
push str.obje008_005.bmp
lea ecx, [esp + 0x24]
mov dword [edi + 0x28c4], eax
mov dword [edi + 0x2dac], eax
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], ebx
mov byte [esp + 0x28], bl
call fcn.004051a0
push ebx
push 1
mov dword [esp + 0xc8], 0xa
mov edx, dword [edi + 0x32b8]
mov edx, dword [edx + 0x140]
lea ecx, [edi + 0x32b8]
push 0x15
lea eax, [esp + 0x28]
push eax
call edx
mov dword [esp + 0xc0], 0xffffffff
cmp dword [esp + 0x34], 0x10
jb 0x4488c2
mov eax, dword [esp + 0x20]
push eax
call fcn.0045c06d
add esp, 4
fld dword [esp + 0x38]
mov eax, dword [edi + 8]
fld qword [0x6d0450]
mov dword [edi + 0x328c], eax
fmul st(1)
mov dword [esp + 0x18], ebx
call fcn.0064b350
fmul qword [0x6d0448]
mov dword [esp + 0x4c], eax
call fcn.0064b350
mov dword [esp + 0x44], eax
lea esi, [edi + 0x334c]
mov eax, 4
push eax
xor eax, eax
push eax
mov edx, dword [esi]
mov eax, 3
push eax
xor eax, eax
push eax
mov eax, 2
push eax
xor eax, eax
push eax
mov eax, 1
push eax
xor eax, eax
push eax
push eax
push eax
mov eax, 5
push eax
mov eax, 1
push eax
lea eax, [edi + 0x32b8]
push eax
mov eax, dword [edx + 0x84]
mov ecx, esi
call eax
mov eax, ebx
cdq
and edx, 3
add eax, edx
sar eax, 2
mov dword [esp + 0x54], eax
fild dword [esp + 0x54]
fmul qword [0x6d00f8]
fadd qword [0x6d0440]
fld dword [esp + 0x38]
fld st(0)
fmulp st(2)
fxch st(1)
call fcn.0064b350
and ebx, 0x80000003
mov ebp, eax
jns 0x44897b
dec ebx
or ebx, 0xfffffffc
inc ebx
mov dword [esp + 0x54], ebx
fild dword [esp + 0x54]
fmul qword [0x6d00f0]
fadd qword [0x6cfe58]
fmulp st(1)
call fcn.0064b350
mov edx, dword [esi]
push eax
mov eax, dword [edx + 0x2c]
push ebp
mov ecx, esi
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x18]
push 0
mov ecx, esi
call eax
mov edx, dword [esi]
mov eax, dword [edx + 8]
push 1
mov ecx, esi
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0xc]
push 1
mov ecx, esi
call eax
mov edx, dword [esi]
mov edx, dword [edx + 0x30]
lea eax, [esp + 0x78]
push eax
mov ecx, esi
call edx
mov ebp, dword [eax]
mov eax, dword [esi]
mov edx, dword [eax + 0x30]
add ebp, dword [esp + 0x3c]
lea ecx, [esp + 0x90]
push ecx
mov ecx, esi
call edx
mov eax, dword [eax + 4]
add eax, dword [esp + 0x40]
lea ecx, [esp + 0x80]
mov dword [esp + 0x60], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x30]
push ecx
mov ecx, esi
call edx
mov ebx, dword [esp + 0x3c]
sub ebx, dword [esp + 0x4c]
lea ecx, [esp + 0x88]
add ebx, dword [eax]
mov eax, dword [esi]
mov edx, dword [eax + 0x30]
push ecx
mov ecx, esi
call edx
mov eax, dword [eax + 4]
sub eax, dword [esp + 0x44]
mov edx, dword [esi]
add eax, dword [esp + 0x40]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], ebp
mov ebp, dword [esp + 0x70]
mov dword [ecx + 4], ebp
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], eax
mov eax, dword [edx + 0x38]
mov ecx, esi
call eax
push 0
push esi
lea eax, [edi + 0x3284]
push eax
call fcn.0044e770
mov ebx, dword [esp + 0x18]
inc ebx
mov dword [esp + 0x18], ebx
add esi, 0x84
cmp ebx, 8
jb 0x4488f9
