Function at 0x4a4a30
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ccb02
mov eax, dword fs:[0]
push eax
sub esp, 0x40c
mov eax, dword [0x6327e8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
lea ecx, [edi + 0x224]
mov dword [edi], vtable.BBOClient.0
call fcn.0045d0e0
mov dword [edi + 0x298], 0
mov dword [edi + 0x29c], 0
mov dword [edi + 0x2a0], 0xffffffff
call fcn.004f7b50
call fcn.004a46e0
mov dword [edi + 0x410], 0
mov ecx, edi
mov dword [edi + 0x418], 0
mov eax, dword [0x635408]
mov eax, dword [eax + 0x2a68c]
mov dword [eax], 0xbfc90fdb
mov eax, dword [0x635408]
mov eax, dword [eax + 0x2a68c]
mov dword [eax + 4], 0xbebd70a4
mov eax, dword [0x635408]
mov eax, dword [eax + 0x2a68c]
mov dword [eax + 0xc], 0x43250000
mov eax, dword [0x635408]
mov eax, dword [eax + 0x2a68c]
mov dword [eax + 0x10], 0xc2840000
mov eax, dword [0x635408]
mov eax, dword [eax + 0x2a68c]
mov dword [eax + 0x14], 0xc2fa0000
call fcn.004b17e0
push 0x174
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0
test eax, eax
je 0x4a4b36
mov ecx, eax
call fcn.00463f80
mov ecx, eax
jmp 0x4a4b38
xor ecx, ecx
mov dword [edi + 0xa8], ecx
mov eax, dword [0x635408]
push str.dat_skydome.ase
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00465870
mov eax, dword [0x635408]
mov ecx, dword [edi + 0xa8]
push 0
push str.dat_sky.png
push dword [eax + 0x2a3d8]
call fcn.004662d0
push 0x94078
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 1
test eax, eax
je 0x4a4ba0
mov ecx, eax
call fcn.004fccf0
mov ecx, eax
jmp 0x4a4ba2
xor ecx, ecx
push 0
mov dword [edi + 0x154], ecx
mov eax, dword [0x635408]
push 0x100
push 0x100
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.004fecf0
mov eax, dword [0x635408]
mov ecx, dword [edi + 0x154]
push str.datgrassfull.png
push dword [eax + 0x2a3d8]
call fcn.005015a0
mov ecx, dword [edi + 0x154]
call fcn.004fdab0
call fcn.004f7b50
push 0x14
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 2
test eax, eax
je 0x4a4c20
push dword [edi + 0x154]
mov ecx, eax
call fcn.004ebb80
jmp 0x4a4c22
xor eax, eax
mov dword [edi + 0x15c], eax
mov dword [0x635b98], 0
mov dword [edi + 0x294], 0
mov dword [edi + 0x284], 0
mov dword [edi + 0x280], 0
mov dword [edi + 0x290], 0
mov dword [0x635b9c], 0
mov dword [0x635ba0], 0
mov dword [0x635ba4], 0
push 8
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 0x20c], 0xffffffff
mov dword [edi + 0x160], 0
mov dword [edi + 0x164], 0
mov dword [edi + 0x168], 0
mov dword [edi + 0x28c], 0
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 3
test eax, eax
je 0x4a4cd5
mov ecx, eax
call fcn.004f9eb0
jmp 0x4a4cd7
xor eax, eax
push 0x4d8
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 4], eax
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 4
test eax, eax
je 0x4a4d0f
push 0x5de2bc
push 0
mov ecx, eax
call fcn.004b3f60
jmp 0x4a4d11
xor eax, eax
mov ecx, dword [edi + 4]
push eax
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 0xc], eax
mov dword [edi + 8], eax
call fcn.004fa000
mov ecx, eax
mov eax, dword [edi + 8]
mov dword [eax + 0x170], ecx
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push eax
push dword [eax + 0x170]
call fcn.004f9fe0
mov esi, eax
mov eax, dword [edi + 8]
mov dword [eax + 0x168], 0x28
mov eax, dword [edi + 8]
mov dword [eax + 0x164], 0x28
mov eax, dword [edi + 8]
mov dword [eax + 0x108], 0
mov eax, dword [edi + 8]
mov dword [eax + 0x10c], 0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 0x154]
push dword [eax + 0x164]
call fcn.00500c80
mov eax, dword [edi + 8]
fstp dword [eax + 0x114]
mov eax, dword [edi + 8]
mov ecx, dword [edi + 0x154]
push dword [eax + 0x168]
call fcn.00500d90
mov eax, dword [edi + 8]
sub esp, 8
mov ecx, edi
fstp dword [eax + 0x11c]
mov eax, dword [edi + 8]
movss xmm0, dword [eax + 0x11c]
movss dword [esp + 4], xmm0
movss xmm0, dword [eax + 0x114]
movss dword [esp], xmm0
call fcn.004b0890
mov eax, dword [edi + 8]
fstp dword [ebp - 0x414]
movss xmm0, dword [ebp - 0x414]
push 0x10
