Function at 0x449fd0
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Get number of processors

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c5142
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x458
mov eax, dword [0x507b40]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x440], edi
lea ecx, [edi + 0x228]
mov dword [edi], vtable.BBOClient.0
call fcn.0043ba40
mov dword [edi + 0x29c], 0
mov dword [edi + 0x2a0], 0
mov dword [edi + 0x2a4], 0xffffffff
call fcn.00465880
call fcn.00449db0
mov dword [edi + 0x414], 0
lea esi, [edi + 0x618]
mov dword [edi + 0x41c], 0
mov eax, dword [0x509420]
push 0x68
push 0
push esi
mov eax, dword [eax + 0x2a680]
mov dword [eax], 0xbfc90fdb
mov eax, dword [0x509420]
mov eax, dword [eax + 0x2a680]
mov dword [eax + 4], 0xbebd70a4
mov eax, dword [0x509420]
mov eax, dword [eax + 0x2a680]
mov dword [eax + 0xc], 0x43250000
mov eax, dword [0x509420]
mov eax, dword [eax + 0x2a680]
mov dword [eax + 0x10], 0xc2840000
mov eax, dword [0x509420]
mov eax, dword [eax + 0x2a680]
mov dword [eax + 0x14], 0xc2fa0000
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], 0
mov dword [edi + 0x48], 0
mov dword [edi + 0x4c], 0
mov dword [edi + 0x50], 0
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x5c], 0
mov dword [edi + 0x60], 0
mov dword [edi + 0x20], 0x3f000000
mov dword [edi + 0x24], 0x3f000000
mov dword [edi + 0x28], 0x3f000000
mov dword [edi + 0x2c], 0x3f000000
mov dword [edi + 0x30], 0x3f000000
mov dword [edi + 0x34], 0x3f000000
mov dword [edi + 0x38], 0x3f000000
mov dword [edi + 0x3c], 0x3f000000
call fcn.0049c270
movss xmm1, dword [0x4ca5d0]
add esp, 0xc
movss xmm0, dword [0x4ca598]
mov dword [ebp - 0x444], 0x3f000000
mov eax, dword [ebp - 0x444]
mov dword [ebp - 0x428], eax
lea eax, [ebp - 0x430]
push eax
lea eax, [edi + 0x658]
unpcklps xmm0, xmm1
push eax
mov dword [esi], 3
mov dword [edi + 0x61c], 0x3f800000
mov dword [edi + 0x620], 0x3f800000
mov dword [edi + 0x624], 0x3f800000
mov dword [edi + 0x63c], 0x3f800000
mov dword [edi + 0x640], 0x3f800000
mov dword [edi + 0x644], 0x3f800000
movaps xmmword [ebp - 0x460], xmm1
movq qword [ebp - 0x430], xmm0
call fcn.00401271
mov eax, dword [ebp - 0x440]
mov ecx, 0x1a
movaps xmm0, xmmword [ebp - 0x460]
mov dword [edi + 0x664], 0x447a0000
add edi, 0x6e8
rep movsd dword es:[edi], dword [esi]
lea edi, [eax + 0x680]
unpcklps xmm0, xmm0
mov ecx, 0x1a
mov dword [ebp - 0x444], 0xbf000000
lea esi, [eax + 0x618]
movq qword [ebp - 0x424], xmm0
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x444]
mov esi, dword [ebp - 0x440]
mov dword [ebp - 0x41c], eax
lea eax, [ebp - 0x424]
push eax
lea eax, [esi + 0x6c0]
push eax
call fcn.00401271
push str.BBOClient::SetEnvironment__n
mov ecx, 0x50936c
call fcn.004304a0
push 0x174
call fcn.00498854
add esp, 4
mov dword [ebp - 0x434], eax
mov dword [ebp - 4], 0
test eax, eax
je 0x44a27f
mov ecx, eax
call fcn.00441270
mov ecx, eax
jmp 0x44a281
xor ecx, ecx
mov dword [esi + 0xa8], ecx
mov eax, dword [0x509420]
push str.dat_skydome.ase
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00441d90
mov eax, dword [0x509420]
mov ecx, dword [esi + 0xa8]
push 0
push str.dat_sky.png
push dword [eax + 0x2a3d8]
call fcn.004425d0
push 0x94074
call fcn.00498854
add esp, 4
mov dword [ebp - 0x434], eax
mov dword [ebp - 4], 1
test eax, eax
je 0x44a2e9
mov ecx, eax
call fcn.00468970
mov ecx, eax
jmp 0x44a2eb
xor ecx, ecx
push 0
mov dword [esi + 0x158], ecx
mov eax, dword [0x509420]
push 0x100
push 0x100
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.0046aa90
mov eax, dword [0x509420]
mov ecx, dword [esi + 0x158]
push 0x4cc6cc
push dword [eax + 0x2a3d8]
call fcn.0046d420
mov ecx, dword [esi + 0x158]
call fcn.00469810
call fcn.00465880
push 0x14
call fcn.00498854
add esp, 4
mov dword [ebp - 0x434], eax
mov dword [ebp - 4], 2
test eax, eax
je 0x44a369
push dword [esi + 0x158]
mov ecx, eax
call fcn.0045c1a0
jmp 0x44a36b
xor eax, eax
mov dword [esi + 0x160], eax
mov dword [0x509a90], 0
mov dword [esi + 0x298], 0
mov dword [esi + 0x288], 0
mov dword [esi + 0x284], 0
mov dword [esi + 0x294], 0
mov dword [0x509a94], 0
mov dword [0x509a98], 0
mov dword [0x509a9c], 0
push 8
mov dword [ebp - 4], 0xffffffff
mov dword [esi + 0x210], 0xffffffff
mov dword [esi + 0x164], 0
mov dword [esi + 0x168], 0
mov dword [esi + 0x16c], 0
mov dword [esi + 0x290], 0
call fcn.00498854
add esp, 4
mov dword [ebp - 0x434], eax
mov dword [ebp - 4], 3
test eax, eax
je 0x44a41e
mov ecx, eax