fld dword [esp + 0x38]
mov dword [edi + 0x32b0], 2
fmul qword [0x6d0438]
call fcn.0064b350
mov ebx, eax
lea esi, [edi + 0x2f9b4c]
mov dword [esp + 0x18], 8
mov ecx, esi
call fcn.0046e21c
mov ecx, dword [edi + 8]
mov edx, dword [ecx]
mov ebp, eax
mov eax, dword [edx + 0x28]
call eax
test al, al
mov eax, dword [edi + 8]
push 0
push ebx
lea ecx, [eax + 0x80384]
je 0x448af2
call fcn.0046e21c
mov ecx, eax
call fcn.00479e28
mov eax, dword [edi + 8]
push 0
push 0x12
lea ecx, [eax + 0x80384]
call fcn.0046e227
mov ecx, eax
call fcn.00479e28
mov eax, dword [edi + 8]
push ebx
lea ecx, [eax + 0x80384]
call fcn.0046e235
push 0
push ebx
jmp 0x448b4e
call fcn.0046e21c
mov ecx, eax
call fcn.00479e28
mov eax, dword [edi + 8]
push 0
push 0x12
lea ecx, [eax + 0x80384]
call fcn.0046e227
mov ecx, eax
call fcn.00479e28
mov eax, dword [edi + 8]
push 0x12
lea ecx, [eax + 0x80384]
call fcn.0046e235
mov eax, dword [edi + 8]
mov eax, dword [eax + 0x2068]
sub eax, 0
je 0x448b4a
sub eax, 1
je 0x448b44
sub eax, 1
jne 0x448b55
push eax
push 0xa
jmp 0x448b4e
push 0
push 0xe
jmp 0x448b4e
push 0
push 0x12
mov ecx, ebp
call fcn.00479e28
add esi, 0x594
sub dword [esp + 0x18], 1
jne 0x448a96
push 0x10
mov ebp, 0xf
xor esi, esi
push str.obje005_000.bmp
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x38], esi
mov byte [esp + 0x28], 0
call fcn.004051a0
push esi
push 1
mov dword [esp + 0xc8], 0xb
mov edx, dword [edi + 0x1594]
mov edx, dword [edx + 0x140]
lea ecx, [edi + 0x1594]
push 0x15
lea eax, [esp + 0x28]
push eax
call edx
or ebx, 0xffffffff
mov dword [esp + 0xc0], ebx
cmp dword [esp + 0x34], 0x10
jb 0x448bd1
mov eax, dword [esp + 0x20]
push eax
call fcn.0045c06d
add esp, 4
push 0x10
push str.obje006_000.bmp
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x38], esi
mov byte [esp + 0x28], 0
call fcn.004051a0
push esi
push 1
mov dword [esp + 0xc8], 0xc
mov edx, dword [edi + 0x1828]
mov edx, dword [edx + 0x140]
lea ecx, [edi + 0x1828]
push 0x15
lea eax, [esp + 0x28]
push eax
call edx
mov dword [esp + 0xc0], ebx
cmp dword [esp + 0x34], 0x10
jb 0x448c32
mov eax, dword [esp + 0x20]
push eax
call fcn.0045c06d
add esp, 4
push 0x10
push str.obje006_001.bmp
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x38], esi
mov byte [esp + 0x28], 0
call fcn.004051a0
push esi
push 1
mov dword [esp + 0xc8], 0xd
mov edx, dword [edi + 0x18bc]
mov edx, dword [edx + 0x140]
lea ecx, [edi + 0x18bc]
push 0x15
lea eax, [esp + 0x28]
push eax
call edx
mov dword [esp + 0xc0], ebx
cmp dword [esp + 0x34], 0x10
jb 0x448c93
mov eax, dword [esp + 0x20]
push eax
call fcn.0045c06d
add esp, 4
fld dword [esp + 0x38]
mov eax, dword [edi + 8]
fmul qword [0x6cfd80]
xor ebx, ebx
mov dword [edi + 0x17fc], eax
mov dword [esp + 0x18], ebx
call fcn.0064b350
mov ebp, eax
cmp ebx, 0xa
je 0x448d42
mov eax, 4
push eax
push ebx
lea ecx, [eax - 1]
push ecx
push ebx
mov dword [esp + 0x58], 2
mov eax, dword [esp + 0x58]
push eax
push ebx
mov edx, ebx
imul edx, edx, 0x84
mov dword [esp + 0x68], 1
mov ecx, dword [esp + 0x68]