movss dword [eax + 0x118], xmm0
mov eax, dword [edi + 8]
mov dword [edi + 0x1f8], 0xbea3d70a
movss xmm0, dword [eax + 0x108]
movss dword [esi + 0x118], xmm0
movss dword [esi + 0x11c], xmm0
mov dword [esi + 0x120], 0x3e75c28f
mov dword [esi + 0x124], 0x3e567750
mov eax, dword [edi + 8]
movss xmm0, dword [eax + 0x114]
movss dword [esi + 0x110], xmm0
movss dword [esi + 0x108], xmm0
mov eax, dword [edi + 8]
movss xmm0, dword [eax + 0x11c]
movss dword [esi + 0x114], xmm0
movss dword [esi + 0x10c], xmm0
mov dword [esi + 0x128], 0x3e99999a
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 5
test eax, eax
je 0x4a4e92
mov ecx, eax
call fcn.0044e080
jmp 0x4a4e94
xor eax, eax
push 0x10
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 0x18], eax
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 6
test eax, eax
je 0x4a4ec2
mov ecx, eax
call fcn.0044e080
jmp 0x4a4ec4
xor eax, eax
push 0x174
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 0x1c], eax
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 7
test eax, eax
je 0x4a4efe
push str.AVATAR_STAND
push 1
mov ecx, eax
call fcn.0045ffc0
mov ecx, eax
jmp 0x4a4f00
xor ecx, ecx
mov dword [edi + 0x120], ecx
mov eax, dword [0x635408]
push 0xffffffffffffffff
push str.dat_avatar_stand.anc
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00460db0
mov eax, dword [0x635408]
mov ecx, dword [edi + 0x120]
push dword [eax + 0x2a3d8]
call fcn.00460820
mov ecx, dword [edi + 0x120]
mov esi, eax
mov eax, dword [0x635408]
push esi
push 0
push dword [eax + 0x2a3d8]
call fcn.00463010
mov eax, dword [0x635408]
sub esp, 0xc
mov ecx, dword [edi + 0x120]
mov dword [esp + 8], 0
mov dword [esp + 4], 0xbdcccccd
mov dword [esp], 0
push 0
push dword [eax + 0x2a3d8]
call fcn.00460250
push 0x174
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 8
test eax, eax
je 0x4a4fb7
push str.AVATAR_RUN
push 1
mov ecx, eax
call fcn.0045ffc0
mov ecx, eax
jmp 0x4a4fb9
xor ecx, ecx
mov dword [edi + 0x124], ecx
mov eax, dword [0x635408]
push 0xffffffffffffffff
push str.dat_avatar_run.anc
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00460db0
mov eax, dword [0x635408]
mov ecx, dword [edi + 0x124]
push esi
push 0
push dword [eax + 0x2a3d8]
call fcn.00463010
mov eax, dword [0x635408]
sub esp, 0xc
mov ecx, dword [edi + 0x124]
mov dword [esp + 8], 0
mov dword [esp + 4], 0xbdcccccd
mov dword [esp], 0
push 0
push dword [eax + 0x2a3d8]
call fcn.00460250
call fcn.004f7b50
push 0x174
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 9
test eax, eax
je 0x4a505d
push str.AVATAR_ATTACK
push 1
mov ecx, eax
call fcn.0045ffc0
mov ecx, eax
jmp 0x4a505f
xor ecx, ecx
mov dword [edi + 0x128], ecx
mov eax, dword [0x635408]
push 0xffffffffffffffff
push str.dat_avatar_attack.anc
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00460db0
mov eax, dword [0x635408]
mov ecx, dword [edi + 0x128]
push esi
push 0
push dword [eax + 0x2a3d8]
call fcn.00463010
mov eax, dword [0x635408]
sub esp, 0xc
mov ecx, dword [edi + 0x128]
mov dword [esp + 8], 0
mov dword [esp + 4], 0xbdcccccd
mov dword [esp], 0
push 0
push dword [eax + 0x2a3d8]
call fcn.00460250
push 0x174
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0xa
test eax, eax
je 0x4a50fe
push str.AVATAR_ATTACK2
push 1
mov ecx, eax
call fcn.0045ffc0
mov ecx, eax
jmp 0x4a5100
xor ecx, ecx
mov dword [edi + 0x12c], ecx
mov eax, dword [0x635408]
push 0xffffffffffffffff
push str.dat_avatar_attack2.anc
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00460db0
mov eax, dword [0x635408]
mov ecx, dword [edi + 0x12c]
push esi
push 0
push dword [eax + 0x2a3d8]
call fcn.00463010
mov eax, dword [0x635408]
sub esp, 0xc
mov ecx, dword [edi + 0x12c]
mov dword [esp + 8], 0
mov dword [esp + 4], 0xbdcccccd
mov dword [esp], 0
push 0
push dword [eax + 0x2a3d8]
call fcn.00460250
push 0x174
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0xb
test eax, eax
je 0x4a519f
push str.MERCHANT_ANIM
push 1
mov ecx, eax
call fcn.0045ffc0
mov ecx, eax
jmp 0x4a51a1
xor ecx, ecx
mov dword [edi + 0x130], ecx
mov eax, dword [0x635408]
push 0xffffffffffffffff
push str.datmerchant.anc
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00460db0
push 0x174
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0xc
test eax, eax
je 0x4a51f5
push str.WITCHSTAND_ANIM
push 1
mov ecx, eax
call fcn.0045ffc0
mov ecx, eax
jmp 0x4a51f7
xor ecx, ecx
mov dword [edi + 0x134], ecx
mov eax, dword [0x635408]
push 0xffffffffffffffff
push str.datwitch_idle.anc
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00460db0
mov eax, dword [0x635408]
mov ecx, dword [edi + 0x134]
push 0
push str.datwitch.PNG
push dword [eax + 0x2a3d8]
call fcn.00461de0
push 0x174
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0xd
test eax, eax
je 0x4a5268
push str.WITCHTALK_ANIM
push 1
mov ecx, eax
call fcn.0045ffc0
mov ecx, eax
jmp 0x4a526a
xor ecx, ecx
mov dword [edi + 0x138], ecx
mov eax, dword [0x635408]
push 0xffffffffffffffff
push str.datwitch_talk.anc
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00460db0
mov eax, dword [0x635408]
mov ecx, dword [edi + 0x138]
push 0
push str.datwitch.PNG
push dword [eax + 0x2a3d8]
call fcn.00461de0
mov dword [edi + 0x220], 0
call fcn.004f7b50
push 0x174
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0xe
test eax, eax
je 0x4a52e3
mov ecx, eax
call fcn.00463f80
mov ecx, eax
jmp 0x4a52e5
xor ecx, ecx
mov dword [edi + 0xb0], ecx
mov eax, dword [0x635408]
push str.dat_sack.ase
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00465870
mov eax, dword [0x635408]
mov ecx, dword [edi + 0xb0]
push 0
push str.dat_sack.png
push dword [eax + 0x2a3d8]
call fcn.004662d0
mov eax, dword [0x635408]
sub esp, 0xc
mov ecx, dword [edi + 0xb0]
mov dword [esp + 8], 0x3b656042
mov dword [esp + 4], 0x3b656042
mov dword [esp], 0x3b656042
push dword [eax + 0x2a3d8]
call fcn.00467160
push 0x174
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0xf
test eax, eax
je 0x4a537d
mov ecx, eax
call fcn.00463f80
mov ecx, eax
jmp 0x4a537f
xor ecx, ecx
mov dword [edi + 0x118], ecx
mov eax, dword [0x635408]
push str.dat_bomb.ase
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00465870
mov eax, dword [0x635408]
mov ecx, dword [edi + 0x118]
push 0
push str.dat_bomb.png
push dword [eax + 0x2a3d8]
call fcn.004662d0
mov eax, dword [0x635408]
sub esp, 0xc
mov ecx, dword [edi + 0x118]
mov dword [esp + 8], 0x3b449ba6
mov dword [esp + 4], 0x3b449ba6
mov dword [esp], 0x3b449ba6
push dword [eax + 0x2a3d8]
call fcn.00467160
push 0x174
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0x10
test eax, eax
je 0x4a5417
mov ecx, eax
call fcn.00463f80
mov ecx, eax
jmp 0x4a5419
xor ecx, ecx
mov dword [edi + 0x11c], ecx
mov eax, dword [0x635408]
push str.dat_bomb.ase
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00465870
mov eax, dword [0x635408]
mov ecx, dword [edi + 0x11c]
push 0
push str.dat_bomb.png
push dword [eax + 0x2a3d8]
call fcn.004662d0
mov eax, dword [0x635408]
sub esp, 0xc
mov ecx, dword [edi + 0x11c]
mov dword [esp + 8], 0x3be56042
mov dword [esp + 4], 0x3be56042
mov dword [esp], 0x3be56042
push dword [eax + 0x2a3d8]
call fcn.00467160
push 0x174
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0x11
test eax, eax
je 0x4a54b1
mov ecx, eax
call fcn.00463f80
mov ecx, eax
jmp 0x4a54b3
xor ecx, ecx
mov dword [edi + 0xd4], ecx
mov eax, dword [0x635408]
push str.dat_tree1.ase
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00465870
mov eax, dword [0x635408]
mov ecx, dword [edi + 0xd4]
push 1
push str.dat_f_tree.png
push dword [eax + 0x2a3d8]
call fcn.004662d0
mov eax, dword [0x635408]
sub esp, 0xc
mov ecx, dword [edi + 0xd4]
mov dword [esp + 8], 0x3cf5c28f
mov dword [esp + 4], 0x3cf5c28f
mov dword [esp], 0x3cf5c28f
push dword [eax + 0x2a3d8]
call fcn.00467160
push 0x174
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0x12
test eax, eax
je 0x4a554b
mov ecx, eax
call fcn.00463f80
mov ecx, eax
jmp 0x4a554d
xor ecx, ecx
mov dword [edi + 0xe4], ecx
mov eax, dword [0x635408]
push str.dat_tower.ase
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00465870
mov eax, dword [0x635408]
mov ecx, dword [edi + 0xe4]
push 1
push str.dat_tower.png
push dword [eax + 0x2a3d8]
call fcn.004662d0
mov eax, dword [0x635408]
sub esp, 0xc
mov ecx, dword [edi + 0xe4]
mov dword [esp + 8], 0x3be56042
mov dword [esp + 4], 0x3ba3d70a
mov dword [esp], 0x3be56042
push dword [eax + 0x2a3d8]
call fcn.00467160
push 0x174
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0x13
test eax, eax
je 0x4a55e5
mov ecx, eax
call fcn.00463f80
mov ecx, eax
jmp 0x4a55e7
xor ecx, ecx
mov dword [edi + 0x110], ecx
mov eax, dword [0x635408]
push str.dat_rop_tower.ase
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00465870
mov eax, dword [0x635408]
mov ecx, dword [edi + 0x110]
push 0
push str.dat_rop_tower.png
push dword [eax + 0x2a3d8]
call fcn.004662d0
mov eax, dword [0x635408]
sub esp, 0xc
mov ecx, dword [edi + 0x110]
mov dword [esp + 8], 0x3be56042
mov dword [esp + 4], 0x3ba3d70a
mov dword [esp], 0x3be56042
push dword [eax + 0x2a3d8]
call fcn.00467160
push 0x174
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0x14
test eax, eax
je 0x4a567f
mov ecx, eax
call fcn.00463f80
mov ecx, eax
jmp 0x4a5681
xor ecx, ecx
mov dword [edi + 0xb4], ecx
mov eax, dword [0x635408]
push str.datcave.MEC
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00465340
mov eax, dword [0x635408]
mov ecx, dword [edi + 0xb4]
push 0
push str.datcave.png
push dword [eax + 0x2a3d8]
call fcn.004662d0
push 0x174
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0x15
test eax, eax
je 0x4a56e9
mov ecx, eax
call fcn.00463f80
mov ecx, eax
jmp 0x4a56eb
xor ecx, ecx
mov dword [edi + 0xb8], ecx
mov eax, dword [0x635408]
push str.datcave2.MEC
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00465340
mov eax, dword [0x635408]
mov ecx, dword [edi + 0xb8]
push 0
push str.datcave.png
push dword [eax + 0x2a3d8]
call fcn.004662d0
call fcn.004f7b50
push 0x174
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0x16
test eax, eax
je 0x4a5758
mov ecx, eax
call fcn.00463f80
mov ecx, eax
jmp 0x4a575a
xor ecx, ecx
mov dword [edi + 0xbc], ecx
mov eax, dword [0x635408]
push str.datcave.MEC
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00465340
mov eax, dword [0x635408]
mov ecx, dword [edi + 0xbc]
push 0
push str.datcaveRed.png
push dword [eax + 0x2a3d8]
call fcn.004662d0
push 0x174
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0x17
test eax, eax
je 0x4a57c2
mov ecx, eax
call fcn.00463f80
mov ecx, eax
jmp 0x4a57c4
xor ecx, ecx
mov dword [edi + 0xc0], ecx
mov eax, dword [0x635408]
push str.datcave2.MEC
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00465340
mov eax, dword [0x635408]
mov ecx, dword [edi + 0xc0]
push 0
push str.datcaveRed.png
push dword [eax + 0x2a3d8]
call fcn.004662d0
push 0x174
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0x18
test eax, eax
je 0x4a582c
mov ecx, eax
call fcn.00463f80
mov ecx, eax
jmp 0x4a582e
xor ecx, ecx
mov dword [edi + 0xc4], ecx
mov eax, dword [0x635408]
push str.datcave.MEC
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00465340
mov eax, dword [0x635408]
mov ecx, dword [edi + 0xc4]
push 0
push str.datcaveBlack.png
push dword [eax + 0x2a3d8]
call fcn.004662d0
push 0x174
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0x19
test eax, eax
je 0x4a5896
mov ecx, eax
call fcn.00463f80
mov ecx, eax
jmp 0x4a5898
xor ecx, ecx
mov dword [edi + 0xc8], ecx
mov eax, dword [0x635408]
push str.dat_standin_box.ASE
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00465870
mov eax, dword [0x635408]
mov ecx, dword [edi + 0xc8]
push 0
push str.dat_bladeMetal.png
push dword [eax + 0x2a3d8]
call fcn.004662d0
mov eax, dword [0x635408]
sub esp, 0xc
mov ecx, dword [edi + 0xc8]
mov dword [esp + 8], 0x3ba3d70a
mov dword [esp + 4], 0x3ba3d70a
mov dword [esp], 0x3ba3d70a
push dword [eax + 0x2a3d8]
call fcn.00467160
push 0x174
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0x1a
test eax, eax
je 0x4a5930
mov ecx, eax
call fcn.00463f80
mov ecx, eax
jmp 0x4a5932
xor ecx, ecx
mov dword [edi + 0xcc], ecx
mov eax, dword [0x635408]
push str.datchestClosed.ase
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00465870
mov eax, dword [0x635408]
sub esp, 0xc
mov ecx, dword [edi + 0xcc]
mov dword [esp + 8], 0x3b83126f
mov dword [esp + 4], 0x3b83126f
mov dword [esp], 0x3b83126f
push dword [eax + 0x2a3d8]
call fcn.00467160
mov eax, dword [0x635408]
mov ecx, dword [edi + 0xcc]
push 0
push str.datchest.png
push dword [eax + 0x2a3d8]
call fcn.004662d0
push 0x174
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0x1b
test eax, eax
je 0x4a59ca
mov ecx, eax
call fcn.00463f80
mov ecx, eax
jmp 0x4a59cc
xor ecx, ecx
mov dword [edi + 0xd0], ecx
mov eax, dword [0x635408]
push str.datchestOpen.ase
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00465870
mov eax, dword [0x635408]
sub esp, 0xc
mov ecx, dword [edi + 0xd0]
mov dword [esp + 8], 0x3b83126f
mov dword [esp + 4], 0x3b83126f
mov dword [esp], 0x3b83126f
push dword [eax + 0x2a3d8]
call fcn.00467160
mov eax, dword [0x635408]
mov ecx, dword [edi + 0xd0]
push 0
push str.datchest.png
push dword [eax + 0x2a3d8]
call fcn.004662d0
call fcn.004f7b50
mov dword [ebp - 0x414], 0
lea ebx, [edi + 0xe8]
mov esi, str.BEAR
push 0x174
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x1c
test eax, eax
je 0x4a5a7e
mov ecx, eax
call fcn.00463f80
mov ecx, eax
jmp 0x4a5a80
xor ecx, ecx
mov dword [ebx], ecx
mov eax, dword [0x635408]
push str.dat_token.MEC
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00465340
cmp eax, 0x7c36e076
je 0x4a5ab2
cmp dword [edi + 0x29c], 0
je 0x4a6795
cmp dword [ebp - 0x414], 9
lea eax, [ebp - 0x410]
jge 0x4a5ad2
push esi
push str.dat_token__s.png
push eax
call fcn.0043d380
add esp, 0xc
jmp 0x4a5ae0
push str.dat_token_ctf.png
push eax
call fcn.0043d380
add esp, 8
mov ecx, dword [ebx]
lea eax, [ebp - 0x410]
push 0
push eax
mov eax, dword [0x635408]
push dword [eax + 0x2a3d8]
call fcn.004662d0
inc dword [ebp - 0x414]
add esi, 0xc
add ebx, 4
cmp esi, 0x61923c
jle 0x4a5a55
movsd xmm0, qword [0x5ded38]
sub esp, 8
movsd qword [esp], xmm0
call fcn.0044d9f0
fstp dword [ebp - 0x414]
movss xmm0, dword [ebp - 0x414]
movss dword [edi + 0x1f4], xmm0
movss dword [edi + 0x1f0], xmm0
call fcn.004f7b50
mov eax, dword [edi + 0x154]
mov dword [edi + 0x208], 0
mov ecx, dword [eax + 0x10c]
imul ecx, dword [eax + 0x108]
push ecx
call fcn.0055f936
mov dword [edi + 0x16c], eax
add esp, 0xc
mov eax, dword [edi + 0x154]
xor edx, edx
mov ecx, dword [eax + 0x10c]
imul ecx, dword [eax + 0x108]
test ecx, ecx
jle 0x4a5bb2
mov eax, dword [edi + 0x16c]
mov byte [edx + eax], 0
inc edx
mov eax, dword [edi + 0x154]
mov ecx, dword [eax + 0x10c]
imul ecx, dword [eax + 0x108]
cmp edx, ecx
jl 0x4a5b90
push 0x58
mov dword [edi + 0x14], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x27c], 0
mov dword [edi + 0x288], 0
mov dword [edi + 0x40c], 0
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x1d
test eax, eax
je 0x4a5c14
push ecx
mov dword [esp], 0x3f19999a
mov ecx, eax
push str.dat_flare_white.png
push 0x12c
call fcn.0051e4d0
jmp 0x4a5c16
xor eax, eax
mov dword [0x635b50], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0x40c90fdb
mov dword [eax + 0x44], 0xbfc90fdb
mov dword [eax + 0x40], 0x3fc90fdb
mov dword [eax + 0x50], 0x42a00000
mov dword [eax + 0x54], 0x42700000
mov dword [eax + 0x4c], 0x3ca3d70a
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3d75c28f
call fcn.004f7b50
push 0x58
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x1e
test eax, eax
je 0x4a5c95
push ecx
mov dword [esp], 0x3dcccccd
mov ecx, eax
push str.dat_flare_white.png
push 0x258
call fcn.0051e4d0
jmp 0x4a5c97
xor eax, eax
mov dword [0x635b54], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0
mov dword [eax + 0x44], 0x3fc90fdb
mov dword [eax + 0x40], 0x3fc90fdb
mov dword [eax + 0x50], 0x42a00000
mov dword [eax + 0x54], 0x42700000
mov dword [eax + 0x4c], 0x3c23d70a
push 0x58
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3c23d70a
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x1f
test eax, eax
je 0x4a5d11
push ecx
mov dword [esp], 0x3d75c28f
mov ecx, eax
push str.dat_flare_white.png
push 0x12c
call fcn.0051e4d0
jmp 0x4a5d13
xor eax, eax
mov dword [0x635b58], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0x40c90fdb
mov dword [eax + 0x44], 0x3f860a92
mov dword [eax + 0x40], 0x3fc90fdb
mov dword [eax + 0x50], 0x41a00000
mov dword [eax + 0x54], 0x40a00000
mov dword [eax + 0x4c], 0x3c23d70a
push 0x58
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3c23d70a
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x20
test eax, eax
je 0x4a5d8d
push ecx
mov dword [esp], 0x3dcccccd
mov ecx, eax
push str.dat_flare_white.png
push 0x12c
call fcn.0051e4d0
jmp 0x4a5d8f
xor eax, eax
mov dword [0x635b5c], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0
mov dword [eax + 0x44], 0xbfc90fdb
mov dword [eax + 0x40], 0xbfc90fdb
mov dword [eax + 0x50], 0x42c80000
mov dword [eax + 0x54], 0x42700000
mov dword [eax + 0x4c], 0x3c83126f
push 0x58
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3c83126f
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x21
test eax, eax
je 0x4a5e06
push ecx
mov dword [esp], 0x3e99999a
mov ecx, eax
push str.dat_flare_white.png
push 0x64
call fcn.0051e4d0
jmp 0x4a5e08
xor eax, eax
mov dword [0x635b60], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0x40c90fdb
mov dword [eax + 0x44], 0
mov dword [eax + 0x40], 0
mov dword [eax + 0x50], 0x43340000
mov dword [eax + 0x54], 0x43200000
mov dword [eax + 0x4c], 0x3c23d70a
push 0x58
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3ca3d70a
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x22
test eax, eax
je 0x4a5e7f
push ecx
mov dword [esp], 0x3e19999a
mov ecx, eax
push str.dat_flare_white.png
push 0x64
call fcn.0051e4d0
jmp 0x4a5e81
xor eax, eax
mov dword [0x635b64], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0x40c90fdb
mov dword [eax + 0x44], 0
mov dword [eax + 0x40], 0
mov dword [eax + 0x50], 0x42a00000
mov dword [eax + 0x54], 0x42200000
mov dword [eax + 0x4c], 0x3ca3d70a
push 0x58
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3cf5c28f
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x23
test eax, eax
je 0x4a5efb
push ecx
mov dword [esp], 0x3f800000
mov ecx, eax
push str.dat_flare_white.png
push 0x12c
call fcn.0051e4d0
jmp 0x4a5efd
xor eax, eax
mov dword [0x635b68], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0x40c90fdb
mov dword [eax + 0x44], 0
mov dword [eax + 0x40], 0x3f490fdb
mov dword [eax + 0x50], 0x43340000
mov dword [eax + 0x54], 0x42c80000
mov dword [eax + 0x4c], 0x3ca3d70a
push 0x58
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3da3d70a
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x24
test eax, eax
je 0x4a5f74
push ecx
mov dword [esp], 0x3f666666
mov ecx, eax
push str.datmist1.png
push 0x64
call fcn.0051f5a0
jmp 0x4a5f76
xor eax, eax
mov dword [0x635b6c], eax
mov dword [eax + 0x3c], 0x3f800000
mov dword [eax + 0x38], 0x3f8ccccd
mov dword [eax + 0x44], 0
mov dword [eax + 0x40], 0
mov dword [eax + 0x50], 0x43520000
mov dword [eax + 0x54], 0x43520000
mov dword [eax + 0x4c], 0x3ca3d70a
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3cf5c28f
call fcn.004f7b50
push 0x58
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x25
test eax, eax
je 0x4a5ff2
push ecx
mov dword [esp], 0
mov ecx, eax
push str.dat_bombFire.png
push 0x64
call fcn.00521960
jmp 0x4a5ff4
xor eax, eax
mov dword [0x635b70], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0x40c90fdb
mov dword [eax + 0x44], 0xbfc90fdb
mov dword [eax + 0x40], 0x3fc90fdb
mov dword [eax + 0x50], 0x42a00000
mov dword [eax + 0x54], 0x42700000
mov dword [eax + 0x4c], 0x3e4ccccd
push 0x5c
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3ecccccd
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x26
test eax, eax
je 0x4a6075
sub esp, 8
mov ecx, eax
mov dword [esp + 4], 0x3e4ccccd
mov dword [esp], 0x3b449ba6
push str.dat_smoke.png
push 0x64
call fcn.00522a10
jmp 0x4a6077
xor eax, eax
mov dword [0x635b74], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0x3f860a92
mov dword [eax + 0x44], 0xbfc90fdb
mov dword [eax + 0x40], 0x3fc90fdb
mov dword [eax + 0x50], 0x42a00000
mov dword [eax + 0x54], 0x42700000
mov dword [eax + 0x4c], 0x3c23d70a
push 0x70
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3ca3d70a
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x27
test eax, eax
je 0x4a60ee
push ecx
mov dword [esp], 0x3dcccccd
mov ecx, eax
push str.dat_flare_white.png
push 0x64
call fcn.005206e0
jmp 0x4a60f0
xor eax, eax
mov dword [0x635b78], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0
mov dword [eax + 0x44], 0
mov dword [eax + 0x40], 0
mov dword [eax + 0x50], 0x428c0000
mov dword [eax + 0x54], 0x42200000
mov dword [eax + 0x4c], 0
mov dword [eax + 0x48], 0
mov dword [eax + 0x68], 0x3f333333
mov dword [eax + 0x6c], 0x3ecccccd
mov dword [eax + 0x60], 0
mov dword [eax + 0x64], 0
mov dword [eax + 0x58], 0x3d23d70a
push 0x18
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x5c], 0x3cf5c28f
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x28
test eax, eax
je 0x4a6191
push ecx
mov dword [esp], 0x3e99999a
mov ecx, eax
push str.dat_flare_white.png
push 0x1e
call fcn.00526c30
jmp 0x4a6193
xor eax, eax
push 0x10
mov dword [ebp - 4], 0xffffffff
mov dword [0x635b7c], eax
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x29
test eax, eax
je 0x4a61c5
push 0x64
mov ecx, eax
call fcn.004fa6b0
jmp 0x4a61c7
xor eax, eax
push 0x24
mov dword [ebp - 4], 0xffffffff
mov dword [0x635b80], eax
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x2a
test eax, eax
je 0x4a6209
push ecx
mov dword [esp], 0x3e4ccccd
mov ecx, eax
push str.datgrass_bill_1.png
push 0xc8
call fcn.00531ea0
jmp 0x4a620b
xor eax, eax
push 0x24
mov dword [ebp - 4], 0xffffffff
mov dword [0x635b84], eax
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x2b
test eax, eax
je 0x4a624d
push ecx
mov dword [esp], 0x3e800000
mov ecx, eax
push str.datgrass_bill_2.png
push 0xc8
call fcn.00531ea0
jmp 0x4a624f
xor eax, eax
push 0x24
mov dword [ebp - 4], 0xffffffff
mov dword [0x635b88], eax
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x2c
test eax, eax
je 0x4a6291
push ecx
mov dword [esp], 0x3e99999a
mov ecx, eax
push str.datgrass_bill_3.png
push 0xc8
call fcn.00531ea0
jmp 0x4a6293
xor eax, eax
push 0x24
mov dword [ebp - 4], 0xffffffff
mov dword [0x635b8c], eax
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x2d
test eax, eax
je 0x4a62d5
push ecx
mov dword [esp], 0x3e99999a
mov ecx, eax
push str.datgrass_bill_4.png
push 0xc8
call fcn.00531ea0
jmp 0x4a62d7
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [0x635b90], eax
call fcn.004f7b50
lea eax, [edi + 0x13c]
push eax
mov eax, dword [0x635408]
push 0
push 0
push 0xff000000
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
push 0x15
push 0
push 0
push 0
push 0
push str.datmerchant.png
push dword [eax + 0x2a3d8]
call fcn.00408a02
lea eax, [edi + 0x140]
push eax
mov eax, dword [0x635408]
push 0
push 0
push 0xff000000
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
push 0x15
push 0
push 0
push 0
push 0
push str.dat_trainer.png
push dword [eax + 0x2a3d8]
call fcn.00408a02
lea eax, [edi + 0x144]
push eax
mov eax, dword [0x635408]
push 0
push 0
push 0xff000000
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
push 0x15
push 0
push 0
push 0
push 0
push str.dat_townmage.png
push dword [eax + 0x2a3d8]
call fcn.00408a02
lea eax, [edi + 0x148]
push eax
mov eax, dword [0x635408]
push 0
push 0
push 0xff000000
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
push 0x15
push 0
push 0
push 0
push 0
push str.dat_bar_red.png
push dword [eax + 0x2a3d8]
call fcn.00408a02
lea eax, [edi + 0x14c]
push eax
push 0
push 0
push 0xff000000
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
push 0x15
push 0
mov eax, dword [0x635408]
push 0
push 0
push 0
push str.dat_bar_green.png
push dword [eax + 0x2a3d8]
call fcn.00408a02
lea eax, [edi + 0x150]
push eax
mov eax, dword [0x635408]
push 0
push 0
push 0xff000000
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
push 0x15
push 0
push 0
push 0
push 0
push str.dat_specialDunSky.png
push dword [eax + 0x2a3d8]
call fcn.00408a02
call fcn.004f7b50
lea ecx, [edi + 0x430]
call fcn.00471ed0
lea ecx, [edi + 0x464]
call fcn.00523ad0
push 0x4c
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x2e
test eax, eax
je 0x4a646a
push str.dat_footstep1.wav
mov ecx, eax
call fcn.004682a0
jmp 0x4a646c
xor eax, eax
push 0x4c
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 0x4dc], eax
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x2f
test eax, eax
je 0x4a64a2
push str.dat_footstep2.wav
mov ecx, eax
call fcn.004682a0
jmp 0x4a64a4
xor eax, eax
push 0x4c
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 0x4e0], eax
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x30
test eax, eax
je 0x4a64da
push str.dat_footstep3.wav
mov ecx, eax
call fcn.004682a0
jmp 0x4a64dc
xor eax, eax
push 0x4c
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 0x4e4], eax
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x31
test eax, eax
je 0x4a6512
push str.dat_footstep4.wav
mov ecx, eax
call fcn.004682a0
jmp 0x4a6514
xor eax, eax
mov dword [ebp - 4], 0xffffffff
lea ebx, [edi + 0x4ec]
mov dword [edi + 0x4e8], eax
mov esi, 0x61a590
nop dword [eax]
push 0x4c
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x32
test eax, eax
je 0x4a6555
push esi
mov ecx, eax
call fcn.004682a0
jmp 0x4a6557
xor eax, eax
mov dword [ebx], eax
add esi, 0x20
add ebx, 4
mov dword [ebp - 4], 0xffffffff
cmp esi, str.datpuff.wav
jl 0x4a6530
mov esi, str.datpuff.wav
lea ebx, [edi + 0x584]
nop dword [eax]
push 0x4c
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x33
test eax, eax
je 0x4a65a5
push esi
mov ecx, eax
call fcn.004682a0
jmp 0x4a65a7
xor eax, eax
mov dword [ebx], eax
add esi, 0x20
add ebx, 4
mov dword [ebp - 4], 0xffffffff
cmp esi, str.dat_thunder1.wav
jl 0x4a6580
mov esi, str.dat_thunder1.wav
lea ebx, [edi + 0x5a0]
nop dword [eax]
push 0x4c
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x34
test eax, eax
je 0x4a65f5
push esi
mov ecx, eax
call fcn.004682a0
jmp 0x4a65f7
xor eax, eax
mov dword [ebx], eax
add esi, 0x20
add ebx, 4
mov dword [ebp - 4], 0xffffffff
cmp esi, 0x61ab10
jl 0x4a65d0
push 0x4c
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x35
test eax, eax
je 0x4a6637
push str.dathurtAv.wav
mov ecx, eax
call fcn.004682a0
jmp 0x4a6639
xor eax, eax
push 0x4c
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 0x574], eax
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x36
test eax, eax
je 0x4a666f
push str.dat_teleport.wav
mov ecx, eax
call fcn.004682a0
jmp 0x4a6671
xor eax, eax
push 0x4c
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 0x578], eax
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x37
test eax, eax
je 0x4a66a7
push str.datheal.wav
mov ecx, eax
call fcn.004682a0
jmp 0x4a66a9
xor eax, eax
push 0x4c
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 0x57c], eax
call fcn.0055f3ea
add esp, 4
mov dword [ebp - 0x418], eax
mov dword [ebp - 4], 0x38
test eax, eax
je 0x4a66df
push str.dat_thief.wav
mov ecx, eax
call fcn.004682a0
jmp 0x4a66e1
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 0x580], eax
call fcn.004f7b50
mov dword [edi + 0x5b0], 0x447a0000
mov dword [edi + 0x5bc], 0x447a0000
mov dword [edi + 0x5c8], 0x447a0000
mov dword [edi + 0x5d4], 0x447a0000
mov dword [edi + 0x5e0], 0x447a0000
mov dword [edi + 0x60c], 5
mov dword [edi + 0x420], 0
mov dword [edi + 0x424], 0
mov dword [edi + 0x754], 0x100
mov dword [edi + 0x758], 0x100
mov dword [edi + 0x750], 0
mov dword [edi + 0x74c], 0
call dword [sym.imp.WINMM.dll_timeGetTime]
mov dword [edi + 0x428], eax
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0055f428
mov esp, ebp
pop ebp
ret
call fcn.005a0e82
int3