call fcn.00467af0
jmp 0x44a420
xor eax, eax
push 0x4ec
mov dword [ebp - 4], 0xffffffff
mov dword [esi + 4], eax
call fcn.00498854
add esp, 4
mov dword [ebp - 0x434], eax
mov dword [ebp - 4], 4
test eax, eax
je 0x44a458
push str.PLAYER
push 0
mov ecx, eax
call fcn.0045a5a0
jmp 0x44a45a
xor eax, eax
mov ecx, dword [esi + 4]
push eax
mov dword [ebp - 4], 0xffffffff
mov dword [esi + 0xc], eax
mov dword [esi + 8], eax
call fcn.00467c50
mov ecx, eax
mov eax, dword [esi + 8]
mov dword [eax + 0x170], ecx
mov eax, dword [esi + 8]
mov ecx, dword [esi + 4]
push eax
push dword [eax + 0x170]
call fcn.00467c10
mov edi, eax
mov eax, dword [esi + 8]
mov dword [eax + 0x168], 0x28
mov eax, dword [esi + 8]
mov dword [eax + 0x164], 0x28
mov eax, dword [esi + 8]
mov dword [eax + 0x108], 0
mov eax, dword [esi + 8]
mov dword [eax + 0x10c], 0
mov eax, dword [esi + 8]
mov ecx, dword [esi + 0x158]
push dword [eax + 0x164]
call fcn.0046cb20
mov eax, dword [esi + 8]
fstp dword [ebp - 0x434]
movss xmm0, dword [ebp - 0x434]
movss dword [eax + 0x114], xmm0
mov eax, dword [esi + 8]
mov ecx, dword [esi + 0x158]
push dword [eax + 0x168]
call fcn.0046cb20
mov eax, dword [esi + 8]
fstp dword [ebp - 0x434]
movss xmm0, dword [ebp - 0x434]
movss dword [eax + 0x11c], xmm0
mov eax, dword [esi + 8]
movss xmm0, dword [eax + 0x114]
movss xmm1, dword [eax + 0x11c]
mov eax, dword [0x509a90]
cmp eax, 1
je 0x44a592
cmp eax, 3
je 0x44a592
push 0
sub esp, 8
movss dword [esp + 4], xmm1
movss dword [esp], xmm0
cmp eax, 4
jne 0x44a567
mov ecx, dword [esi + 0x168]
call fcn.0047fcd0
fstp dword [ebp - 0x43c]
jmp 0x44a59c
cmp eax, 2
jne 0x44a57f
mov ecx, dword [esi + 0x16c]
call fcn.0047fcd0
fstp dword [ebp - 0x43c]
jmp 0x44a59c
mov ecx, dword [esi + 0x158]
call fcn.0046cc50
fstp dword [ebp - 0x43c]
jmp 0x44a59c
mov dword [ebp - 0x43c], 0
mov eax, dword [esi + 8]
movss xmm0, dword [ebp - 0x43c]
push 0x10
movss dword [eax + 0x118], xmm0
mov eax, dword [esi + 8]
mov dword [esi + 0x1fc], 0xbea3d70a
movss xmm0, dword [eax + 0x108]
movss dword [edi + 0x118], xmm0
movss dword [edi + 0x11c], xmm0
mov dword [edi + 0x120], 0x3e75c28f
mov dword [edi + 0x124], 0x3e567750
mov eax, dword [esi + 8]
movss xmm0, dword [eax + 0x114]
movss dword [edi + 0x110], xmm0
movss dword [edi + 0x108], xmm0
mov eax, dword [esi + 8]
movss xmm0, dword [eax + 0x11c]
movss dword [edi + 0x114], xmm0
movss dword [edi + 0x10c], xmm0
mov dword [edi + 0x128], 0x3e99999a
call fcn.00498854
add esp, 4
mov dword [ebp - 0x434], eax
mov dword [ebp - 4], 5
test eax, eax
je 0x44a64c
mov ecx, eax
call fcn.00434c10
jmp 0x44a64e
xor eax, eax
push 0x10
mov dword [ebp - 4], 0xffffffff
mov dword [esi + 0x18], eax
call fcn.00498854
add esp, 4
mov dword [ebp - 0x434], eax
mov dword [ebp - 4], 6
test eax, eax
je 0x44a67c
mov ecx, eax
call fcn.00434c10
jmp 0x44a67e
xor eax, eax
push 0x174
mov dword [ebp - 4], 0xffffffff
mov dword [esi + 0x1c], eax
call fcn.00498854
add esp, 4
mov dword [ebp - 0x434], eax
mov dword [ebp - 4], 7
test eax, eax
je 0x44a6b8
push str.AVATAR_STAND
push 1
mov ecx, eax
call fcn.0043e4b0
mov ecx, eax
jmp 0x44a6ba
xor ecx, ecx
mov dword [esi + 0x120], ecx
mov eax, dword [0x509420]
push 0xffffffffffffffff
push str.dat_avatar_stand.anc
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.0043ea90
mov eax, dword [0x509420]
mov ecx, dword [esi + 0x120]
push dword [eax + 0x2a3d8]
call fcn.0043e960
mov ecx, dword [esi + 0x120]
mov edi, eax
mov eax, dword [0x509420]
push edi
push 0
push dword [eax + 0x2a3d8]
call fcn.004405f0
mov eax, dword [0x509420]
sub esp, 0xc
mov ecx, dword [esi + 0x120]
mov dword [esp + 8], 0
mov dword [esp + 4], 0xbdcccccd
mov dword [esp], 0
push 0
push dword [eax + 0x2a3d8]
call fcn.0043e6d0
push 0x174
call fcn.00498854
add esp, 4
mov dword [ebp - 0x434], eax
mov dword [ebp - 4], 8
test eax, eax
je 0x44a771
push str.AVATAR_RUN
push 1
mov ecx, eax
call fcn.0043e4b0
mov ecx, eax
jmp 0x44a773
xor ecx, ecx
mov dword [esi + 0x124], ecx
mov eax, dword [0x509420]
push 0xffffffffffffffff
push str.dat_avatar_run.anc
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.0043ea90
mov eax, dword [0x509420]
mov ecx, dword [esi + 0x124]
push edi
push 0
push dword [eax + 0x2a3d8]
call fcn.004405f0
mov eax, dword [0x509420]
sub esp, 0xc
mov ecx, dword [esi + 0x124]
mov dword [esp + 8], 0
mov dword [esp + 4], 0xbdcccccd
mov dword [esp], 0
push 0
push dword [eax + 0x2a3d8]
call fcn.0043e6d0
call fcn.00465880
push 0x174
call fcn.00498854
add esp, 4
mov dword [ebp - 0x434], eax
mov dword [ebp - 4], 9
test eax, eax
je 0x44a817
push str.AVATAR_ATTACK
push 1
mov ecx, eax
call fcn.0043e4b0
mov ecx, eax
jmp 0x44a819
xor ecx, ecx
mov dword [esi + 0x128], ecx
mov eax, dword [0x509420]
push 0xffffffffffffffff
push str.dat_avatar_attack.anc
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.0043ea90
mov eax, dword [0x509420]
mov ecx, dword [esi + 0x128]
push edi
push 0
push dword [eax + 0x2a3d8]
call fcn.004405f0
mov eax, dword [0x509420]
sub esp, 0xc
mov ecx, dword [esi + 0x128]
mov dword [esp + 8], 0
mov dword [esp + 4], 0xbdcccccd
mov dword [esp], 0
push 0
push dword [eax + 0x2a3d8]
call fcn.0043e6d0
push 0x174
call fcn.00498854
add esp, 4
mov dword [ebp - 0x434], eax
mov dword [ebp - 4], 0xa
test eax, eax
je 0x44a8b8
push str.AVATAR_ATTACK2
push 1
mov ecx, eax
call fcn.0043e4b0
mov ecx, eax
jmp 0x44a8ba
xor ecx, ecx
mov dword [esi + 0x12c], ecx
mov eax, dword [0x509420]
push 0xffffffffffffffff
push str.dat_avatar_attack2.anc
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.0043ea90
mov eax, dword [0x509420]
mov ecx, dword [esi + 0x12c]
push edi
push 0
push dword [eax + 0x2a3d8]
call fcn.004405f0
mov eax, dword [0x509420]
sub esp, 0xc
mov ecx, dword [esi + 0x12c]
mov dword [esp + 8], 0
mov dword [esp + 4], 0xbdcccccd
mov dword [esp], 0
push 0
push dword [eax + 0x2a3d8]
call fcn.0043e6d0
push 0x174
call fcn.00498854
add esp, 4
mov dword [ebp - 0x434], eax
mov dword [ebp - 4], 0xb
test eax, eax
je 0x44a959
push str.MERCHANT_ANIM
push 1
mov ecx, eax
call fcn.0043e4b0
mov ecx, eax
jmp 0x44a95b
xor ecx, ecx
mov dword [esi + 0x130], ecx
mov eax, dword [0x509420]
push 0xffffffffffffffff
push str.datmerchant.anc
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.0043ea90
push 0x174
call fcn.00498854
add esp, 4
mov dword [ebp - 0x434], eax
mov dword [ebp - 4], 0xc
test eax, eax
je 0x44a9af
push str.WITCHSTAND_ANIM
push 1
mov ecx, eax
call fcn.0043e4b0
mov ecx, eax
jmp 0x44a9b1
xor ecx, ecx
mov dword [esi + 0x134], ecx
mov eax, dword [0x509420]
push 0xffffffffffffffff
push str.datwitch_idle.anc
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.0043ea90
mov eax, dword [0x509420]
mov ecx, dword [esi + 0x134]
push 0
push 0x4cc7c8
push dword [eax + 0x2a3d8]
call fcn.0043faa0
push 0x174
call fcn.00498854
add esp, 4
mov dword [ebp - 0x434], eax
mov dword [ebp - 4], 0xd
test eax, eax
je 0x44aa22
push str.WITCHTALK_ANIM
push 1
mov ecx, eax
call fcn.0043e4b0
mov ecx, eax
jmp 0x44aa24
xor ecx, ecx
mov dword [esi + 0x138], ecx
mov eax, dword [0x509420]
push 0xffffffffffffffff
push str.datwitch_talk.anc
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.0043ea90
mov eax, dword [0x509420]
mov ecx, dword [esi + 0x138]
push 0
push str.datwitch.PNG
push dword [eax + 0x2a3d8]
call fcn.0043faa0
mov dword [esi + 0x224], 0
call fcn.00465880
push 0x174
call fcn.00498854
add esp, 4
mov dword [ebp - 0x434], eax
mov dword [ebp - 4], 0xe
test eax, eax
je 0x44aa9d
mov ecx, eax
call fcn.00441270
mov ecx, eax
jmp 0x44aa9f
xor ecx, ecx
mov dword [esi + 0xb0], ecx
mov eax, dword [0x509420]
push str.dat_sack.ase
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00441d90
mov eax, dword [0x509420]
mov ecx, dword [esi + 0xb0]
push 0
push str.dat_sack.png
push dword [eax + 0x2a3d8]
call fcn.004425d0
mov eax, dword [0x509420]
sub esp, 0xc
mov ecx, dword [esi + 0xb0]
mov dword [esp + 8], 0x3b656042
mov dword [esp + 4], 0x3b656042
mov dword [esp], 0x3b656042
push dword [eax + 0x2a3d8]
call fcn.00442a50
push 0x174
call fcn.00498854
add esp, 4
mov dword [ebp - 0x434], eax
mov dword [ebp - 4], 0xf
test eax, eax
je 0x44ab37
mov ecx, eax
call fcn.00441270
mov ecx, eax
jmp 0x44ab39
xor ecx, ecx
mov dword [esi + 0x118], ecx
mov eax, dword [0x509420]
push 0x4cc82c
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00441d90
mov eax, dword [0x509420]
mov ecx, dword [esi + 0x118]
push 0
push 0x4cc83c
push dword [eax + 0x2a3d8]
call fcn.004425d0
mov eax, dword [0x509420]
sub esp, 0xc
mov ecx, dword [esi + 0x118]
mov dword [esp + 8], 0x3b449ba6
mov dword [esp + 4], 0x3b449ba6
mov dword [esp], 0x3b449ba6
push dword [eax + 0x2a3d8]
call fcn.00442a50
push 0x174
call fcn.00498854
add esp, 4
mov dword [ebp - 0x434], eax
mov dword [ebp - 4], 0x10
test eax, eax
je 0x44abd1
mov ecx, eax
call fcn.00441270
mov ecx, eax
jmp 0x44abd3
xor ecx, ecx
mov dword [esi + 0x11c], ecx
mov eax, dword [0x509420]
push str.dat_bomb.ase
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00441d90
mov eax, dword [0x509420]
mov ecx, dword [esi + 0x11c]
push 0
push str.dat_bomb.png
push dword [eax + 0x2a3d8]
call fcn.004425d0
mov eax, dword [0x509420]
sub esp, 0xc
mov ecx, dword [esi + 0x11c]
mov dword [esp + 8], 0x3be56042
mov dword [esp + 4], 0x3be56042
mov dword [esp], 0x3be56042
push dword [eax + 0x2a3d8]
call fcn.00442a50
push 0x174
call fcn.00498854
add esp, 4
mov dword [ebp - 0x434], eax
mov dword [ebp - 4], 0x11
test eax, eax
je 0x44ac6b
mov ecx, eax
call fcn.00441270
mov ecx, eax
jmp 0x44ac6d
xor ecx, ecx
mov dword [esi + 0xd4], ecx
mov eax, dword [0x509420]
push 0x4cc86c
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00441d90
mov eax, dword [0x509420]
mov ecx, dword [esi + 0xd4]
push 1
push 0x4cc87c
push dword [eax + 0x2a3d8]
call fcn.004425d0
mov eax, dword [0x509420]
sub esp, 0xc
mov ecx, dword [esi + 0xd4]
mov dword [esp + 8], 0x3cf5c28f
mov dword [esp + 4], 0x3cf5c28f
mov dword [esp], 0x3cf5c28f
push dword [eax + 0x2a3d8]
call fcn.00442a50
push 0x174
call fcn.00498854
add esp, 4
mov dword [ebp - 0x434], eax
mov dword [ebp - 4], 0x12
test eax, eax
je 0x44ad05
mov ecx, eax
call fcn.00441270
mov ecx, eax
jmp 0x44ad07
xor ecx, ecx
mov dword [esi + 0xe4], ecx
mov eax, dword [0x509420]
push str.dat_tower.ase
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00441d90
mov eax, dword [0x509420]
mov ecx, dword [esi + 0xe4]
push 1
push str.dat_tower.png
push dword [eax + 0x2a3d8]
call fcn.004425d0
mov eax, dword [0x509420]
sub esp, 0xc
mov ecx, dword [esi + 0xe4]
mov dword [esp + 8], 0x3be56042
mov dword [esp + 4], 0x3ba3d70a
mov dword [esp], 0x3be56042
push dword [eax + 0x2a3d8]
call fcn.00442a50
push 0x174
call fcn.00498854
add esp, 4
mov dword [ebp - 0x434], eax
mov dword [ebp - 4], 0x13
test eax, eax
je 0x44ad9f
mov ecx, eax
call fcn.00441270
mov ecx, eax
jmp 0x44ada1
xor ecx, ecx
mov dword [esi + 0x110], ecx
mov eax, dword [0x509420]
push str.dat_rop_tower.ase
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00441d90
mov eax, dword [0x509420]
mov ecx, dword [esi + 0x110]
push 0
push str.dat_rop_tower.png
push dword [eax + 0x2a3d8]
call fcn.004425d0
mov eax, dword [0x509420]
sub esp, 0xc
mov ecx, dword [esi + 0x110]
mov dword [esp + 8], 0x3be56042
mov dword [esp + 4], 0x3ba3d70a
mov dword [esp], 0x3be56042
push dword [eax + 0x2a3d8]
call fcn.00442a50
push 0x174
call fcn.00498854
add esp, 4
mov dword [ebp - 0x434], eax
mov dword [ebp - 4], 0x14
test eax, eax
je 0x44ae39
mov ecx, eax
call fcn.00441270
mov ecx, eax
jmp 0x44ae3b
xor ecx, ecx
mov dword [esi + 0xb4], ecx
mov eax, dword [0x509420]
push 0x4cc8d4
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.004418b0
mov eax, dword [0x509420]
mov ecx, dword [esi + 0xb4]
push 0
push 0x4cc8e4
push dword [eax + 0x2a3d8]
call fcn.004425d0
push 0x174
call fcn.00498854
add esp, 4
mov dword [ebp - 0x434], eax
mov dword [ebp - 4], 0x15
test eax, eax
je 0x44aea3
mov ecx, eax
call fcn.00441270
mov ecx, eax
jmp 0x44aea5
xor ecx, ecx
mov dword [esi + 0xb8], ecx
mov eax, dword [0x509420]
push 0x4cc8f4
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.004418b0
mov eax, dword [0x509420]
mov ecx, dword [esi + 0xb8]
push 0
push str.datcave.png
push dword [eax + 0x2a3d8]
call fcn.004425d0
call fcn.00465880
push 0x174
call fcn.00498854
add esp, 4
mov dword [ebp - 0x434], eax
mov dword [ebp - 4], 0x16
test eax, eax
je 0x44af12
mov ecx, eax
call fcn.00441270
mov ecx, eax
jmp 0x44af14
xor ecx, ecx
mov dword [esi + 0xbc], ecx
mov eax, dword [0x509420]
push 0x4cc914
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.004418b0
mov eax, dword [0x509420]
mov ecx, dword [esi + 0xbc]
push 0
push 0x4cc924
push dword [eax + 0x2a3d8]
call fcn.004425d0
push 0x174
call fcn.00498854
add esp, 4
mov dword [ebp - 0x434], eax
mov dword [ebp - 4], 0x17
test eax, eax
je 0x44af7c
mov ecx, eax
call fcn.00441270
mov ecx, eax
jmp 0x44af7e
xor ecx, ecx
mov dword [esi + 0xc0], ecx
mov eax, dword [0x509420]
push str.datcave2.MEC
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.004418b0
mov eax, dword [0x509420]
mov ecx, dword [esi + 0xc0]
push 0
push str.datcaveRed.png
push dword [eax + 0x2a3d8]
call fcn.004425d0
push 0x174
call fcn.00498854
add esp, 4
mov dword [ebp - 0x434], eax
mov dword [ebp - 4], 0x18
test eax, eax
je 0x44afe6
mov ecx, eax
call fcn.00441270
mov ecx, eax
jmp 0x44afe8
xor ecx, ecx
mov dword [esi + 0xc4], ecx
mov eax, dword [0x509420]
push str.datcave.MEC
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.004418b0
mov eax, dword [0x509420]
mov ecx, dword [esi + 0xc4]
push 0
push str.datcaveBlack.png
push dword [eax + 0x2a3d8]
call fcn.004425d0
push 0x174
call fcn.00498854
add esp, 4
mov dword [ebp - 0x434], eax
mov dword [ebp - 4], 0x19
test eax, eax
je 0x44b050
mov ecx, eax
call fcn.00441270
mov ecx, eax
jmp 0x44b052
xor ecx, ecx
mov dword [esi + 0xc8], ecx
mov eax, dword [0x509420]
push str.dat_standin_box.ASE
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00441d90
mov eax, dword [0x509420]
mov ecx, dword [esi + 0xc8]
push 0
push 0x4cc98c
push dword [eax + 0x2a3d8]
call fcn.004425d0
mov eax, dword [0x509420]
sub esp, 0xc
mov ecx, dword [esi + 0xc8]
mov dword [esp + 8], 0x3ba3d70a
mov dword [esp + 4], 0x3ba3d70a
mov dword [esp], 0x3ba3d70a
push dword [eax + 0x2a3d8]
call fcn.00442a50
push 0x174
call fcn.00498854
add esp, 4
mov dword [ebp - 0x434], eax
mov dword [ebp - 4], 0x1a
test eax, eax
je 0x44b0ea
mov ecx, eax
call fcn.00441270
mov ecx, eax
jmp 0x44b0ec
xor ecx, ecx
mov dword [esi + 0xcc], ecx
mov eax, dword [0x509420]
push str.datchestClosed.ase
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00441d90
mov eax, dword [0x509420]
sub esp, 0xc
mov ecx, dword [esi + 0xcc]
mov dword [esp + 8], 0x3b83126f
mov dword [esp + 4], 0x3b83126f
mov dword [esp], 0x3b83126f
push dword [eax + 0x2a3d8]
call fcn.00442a50
mov eax, dword [0x509420]
mov ecx, dword [esi + 0xcc]
push 0
push 0x4cc9b4
push dword [eax + 0x2a3d8]
call fcn.004425d0
push 0x174
call fcn.00498854
add esp, 4
mov dword [ebp - 0x434], eax
mov dword [ebp - 4], 0x1b
test eax, eax
je 0x44b184
mov ecx, eax
call fcn.00441270
mov ecx, eax
jmp 0x44b186
xor ecx, ecx
mov dword [esi + 0xd0], ecx
mov eax, dword [0x509420]
push str.datchestOpen.ase
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x2a3d8]
call fcn.00441d90
mov eax, dword [0x509420]
sub esp, 0xc
mov ecx, dword [esi + 0xd0]
mov dword [esp + 8], 0x3b83126f
mov dword [esp + 4], 0x3b83126f
mov dword [esp], 0x3b83126f
push dword [eax + 0x2a3d8]
call fcn.00442a50
mov eax, dword [0x509420]
mov ecx, dword [esi + 0xd0]
push 0
push str.datchest.png
push dword [eax + 0x2a3d8]
call fcn.004425d0
call fcn.00465880
lea eax, [esi + 0xe8]
mov dword [ebp - 0x434], 0
mov edi, str.BEAR
mov dword [ebp - 0x43c], eax
push 0x174
call fcn.00498854
add esp, 4
mov dword [ebp - 0x438], eax
mov dword [ebp - 4], 0x1c
test eax, eax
je 0x44b23e
mov ecx, eax
call fcn.00441270
mov ecx, eax
jmp 0x44b240
xor ecx, ecx
mov eax, dword [ebp - 0x43c]
push str.dat_token.MEC
mov dword [ebp - 4], 0xffffffff
mov dword [eax], ecx
mov eax, dword [0x509420]
push dword [eax + 0x2a3d8]
call fcn.004418b0
cmp eax, 0x7c36e076
je 0x44b278
cmp dword [esi + 0x2a0], 0
je 0x44bfa0
cmp dword [ebp - 0x434], 9
lea eax, [ebp - 0x418]
jge 0x44b298
push edi
push str.dat_token__s.png
push eax
call fcn.00434540
add esp, 0xc
jmp 0x44b2a6
push str.dat_token_ctf.png
push eax
call fcn.00434540
add esp, 8
push 0
lea eax, [ebp - 0x418]
push eax
mov eax, dword [0x509420]
push dword [eax + 0x2a3d8]
mov eax, dword [ebp - 0x43c]
mov ecx, dword [eax]
call fcn.004425d0
inc dword [ebp - 0x434]
add edi, 0xc
add dword [ebp - 0x43c], 4
cmp edi, 0x4f1f8c
jle 0x44b215
movsd xmm0, qword [0x4cd648]
sub esp, 8
movsd qword [esp], xmm0
call fcn.00434a60
fstp dword [ebp - 0x434]
movss xmm0, dword [ebp - 0x434]
movss dword [esi + 0x1f8], xmm0
movss dword [esi + 0x1f4], xmm0
call fcn.00465880
mov eax, dword [esi + 0x158]
mov dword [esi + 0x20c], 0
mov ecx, dword [eax + 0x10c]
imul ecx, dword [eax + 0x108]
push ecx
call fcn.00498892
mov dword [esi + 0x170], eax
add esp, 0xc
mov eax, dword [esi + 0x158]
xor edx, edx
mov ecx, dword [eax + 0x10c]
imul ecx, dword [eax + 0x108]
test ecx, ecx
jle 0x44b382
mov eax, dword [esi + 0x170]
mov byte [edx + eax], 0
inc edx
mov eax, dword [esi + 0x158]
mov ecx, dword [eax + 0x10c]
imul ecx, dword [eax + 0x108]
cmp edx, ecx
jl 0x44b360
push 0x58
mov dword [esi + 0x14], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x280], 0
mov dword [esi + 0x28c], 0
mov dword [esi + 0x410], 0
call fcn.00498854
add esp, 4
mov dword [ebp - 0x438], eax
mov dword [ebp - 4], 0x1d
test eax, eax
je 0x44b3e4
push ecx
mov dword [esp], 0x3f19999a
mov ecx, eax
push 0x4cca20
push 0x12c
call fcn.004834a0
jmp 0x44b3e6
xor eax, eax
mov dword [0x509a48], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0x40c90fdb
mov dword [eax + 0x44], 0xbfc90fdb
mov dword [eax + 0x40], 0x3fc90fdb
mov dword [eax + 0x50], 0x42a00000
mov dword [eax + 0x54], 0x42700000
mov dword [eax + 0x4c], 0x3ca3d70a
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3d75c28f
call fcn.00465880
push 0x58
call fcn.00498854
add esp, 4
mov dword [ebp - 0x438], eax
mov dword [ebp - 4], 0x1e
test eax, eax
je 0x44b465
push ecx
mov dword [esp], 0x3dcccccd
mov ecx, eax
push 0x4cca34
push 0x258
call fcn.004834a0
jmp 0x44b467
xor eax, eax
mov dword [0x509a4c], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0
mov dword [eax + 0x44], 0x3fc90fdb
mov dword [eax + 0x40], 0x3fc90fdb
mov dword [eax + 0x50], 0x42a00000
mov dword [eax + 0x54], 0x42700000
mov dword [eax + 0x4c], 0x3c23d70a
push 0x58
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3c23d70a
call fcn.00498854
add esp, 4
mov dword [ebp - 0x438], eax
mov dword [ebp - 4], 0x1f
test eax, eax
je 0x44b4e1
push ecx
mov dword [esp], 0x3d75c28f
mov ecx, eax
push 0x4cca48
push 0x12c
call fcn.004834a0
jmp 0x44b4e3
xor eax, eax
mov dword [0x509a50], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0x40c90fdb
mov dword [eax + 0x44], 0x3f860a92
mov dword [eax + 0x40], 0x3fc90fdb
mov dword [eax + 0x50], 0x41a00000
mov dword [eax + 0x54], 0x40a00000
mov dword [eax + 0x4c], 0x3c23d70a
push 0x58
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3c23d70a
call fcn.00498854
add esp, 4
mov dword [ebp - 0x438], eax
mov dword [ebp - 4], 0x20
test eax, eax
je 0x44b55d
push ecx
mov dword [esp], 0x3dcccccd
mov ecx, eax
push 0x4cca5c
push 0x12c
call fcn.004834a0
jmp 0x44b55f
xor eax, eax
mov dword [0x509a54], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0
mov dword [eax + 0x44], 0xbfc90fdb
mov dword [eax + 0x40], 0xbfc90fdb
mov dword [eax + 0x50], 0x42c80000
mov dword [eax + 0x54], 0x42700000
mov dword [eax + 0x4c], 0x3c83126f
push 0x58
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3c83126f
call fcn.00498854
add esp, 4
mov dword [ebp - 0x438], eax
mov dword [ebp - 4], 0x21
test eax, eax
je 0x44b5d6
push ecx
mov dword [esp], 0x3e99999a
mov ecx, eax
push 0x4cca70
push 0x64
call fcn.004834a0
jmp 0x44b5d8
xor eax, eax
mov dword [0x509a58], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0x40c90fdb
mov dword [eax + 0x44], 0
mov dword [eax + 0x40], 0
mov dword [eax + 0x50], 0x43340000
mov dword [eax + 0x54], 0x43200000
mov dword [eax + 0x4c], 0x3c23d70a
push 0x58
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3ca3d70a
call fcn.00498854
add esp, 4
mov dword [ebp - 0x438], eax
mov dword [ebp - 4], 0x22
test eax, eax
je 0x44b64f
push ecx
mov dword [esp], 0x3e19999a
mov ecx, eax
push 0x4cca84
push 0x64
call fcn.004834a0
jmp 0x44b651
xor eax, eax
mov dword [0x509a5c], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0x40c90fdb
mov dword [eax + 0x44], 0
mov dword [eax + 0x40], 0
mov dword [eax + 0x50], 0x42a00000
mov dword [eax + 0x54], 0x42200000
mov dword [eax + 0x4c], 0x3ca3d70a
push 0x58
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3cf5c28f
call fcn.00498854
add esp, 4
mov dword [ebp - 0x438], eax
mov dword [ebp - 4], 0x23
test eax, eax
je 0x44b6cb
push ecx
mov dword [esp], 0x3f800000
mov ecx, eax
push 0x4cca98
push 0x12c
call fcn.004834a0
jmp 0x44b6cd
xor eax, eax
mov dword [0x509a60], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0x40c90fdb
mov dword [eax + 0x44], 0
mov dword [eax + 0x40], 0x3f490fdb
mov dword [eax + 0x50], 0x43340000
mov dword [eax + 0x54], 0x42c80000
mov dword [eax + 0x4c], 0x3ca3d70a
push 0x58
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3da3d70a
call fcn.00498854
add esp, 4
mov dword [ebp - 0x438], eax
mov dword [ebp - 4], 0x24
test eax, eax
je 0x44b744
push ecx
mov dword [esp], 0x3f666666
mov ecx, eax
push str.datmist1.png
push 0x64
call fcn.004844a0
jmp 0x44b746
xor eax, eax
mov dword [0x509a64], eax
mov dword [eax + 0x3c], 0x3f800000
mov dword [eax + 0x38], 0x3f8ccccd
mov dword [eax + 0x44], 0
mov dword [eax + 0x40], 0
mov dword [eax + 0x50], 0x43520000
mov dword [eax + 0x54], 0x43520000
mov dword [eax + 0x4c], 0x3ca3d70a
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3cf5c28f
call fcn.00465880
push 0x58
call fcn.00498854
add esp, 4
mov dword [ebp - 0x438], eax
mov dword [ebp - 4], 0x25
test eax, eax
je 0x44b7c2
push ecx
mov dword [esp], 0
mov ecx, eax
push str.dat_bombFire.png
push 0x64
call fcn.00486130
jmp 0x44b7c4
xor eax, eax
mov dword [0x509a68], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0x40c90fdb
mov dword [eax + 0x44], 0xbfc90fdb
mov dword [eax + 0x40], 0x3fc90fdb
mov dword [eax + 0x50], 0x42a00000
mov dword [eax + 0x54], 0x42700000
mov dword [eax + 0x4c], 0x3e4ccccd
push 0x5c
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3ecccccd
call fcn.00498854
add esp, 4
mov dword [ebp - 0x438], eax
mov dword [ebp - 4], 0x26
test eax, eax
je 0x44b845
sub esp, 8
mov ecx, eax
mov dword [esp + 4], 0x3e4ccccd
mov dword [esp], 0x3b449ba6
push str.dat_smoke.png
push 0x64
call fcn.00486fa0
jmp 0x44b847
xor eax, eax
mov dword [0x509a6c], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0x3f860a92
mov dword [eax + 0x44], 0xbfc90fdb
mov dword [eax + 0x40], 0x3fc90fdb
mov dword [eax + 0x50], 0x42a00000
mov dword [eax + 0x54], 0x42700000
mov dword [eax + 0x4c], 0x3c23d70a
push 0x70
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x48], 0x3ca3d70a
call fcn.00498854
add esp, 4
mov dword [ebp - 0x438], eax
mov dword [ebp - 4], 0x27
test eax, eax
je 0x44b8be
push ecx
mov dword [esp], 0x3dcccccd
mov ecx, eax
push 0x4ccae0
push 0x64
call fcn.00485100
jmp 0x44b8c0
xor eax, eax
mov dword [0x509a70], eax
mov dword [eax + 0x3c], 0
mov dword [eax + 0x38], 0
mov dword [eax + 0x44], 0
mov dword [eax + 0x40], 0
mov dword [eax + 0x50], 0x428c0000
mov dword [eax + 0x54], 0x42200000
mov dword [eax + 0x4c], 0
mov dword [eax + 0x48], 0
mov dword [eax + 0x68], 0x3f333333
mov dword [eax + 0x6c], 0x3ecccccd
mov dword [eax + 0x60], 0
mov dword [eax + 0x64], 0
mov dword [eax + 0x58], 0x3d23d70a
push 0x18
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x5c], 0x3cf5c28f
call fcn.00498854
add esp, 4
mov dword [ebp - 0x438], eax
mov dword [ebp - 4], 0x28
test eax, eax
je 0x44b961
push ecx
mov dword [esp], 0x3e99999a
mov ecx, eax
push 0x4ccaf4
push 0x1e
call fcn.0048ac60
jmp 0x44b963
xor eax, eax
push 0x10
mov dword [ebp - 4], 0xffffffff
mov dword [0x509a74], eax
call fcn.00498854
add esp, 4
mov dword [ebp - 0x438], eax
mov dword [ebp - 4], 0x29
test eax, eax
je 0x44b995
push 0x64
mov ecx, eax
call fcn.00468390
jmp 0x44b997
xor eax, eax
push 0x24
mov dword [ebp - 4], 0xffffffff
mov dword [0x509a78], eax
call fcn.00498854
add esp, 4
mov dword [ebp - 0x438], eax
mov dword [ebp - 4], 0x2a
test eax, eax
je 0x44b9d9
push ecx
mov dword [esp], 0x3e4ccccd
mov ecx, eax
push 0x4ccb08
push 0xc8
call fcn.0048d080
jmp 0x44b9db
xor eax, eax
push 0x24
mov dword [ebp - 4], 0xffffffff
mov dword [0x509a7c], eax
call fcn.00498854
add esp, 4
mov dword [ebp - 0x438], eax
mov dword [ebp - 4], 0x2b
test eax, eax
je 0x44ba1d
push ecx
mov dword [esp], 0x3e800000
mov ecx, eax
push 0x4ccb20
push 0xc8
call fcn.0048d080
jmp 0x44ba1f
xor eax, eax
push 0x24
mov dword [ebp - 4], 0xffffffff
mov dword [0x509a80], eax
call fcn.00498854
add esp, 4
mov dword [ebp - 0x438], eax
mov dword [ebp - 4], 0x2c
test eax, eax
je 0x44ba61
push ecx
mov dword [esp], 0x3e99999a
mov ecx, eax
push 0x4ccb38
push 0xc8
call fcn.0048d080
jmp 0x44ba63
xor eax, eax
push 0x24
mov dword [ebp - 4], 0xffffffff
mov dword [0x509a84], eax
call fcn.00498854
add esp, 4
mov dword [ebp - 0x438], eax
mov dword [ebp - 4], 0x2d
test eax, eax
je 0x44baa5
push ecx
mov dword [esp], 0x3e99999a
mov ecx, eax
push 0x4ccb50
push 0xc8
call fcn.0048d080
jmp 0x44baa7
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [0x509a88], eax
call fcn.00465880
lea eax, [esi + 0x13c]
push eax
mov eax, dword [0x509420]
push 0
push 0
push 0xff000000
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
push 0x15
push 0
push 0
push 0
push 0
push str.datmerchant.png
push dword [eax + 0x2a3d8]
call fcn.00405959
lea eax, [esi + 0x150]
push eax
mov eax, dword [0x509420]
push 0
push 0
push 0xff000000
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
push 0x15
push 0
push 0
push 0
push 0
push str.datcommunityMerchant.png
push dword [eax + 0x2a3d8]
call fcn.00405959
lea eax, [esi + 0x140]
push eax
mov eax, dword [0x509420]
push 0
push 0
push 0xff000000
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
push 0x15
push 0
push 0
push 0
push 0
push str.dat_trainer.png
push dword [eax + 0x2a3d8]
call fcn.00405959
lea eax, [esi + 0x144]
push eax
mov eax, dword [0x509420]
push 0
push 0
push 0xff000000
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
push 0x15
push 0
push 0
push 0
push 0
push str.dat_townmage.png
push dword [eax + 0x2a3d8]
call fcn.00405959
lea eax, [esi + 0x148]
push eax
push 0
push 0
push 0xff000000
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
push 0x15
push 0
mov eax, dword [0x509420]
push 0
push 0
push 0
push 0x4ccbbc
push dword [eax + 0x2a3d8]
call fcn.00405959
lea eax, [esi + 0x14c]
push eax
mov eax, dword [0x509420]
push 0
push 0
push 0xff000000
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
push 0x15
push 0
push 0
push 0
push 0
push 0x4ccbcc
push dword [eax + 0x2a3d8]
call fcn.00405959
lea eax, [esi + 0x154]
push eax
mov eax, dword [0x509420]
push 0
push 0
push 0xff000000
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
push 0x15
push 0
push 0
push 0
push 0
push str.dat_specialDunSky.png
push dword [eax + 0x2a3d8]
call fcn.00405959
call fcn.00465880
lea ecx, [esi + 0x434]
call fcn.004499b0
lea ecx, [esi + 0x468]
call fcn.00487b90
push 0x4c
call fcn.00498854
add esp, 4
mov dword [ebp - 0x438], eax
mov dword [ebp - 4], 0x2e
test eax, eax
je 0x44bc6f
push str.dat_footstep1.wav
mov ecx, eax
call fcn.00442b40
jmp 0x44bc71
xor eax, eax
push 0x4c
mov dword [ebp - 4], 0xffffffff
mov dword [esi + 0x4e0], eax
call fcn.00498854
add esp, 4
mov dword [ebp - 0x438], eax
mov dword [ebp - 4], 0x2f
test eax, eax
je 0x44bca7
push str.dat_footstep2.wav
mov ecx, eax
call fcn.00442b40
jmp 0x44bca9
xor eax, eax
push 0x4c
mov dword [ebp - 4], 0xffffffff
mov dword [esi + 0x4e4], eax
call fcn.00498854
add esp, 4
mov dword [ebp - 0x438], eax
mov dword [ebp - 4], 0x30
test eax, eax
je 0x44bcdf
push str.dat_footstep3.wav
mov ecx, eax
call fcn.00442b40
jmp 0x44bce1
xor eax, eax
push 0x4c
mov dword [ebp - 4], 0xffffffff
mov dword [esi + 0x4e8], eax
call fcn.00498854
add esp, 4
mov dword [ebp - 0x438], eax
mov dword [ebp - 4], 0x31
test eax, eax
je 0x44bd17
push str.dat_footstep4.wav
mov ecx, eax
call fcn.00442b40
jmp 0x44bd19
xor eax, eax
mov dword [esi + 0x4ec], eax
mov edi, 0x4f3340
lea eax, [esi + 0x4f0]
mov dword [ebp - 4], 0xffffffff
mov esi, eax
push 0x4c
call fcn.00498854
add esp, 4
mov dword [ebp - 0x438], eax
mov dword [ebp - 4], 0x32
test eax, eax
je 0x44bd58
push edi
mov ecx, eax
call fcn.00442b40
jmp 0x44bd5a
xor eax, eax
mov dword [esi], eax
add edi, 0x20
add esi, 4
mov dword [ebp - 4], 0xffffffff
cmp edi, str.datpuff.wav
jl 0x44bd33
mov eax, dword [ebp - 0x440]
mov edi, str.datpuff.wav
add eax, 0x58c
mov esi, eax
push 0x4c
call fcn.00498854
add esp, 4
mov dword [ebp - 0x438], eax
mov dword [ebp - 4], 0x33
test eax, eax
je 0x44bda8
push edi
mov ecx, eax
call fcn.00442b40
jmp 0x44bdaa
xor eax, eax
mov dword [esi], eax
add edi, 0x20
add esi, 4
mov dword [ebp - 4], 0xffffffff
cmp edi, str.dat_thunder1.wav
jl 0x44bd83
mov eax, dword [ebp - 0x440]
mov edi, str.dat_thunder1.wav
add eax, 0x5a8
mov esi, eax
push 0x4c
call fcn.00498854
add esp, 4
mov dword [ebp - 0x438], eax
mov dword [ebp - 4], 0x34
test eax, eax
je 0x44bdf8
push edi
mov ecx, eax
call fcn.00442b40
jmp 0x44bdfa
xor eax, eax
mov dword [esi], eax
add edi, 0x20
add esi, 4
mov dword [ebp - 4], 0xffffffff
cmp edi, 0x4f38e0
jl 0x44bdd3
push 0x4c
call fcn.00498854
add esp, 4
mov dword [ebp - 0x438], eax
mov dword [ebp - 4], 0x35
test eax, eax
je 0x44be3a
push str.dathurtAv.wav
mov ecx, eax
call fcn.00442b40
jmp 0x44be3c
xor eax, eax
mov esi, dword [ebp - 0x440]
push 0x4c
mov dword [ebp - 4], 0xffffffff
mov dword [esi + 0x57c], eax
call fcn.00498854
add esp, 4
mov dword [ebp - 0x438], eax
mov dword [ebp - 4], 0x36
test eax, eax
je 0x44be78
push str.dat_teleport.wav
mov ecx, eax
call fcn.00442b40
jmp 0x44be7a
xor eax, eax
push 0x4c
mov dword [ebp - 4], 0xffffffff
mov dword [esi + 0x580], eax
call fcn.00498854
add esp, 4
mov dword [ebp - 0x438], eax
mov dword [ebp - 4], 0x37
test eax, eax
je 0x44beb0
push str.datheal.wav
mov ecx, eax
call fcn.00442b40
jmp 0x44beb2
xor eax, eax
push 0x4c
mov dword [ebp - 4], 0xffffffff
mov dword [esi + 0x584], eax
call fcn.00498854
add esp, 4
mov dword [ebp - 0x438], eax
mov dword [ebp - 4], 0x38
test eax, eax
je 0x44bee8
push str.dat_thief.wav
mov ecx, eax
call fcn.00442b40
jmp 0x44beea
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [esi + 0x588], eax
call fcn.00465880
mov dword [esi + 0x5b8], 0x447a0000
mov dword [esi + 0x5c4], 0x447a0000
mov dword [esi + 0x5d0], 0x447a0000
mov dword [esi + 0x5dc], 0x447a0000
mov dword [esi + 0x5e8], 0x447a0000
mov dword [esi + 0x614], 5
mov dword [esi + 0x424], 0
mov dword [esi + 0x428], 0
mov dword [esi + 0x75c], 0x100
mov dword [esi + 0x760], 0x100
mov dword [esi + 0x758], 0
mov dword [esi + 0x754], 0
call dword [sym.imp.WINMM.dll_timeGetTime]
mov dword [esi + 0x42c], eax
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00498846
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.004ae343
int3