push ecx
push ebx
mov dword [esp + 0x78], esi
mov eax, dword [esp + 0x78]
push eax
push ebx
lea esi, [edx + edi + 0x1950]
mov edx, dword [esi]
mov edx, dword [edx + 0x84]
mov eax, 5
push eax
mov dword [esp + 0x88], 0xa
mov ecx, dword [esp + 0x88]
push ecx
lea eax, [edi + 0x1828]
push eax
mov ecx, esi
call edx
fild dword [esp + 0x18]
fmul qword [0x6cfd90]
fadd qword [0x6cfd88]
fmul dword [esp + 0x38]
jmp 0x448dcf
xor eax, eax
mov edx, dword [edi + 0x1e78]
mov dword [esp + 0x8c], 4
push dword [esp + 0x8c]
mov edx, dword [edx + 0x84]
push eax
xor ecx, ecx
mov eax, 3
push eax
push ecx
mov dword [esp + 0x94], 2
mov eax, dword [esp + 0x94]
push eax
xor eax, eax
push eax
mov eax, 1
push eax
xor eax, eax
push eax
mov dword [esp + 0xb4], esi
mov ecx, dword [esp + 0xb4]
push ecx
push eax
mov eax, 5
push eax
mov dword [esp + 0xa4], 1
mov eax, dword [esp + 0xa4]
lea esi, [edi + 0x1e78]
push eax
lea eax, [edi + 0x18bc]
push eax
mov ecx, esi
call edx
fld dword [esp + 0x38]
fmul qword [0x6d0430]
call fcn.0064b350
mov edx, dword [esi]
push ebp
push eax
mov eax, dword [edx + 0x2c]
mov ecx, esi
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x18]
push 0
mov ecx, esi
call eax
mov edx, dword [esi]
mov eax, dword [edx + 8]
push 1
mov ecx, esi
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0xc]
push 0
mov ecx, esi
call eax
fild dword [esp + 0x18]
fmul qword [0x6cfd90]
fadd qword [0x6cfd88]
fmul dword [esp + 0x38]
call fcn.0064b350
mov edx, dword [esi]
push ebp
push eax
mov eax, dword [edx + 0x2c]
mov ecx, esi
call eax
fld dword [esp + 0x38]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x3c]
push ecx
push edx
push ecx
mov ecx, esi
fstp dword [esp]
call fcn.004c32e5
push 0
push esi
lea eax, [edi + 0x17f4]
push eax
call fcn.0044e770
inc ebx
xor esi, esi
mov dword [esp + 0x18], ebx
cmp ebx, 0xb
jb 0x448cb3
mov dword [edi + 0x1820], 2
cmp dword [edi + 0x2fc7ec], esi
jne 0x448e93
lea ebx, [edi + 0x1800]
push 0xa
mov eax, ebx
call fcn.0044fd00
cmp dword [eax], esi
je 0x448e93
push 0xa
mov eax, ebx
call fcn.0044fd00
mov ecx, dword [eax]
mov eax, dword [ecx]
mov edx, dword [eax + 0x7c]
call edx
mov ebp, 0x10
push ebp
mov ebx, 0xf
push str.obje008_000.bmp
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x38], esi
mov byte [esp + 0x28], 0
call fcn.004051a0
push esi
push 1
mov dword [esp + 0xc8], 0xe
mov eax, dword [edi + 0x2e48]
mov eax, dword [eax + 0x140]
lea ecx, [edi + 0x2e48]
push 0x15
lea edx, [esp + 0x28]
push edx
call eax
mov dword [esp + 0xc0], 0xffffffff
cmp dword [esp + 0x34], ebp
jb 0x448f00
mov ecx, dword [esp + 0x20]
push ecx
call fcn.0045c06d
add esp, 4
push ebp
push str.obje008_001.bmp
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x38], esi
mov byte [esp + 0x28], 0
call fcn.004051a0
push 0
push 1
mov dword [esp + 0xc8], ebx
mov edx, dword [edi + 0x2edc]
mov edx, dword [edx + 0x140]
lea esi, [edi + 0x2edc]
push 0x15
lea eax, [esp + 0x28]
push eax
mov ecx, esi
call edx
mov dword [esp + 0xc0], 0xffffffff
cmp dword [esp + 0x34], ebp
jb 0x448f62
mov eax, dword [esp + 0x20]
push eax
call fcn.0045c06d
add esp, 4
mov ecx, 1
push ecx
mov eax, 0xa
push eax
push esi
lea ecx, [edi + 0x2f70]
call fcn.004c3ce9
push ebp
push str.obje008_002.bmp
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x38], 0
mov byte [esp + 0x28], 0
call fcn.004051a0
push 0
push 1
mov dword [esp + 0xc8], ebp
mov edx, dword [edi + 0x2f80]
mov edx, dword [edx + 0x140]
lea esi, [edi + 0x2f80]
push 0x15
lea eax, [esp + 0x28]
push eax
mov ecx, esi
call edx
mov dword [esp + 0xc0], 0xffffffff
cmp dword [esp + 0x34], ebp
jb 0x448fe0
mov eax, dword [esp + 0x20]
push eax
call fcn.0045c06d
add esp, 4
mov ecx, 1
push ecx
mov eax, 0xa
push eax
push esi
lea ecx, [edi + 0x3014]
call fcn.004c3ce9
push ebp
xor esi, esi
push str.obje008_003.bmp
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x38], esi
mov byte [esp + 0x28], 0
call fcn.004051a0
push esi
push 1
mov dword [esp + 0xc8], 0x11
mov edx, dword [edi + 0x3024]
mov edx, dword [edx + 0x140]
lea ecx, [edi + 0x3024]
push 0x15
lea eax, [esp + 0x28]
push eax
call edx
mov dword [esp + 0xc0], 0xffffffff
cmp dword [esp + 0x34], ebp
jb 0x44905d
mov eax, dword [esp + 0x20]
push eax
call fcn.0045c06d
add esp, 4
push ebp
push str.obje008_004.bmp
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x38], esi
mov byte [esp + 0x28], 0
call fcn.004051a0
push esi
push 1
mov dword [esp + 0xc8], 0x12
mov edx, dword [edi + 0x30b8]
mov edx, dword [edx + 0x140]
lea ecx, [edi + 0x30b8]
push 0x15
lea eax, [esp + 0x28]
push eax
call edx
mov dword [esp + 0xc0], 0xffffffff
cmp dword [esp + 0x34], ebp
jb 0x4490c0
mov eax, dword [esp + 0x20]
push eax
call fcn.0045c06d
add esp, 4
push ebp
push str.obje008_005.bmp
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x38], esi
mov byte [esp + 0x28], 0
call fcn.004051a0
push esi
push 1
mov dword [esp + 0xc8], 0x13
mov edx, dword [edi + 0x314c]
mov edx, dword [edx + 0x140]
lea ecx, [edi + 0x314c]
push 0x15
lea eax, [esp + 0x28]
push eax
call edx
mov dword [esp + 0xc0], 0xffffffff
cmp dword [esp + 0x34], ebp
jb 0x449123
mov eax, dword [esp + 0x20]
push eax
call fcn.0045c06d
add esp, 4
push ebp
push str.obje010_000.bmp
lea ecx, [esp + 0xa0]
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xb4], esi
mov byte [esp + 0xa4], 0
call fcn.004051a0
push esi
push 1
mov dword [esp + 0xc8], 0x14
mov edx, dword [edi + 0x2db4]
mov edx, dword [edx + 0x140]
lea ecx, [edi + 0x2db4]
push 0x15
lea eax, [esp + 0xa4]
push eax
call edx
mov dword [esp + 0xc0], 0xffffffff
cmp dword [esp + 0xb0], ebp
jb 0x44919b
mov eax, dword [esp + 0x9c]
push eax
call fcn.0045c06d
add esp, 4
mov ecx, dword [edi + 8]
mov eax, dword [ecx + 0x2f34]
dec eax
mov dword [esp + 0xb0], ebx
mov dword [esp + 0xac], esi
mov byte [esp + 0x9c], 0
cmp eax, 0xffffffff
jne 0x4491c3
push esi
jmp 0x4491c7
shr eax, 3
push eax
mov eax, edi
call fcn.0044cb10
mov byte [edi + 0x2fc7fc], 0
mov dword [edi + 0x2fc7f8], 0xffffffff
mov ecx, dword [esp + 0xb8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret