Function at 0x42bdf0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x56b497
mov eax, dword fs:[0]
push eax
sub esp, 0xb4
push ebx
push esi
mov eax, dword [0x5c96a4]
xor eax, esp
push eax
lea eax, [esp + 0xc0]
mov dword fs:[0], eax
call fcn.00441f5f
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x42be3b
push 0x80004005
call fcn.00403c50
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x20], eax
push str.main_nr.png
push 0x5e0788
lea ecx, [esp + 0x28]
push str._sskins_s
push ecx
mov dword [esp + 0xd8], 0
call fcn.00403920
push 0x10
call fcn.00441ee5
mov esi, eax
add esp, 0x14
mov dword [esp + 0x18], esi
mov byte [esp + 0xc8], 1
mov ebx, dword [esp + 0x20]
test esi, esi
je 0x42becb
cmp dword [ebx - 4], 1
jle 0x42bea6
mov edx, dword [ebx - 0xc]
push edx
lea ecx, [esp + 0x24]
call fcn.00403ad0
mov ebx, dword [esp + 0x20]
lea eax, [esp + 0x10]
push eax
push ebx
mov dword [esi], vtable.Gdiplus::Bitmap.0
mov dword [esp + 0x18], 0
call sub.gdiplus.dll_GdipCreateBitmapFromFile
mov ecx, dword [esp + 0x10]
mov dword [esi + 8], eax
mov dword [esi + 4], ecx
jmp 0x42becd
xor esi, esi
mov byte [esp + 0xc8], 0
lea edx, [esp + 0x10]
mov dword [edi + 0x74], esi
mov eax, dword [esi + 4]
push edx
push eax
mov dword [esp + 0x18], 0
call sub.gdiplus.dll_GdipGetImageWidth
test eax, eax
je 0x42bef5
mov dword [esi + 8], eax
cmp dword [esp + 0x10], 0
ja 0x42bf3f
push 0
push str.Error
push str.Load_skins_failed.
mov ecx, edi
call fcn.00446e31
mov ecx, dword [edi + 0x20]
push 0
push 0
push 0x10
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
lea eax, [ebx - 0x10]
mov dword [esp + 0xc8], 0xffffffff
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jmp 0x42cbe8
mov esi, dword [edi + 0x74]
mov edx, dword [esi + 4]
push 0xff00ff64
lea ecx, [esp + 0x5c]
push ecx
push edx
call sub.gdiplus.dll_GdipCreateHBITMAPFromBitmap
test eax, eax
je 0x42bf5c
mov dword [esi + 8], eax
mov eax, dword [esp + 0x58]
push eax
mov eax, 0xff64
call fcn.0040cf50
add esp, 4
test eax, eax
je 0x42bf7f
mov ecx, dword [edi + 0x20]
push 1
push eax
push ecx
call dword [sym.imp.USER32.dll_SetWindowRgn]
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0x10
call esi
mov ebx, eax
push 0x11
mov dword [esp + 0x20], ebx
call esi
mov esi, dword [edi + 0x74]
lea edx, [esp + 0x10]
mov dword [esp + 0x14], eax
mov eax, dword [esi + 4]
push edx
push eax
mov dword [esp + 0x18], 0
call sub.gdiplus.dll_GdipGetImageWidth
test eax, eax
je 0x42bfb7
mov dword [esi + 8], eax
mov esi, ebx
mov ebx, dword [edi + 0x74]
sub esi, dword [esp + 0x10]
mov edx, dword [ebx + 4]
lea ecx, [esp + 0x10]
push ecx
push edx
shr esi, 1
mov dword [esp + 0x18], 0
call sub.gdiplus.dll_GdipGetImageHeight
test eax, eax
je 0x42bfdf
mov dword [ebx + 8], eax
mov ebx, dword [esp + 0x14]
sub ebx, dword [esp + 0x10]
shr ebx, 1
test esi, esi
jle 0x42bff3
cmp esi, dword [esp + 0x1c]
jl 0x42bff8
mov esi, 0xa
test ebx, ebx
jle 0x42c002
cmp ebx, dword [esp + 0x14]
jl 0x42c007
mov ebx, 0xa
mov eax, dword [edi + 0x74]
mov edx, dword [eax + 4]
lea ecx, [esp + 0x10]
push ecx
push edx
mov dword [esp + 0x24], eax
mov dword [esp + 0x18], 0
call sub.gdiplus.dll_GdipGetImageHeight
test eax, eax
je 0x42c02f
mov ecx, dword [esp + 0x1c]
mov dword [ecx + 8], eax
mov edx, dword [esp + 0x10]
mov eax, dword [edi + 0x74]
lea ecx, [esp + 0x14]
mov dword [esp + 0x18], edx
mov edx, dword [eax + 4]
push ecx
push edx
mov dword [esp + 0x24], eax
mov dword [esp + 0x1c], 0
call sub.gdiplus.dll_GdipGetImageWidth
test eax, eax
je 0x42c05f
mov ecx, dword [esp + 0x1c]
mov dword [ecx + 8], eax
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
push 1
push edx
push eax
push ebx
push esi
mov ecx, edi
call fcn.0044b87e
mov eax, dword [0x5dba8c]
mov esi, dword [0x5dba88]
lea ecx, [esp + 0x5c]
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], ecx
mov ebx, 0x5dba94
jmp 0x42c096
mov eax, dword [esp + 0x18]
mov ecx, dword [ebx]
test ecx, ecx
je 0x42c0a2
mov dword [esp + 0x10], ecx
jmp 0x42c0ac
mov edx, dword [0x5dba90]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x14]
lea ecx, [eax + 0x14]
push ecx
mov ecx, dword [esp + 0x14]
add ecx, esi
push ecx
push eax
push esi
push edx
call dword [sym.imp.USER32.dll_SetRect]
mov eax, dword [esp + 0x10]
add dword [esp + 0x14], 0x10
add ebx, 4
cmp ebx, 0x5dbaac
lea esi, [esi + eax + 5]
jl 0x42c092
mov edx, dword [esp + 0x5c]
mov ecx, dword [edi + 0x74]
sub esp, 0x10
mov eax, esp
mov dword [eax], edx
mov edx, dword [esp + 0x70]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x74]
mov dword [eax + 8], edx
mov edx, dword [esp + 0x78]
push 0x5e191c
mov dword [eax + 0xc], edx
mov eax, dword [0x5dbb58]
push eax
push 1
push ecx
push ecx
push ecx
lea eax, [edi + 0xde0]
push edi
call fcn.00437fd0
mov edx, dword [esp + 0x98]
mov ecx, dword [edi + 0x74]
add esp, 0x1c
mov eax, esp
mov dword [eax], edx
mov edx, dword [esp + 0x80]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x84]
mov dword [eax + 8], edx
mov edx, dword [esp + 0x88]
push 0x5e1920
mov dword [eax + 0xc], edx
mov eax, dword [0x5dbb58]
push eax
push 1
push ecx
push ecx
push ecx
lea eax, [edi + 0x10a0]
push edi
call fcn.00437fd0
add esp, 0x2c
cmp dword [0x5dbb40], 0
mov esi, 2
je 0x42c1c7
mov edx, dword [esp + 0x7c]
mov ecx, dword [edi + 0x74]
sub esp, 0x10
mov eax, esp
mov dword [eax], edx
mov edx, dword [esp + 0x90]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x94]
mov dword [eax + 8], edx
mov edx, dword [esp + 0x98]
push 0x5e1924
mov dword [eax + 0xc], edx
mov eax, dword [0x5dbb58]
push eax
push 1
push ecx
push ecx
push ecx
lea eax, [edi + 0xf40]
push edi
call fcn.00437fd0
add esp, 0x2c
mov esi, 3
mov edx, dword [edi + 0x74]
sub esp, 0x10
mov ecx, esi
shl ecx, 4
mov ebx, dword [esp + ecx + 0x6c]
lea eax, [esp + ecx + 0x6c]
mov ecx, esp
mov dword [ecx], ebx
mov ebx, dword [eax + 4]
mov dword [ecx + 4], ebx
mov ebx, dword [eax + 8]
mov eax, dword [eax + 0xc]
push 0x5e192c
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], eax
mov ecx, dword [0x5dbb58]
push ecx
push 1
push edx
push edx
push edx
lea eax, [edi + 0x1360]
push edi
call fcn.00437fd0
add esp, 0x1c
mov ecx, esp
inc esi
mov edx, esi
shl edx, 4
mov ebx, dword [esp + edx + 0x6c]
lea eax, [esp + edx + 0x6c]
mov edx, dword [edi + 0x74]
mov dword [ecx], ebx
mov ebx, dword [eax + 4]
mov dword [ecx + 4], ebx
mov ebx, dword [eax + 8]
mov eax, dword [eax + 0xc]
push 0x5e1928
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], eax
mov ecx, dword [0x5dbb58]
push ecx
push 1
push edx
push edx
push edx
lea eax, [edi + 0x1200]
push edi
call fcn.00437fd0
mov edx, dword [edi + 0x74]
add esp, 0x1c
mov ecx, esp
inc esi
shl esi, 4
mov ebx, dword [esp + esi + 0x6c]
lea esi, [esp + esi + 0x6c]
mov dword [ecx], ebx
mov ebx, dword [esi + 4]
mov dword [ecx + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
push 0x5e1b8c
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], esi
mov ecx, dword [0x5dbb58]
push ecx
push 1
push edx
push edx
push edx
lea eax, [edi + 0x14c0]
push edi
call fcn.00437fd0
mov esi, dword [sym.imp.GDI32.dll_CreateFontW]
add esp, 0x2c
cmp dword [edi + 0xf34], 0
je 0x42c2e4
lea ebx, [edi + 0xf30]
mov ecx, ebx
call fcn.00444963
push 0x598a10
push 0x20
push 0
push 0
push 0
push 1
push 0
push 0
push 0
push 0x258
push 0
push 0
push 0
push 0xe
call esi
push eax
mov ecx, ebx
call fcn.0044490b
cmp dword [edi + 0x11f4], 0
je 0x42c326
lea ebx, [edi + 0x11f0]
mov ecx, ebx
call fcn.00444963
push 0x598a10
push 0x20
push 0
push 0
push 0
push 1
push 0
push 0
push 0
push 0x258
push 0
push 0
push 0
push 0xe
call esi
push eax
mov ecx, ebx
call fcn.0044490b
cmp dword [0x5dbb40], 0
je 0x42c371
cmp dword [edi + 0x1094], 0
je 0x42c371
lea ebx, [edi + 0x1090]
mov ecx, ebx
call fcn.00444963
push 0x598a10
push 0x20
push 0
push 0
push 0
push 1
push 0
push 0
push 0
push 0x258
push 0
push 0
push 0
push 0xe
call esi
push eax
mov ecx, ebx
call fcn.0044490b
cmp dword [edi + 0x1354], 0
je 0x42c3b3
lea ebx, [edi + 0x1350]
mov ecx, ebx
call fcn.00444963
push 0x598a10
push 0x20
push 0
push 0
push 0
push 1
push 0
push 0
push 0
push 0x258
push 0
push 0
push 0
push 0xe
call esi
push eax
mov ecx, ebx
call fcn.0044490b
cmp dword [edi + 0x14b4], 0
je 0x42c3f5
lea ebx, [edi + 0x14b0]
mov ecx, ebx
call fcn.00444963
push 0x598a10
push 0x20
push 0
push 0
push 0
push 1
push 0
push 0
push 0
push 0x258
push 0
push 0
push 0
push 0xe
call esi
push eax
mov ecx, ebx
call fcn.0044490b
cmp dword [edi + 0x1614], 0
je 0x42c437
lea ebx, [edi + 0x1610]
mov ecx, ebx
call fcn.00444963
push 0x598a10
push 0x20
push 0
push 0
push 0
push 1
push 0
push 0
push 0
push 0x258
push 0
push 0
push 0
push 0xe
call esi
push eax
mov ecx, ebx
call fcn.0044490b
mov edx, dword [0x5dba80]
sub edx, dword [0x5dba78]
test edx, edx
jle 0x42c50b
push 0x5dba78
lea eax, [esp + 0x38]
push eax
call dword [sym.imp.USER32.dll_CopyRect]
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0x34]
mov ebx, dword [edi + 0x74]
sub eax, ecx
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x3c]
sub eax, edx
push 0
push edi
mov dword [esp + 0x20], eax
lea eax, [esp + 0x3c]
push eax
lea esi, [edi + 0x1ba0]
mov dword [esp + 0x54], edx
mov edx, dword [esi]
mov edx, dword [edx + 0x13c]
push 0x5000000b
mov dword [esp + 0x5c], ecx
push 0x599828
mov ecx, esi
call edx
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x4c]
push ebx
push ebx
push ebx
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x34]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x38]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
call fcn.004313c0
mov eax, dword [0x5dba24]
mov ecx, dword [0x5dba1c]
mov edx, dword [0x5dba20]
mov dword [esi + 0x98], edx
mov dword [esi + 0x9c], ecx
mov dword [esi + 0xa0], eax
mov dword [esi + 0xbc], 0
mov eax, dword [0x5dbb34]
mov dword [esi + 0x158], eax
jmp 0x42c601
push 0x5dba68
lea ecx, [esp + 0x38]
push ecx
call dword [sym.imp.USER32.dll_CopyRect]
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0x34]
mov ebx, dword [edi + 0x74]
sub eax, ecx
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x3c]
sub eax, edx
push 0
push edi
mov dword [esp + 0x20], eax
lea eax, [esp + 0x3c]
push eax
lea esi, [edi + 0x1ba0]
mov dword [esp + 0x54], edx
mov edx, dword [esi]
mov edx, dword [edx + 0x13c]
push 0x5000000b
mov dword [esp + 0x5c], ecx
push 0x599828
mov ecx, esi
call edx
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x4c]
push ebx
push ebx
push ebx
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x34]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x38]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
call fcn.004313c0
mov eax, dword [0x5dba24]
mov ecx, dword [0x5dba1c]
mov edx, dword [0x5dba20]
mov dword [esi + 0xa0], eax
mov dword [esi + 0x98], edx
mov dword [esi + 0x9c], ecx
mov dword [esi + 0xbc], 0
mov eax, dword [0x5dbb34]
push 0
mov dword [esi + 0x158], eax
mov eax, dword [0x5e1800]
push 1
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov ebx, esp
push eax
call fcn.0040a200
add eax, 0x10
add esp, 4
mov dword [ebx], eax
call fcn.004315a0
mov ecx, dword [0x5e1800]
cmp dword [ecx - 0xc], 0
jne 0x42c601
push 0
mov ecx, esi
call fcn.0044b8be
mov ebx, dword [sym.imp.USER32.dll_SetRect]
push 0x253
push 0xbe
push 0x238
push 0x28
push 0x5e1cd0
call ebx
mov eax, dword [0x5e1cd4]
mov edx, dword [0x5e1cd8]
lea ecx, [eax + 0x1a]
push ecx
lea esi, [edx + 0x43]
push esi
add eax, 2
push eax
add edx, 0xf
push edx
push 0x5e1d00
call ebx
mov edx, dword [0x5e1cd0]
mov ecx, dword [0x5e1cd4]
sub esp, 0x10
mov eax, esp
mov dword [eax], edx
mov edx, dword [0x5e1cd8]
mov dword [eax + 4], ecx
mov ecx, dword [0x5e1cdc]
push 0
mov dword [eax + 8], edx
mov edx, dword [0x5dbb58]
push edx
push 0
push str.combo_nr.png
push str.combo_ov.png
mov dword [eax + 0xc], ecx
mov eax, dword [edi + 0x74]
push 0x5e1cd0
push eax
lea esi, [edi + 0x1620]
push edi
mov ecx, esi
mov edx, str.combo_nr.png
call fcn.004380e0
xor eax, eax
mov dword [esi + 0x78], eax
lea edx, [eax + 0x19]
add esp, 0x20
xor ecx, ecx
mov dword [esi + 0x7c], ecx
mov dword [esi + 0x74], 1
mov eax, 0x75
mov dword [esi + 0x80], eax
mov eax, esp
mov dword [esi + 0x84], edx
mov edx, dword [0x5e1d00]
mov dword [eax], edx
mov edx, dword [0x5e1d04]
mov dword [eax + 4], edx
mov edx, dword [0x5e1d08]
mov dword [eax + 8], edx
mov edx, dword [0x5e1d0c]
push 0
mov dword [eax + 0xc], edx
mov eax, dword [0x5dbb58]
mov edx, dword [edi + 0x74]
push eax
push 0
push str.btn2_nr.png
push str.btn2_ov.png
push 0x5e1d00
push edx
lea ecx, [edi + 0x1a40]
push edi
mov edx, str.btn2_nr.png
call fcn.004380e0
add esp, 0x30
cmp dword [0x5dbb48], 0
jne 0x42c737
push 0
mov ecx, esi
call fcn.0044b8be
push 0
lea ecx, [edi + 0x1a40]
call fcn.0044b8be
mov esi, dword [sym.imp.USER32.dll_CopyRect]
push 0x5dba48
lea eax, [esp + 0x28]
push eax
call esi
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x3c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x40]
mov dword [eax + 8], ecx
push 0
mov dword [eax + 0xc], edx
mov eax, dword [0x5dbb58]
push eax
mov eax, dword [edi + 0x74]
push 0
push str.min_ov.png
push str.min_ov.png
lea edx, [esp + 0x48]
push edx
push eax
lea ecx, [edi + 0x9c0]
push edi
mov edx, str.min_nr.png
call fcn.004380e0
mov ecx, dword [0x5dba50]
mov edx, dword [0x5dba54]
mov eax, ecx
sub eax, dword [0x5dba48]
add esp, 0x30
lea eax, [ecx + eax + 8]
push edx
push eax
mov eax, dword [0x5dba4c]
add ecx, 8
push eax
push ecx
lea ecx, [esp + 0x34]
push ecx
call ebx
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
sub esp, 0x10
mov eax, esp
mov dword [eax], edx
mov edx, dword [esp + 0x3c]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x40]
mov dword [eax + 8], edx
mov edx, dword [0x5dbb58]
push 0
push edx
mov edx, dword [edi + 0x74]
push 0
push str.exit_ov.png
mov dword [eax + 0xc], ecx
push str.exit_ov.png
lea eax, [esp + 0x48]
push eax
push edx
lea ecx, [edi + 0xb20]
push edi
mov edx, str.exit_nr.png
call fcn.004380e0
add esp, 0x30
push 0x5dba58
lea eax, [esp + 0x28]
push eax
call esi
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x3c]
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
mov edx, dword [esp + 0x40]
push 0x5e1830
mov dword [eax + 0xc], edx
mov eax, dword [0x5dbb58]
push eax
mov eax, dword [edi + 0x74]
push 0
push str.btn_nr.png
push str.btn_ov.png
lea edx, [esp + 0x48]
push edx
push eax
lea ecx, [edi + 0xc80]
push edi
mov edx, str.btn_nr.png
call fcn.004380e0
mov eax, dword [0x5dba58]
mov edx, dword [0x5dba64]
add esp, 0x30
push edx
lea ecx, [eax - 0x19]
push ecx
mov ecx, dword [0x5dba5c]
push ecx
add eax, 0xffffff8f
push eax
lea edx, [esp + 0x34]
push edx
call ebx
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x3c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x40]
mov dword [eax + 8], ecx
push 0x5e1824
mov dword [eax + 0xc], edx
mov eax, dword [0x5dbb58]
push eax
mov eax, dword [edi + 0x74]
push 0
push str.btn_nr.png
push str.btn_ov.png
lea edx, [esp + 0x48]
push edx
push eax
lea ecx, [edi + 0x1d00]
push edi
mov edx, str.btn_nr.png
call fcn.004380e0
mov ecx, dword [0x5cb760]
mov edx, dword [0x5cb764]
mov esi, dword [0x5cb758]
mov ebx, dword [0x5cb75c]
push 0x2ba8
mov dword [esp + 0x84], ecx
mov dword [esp + 0x88], edx
call fcn.00441ee5
add esp, 0x34
mov dword [esp + 0x18], eax
mov byte [esp + 0xc8], 2
test eax, eax
je 0x42c935
push eax
call fcn.0040d400
jmp 0x42c937
xor eax, eax
mov byte [esp + 0xc8], 0
mov dword [edi + 0x1e74], eax
mov edx, dword [eax]
push edi
mov ecx, eax
mov eax, dword [edx + 0x13c]
push 0x67
call eax
mov eax, dword [esp + 0x54]
mov edx, dword [esp + 0x50]
mov ecx, dword [edi + 0x1e74]
push 1
sub eax, ebx
push eax
sub edx, esi
push edx
push ebx
push esi
mov dword [esp + 0x28], eax
mov dword [esp + 0x24], edx
call fcn.0044b87e
mov ecx, dword [edi + 0x1e74]
push 0
call fcn.0044b8be
push 0x18e0
call fcn.00441ee5
add esp, 4
mov dword [esp + 0x18], eax
mov byte [esp + 0xc8], 3
test eax, eax
je 0x42c9ab
push eax
call fcn.00410210
jmp 0x42c9ad
xor eax, eax
mov byte [esp + 0xc8], 0
mov dword [edi + 0x1e78], eax
mov edx, dword [eax]
push edi
mov ecx, eax
mov eax, dword [edx + 0x13c]
push 0x67
call eax
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
mov ecx, dword [edi + 0x1e78]
push 1
push edx
push eax
push ebx
push esi
call fcn.0044b87e
mov ecx, dword [edi + 0x1e78]
push 0
call fcn.0044b8be
push 0xd598
call fcn.00441ee5
add esp, 4
mov dword [esp + 0x18], eax
mov byte [esp + 0xc8], 4
test eax, eax
je 0x42ca15
push eax
call fcn.00401730
jmp 0x42ca17
xor eax, eax
mov byte [esp + 0xc8], 0
mov dword [edi + 0x1e7c], eax
mov edx, dword [eax]
push edi
mov ecx, eax
mov eax, dword [edx + 0x13c]
push 0x67
call eax
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
mov ecx, dword [edi + 0x1e7c]
push 1
push edx
push eax
push ebx
push esi
call fcn.0044b87e
mov ecx, dword [edi + 0x1e7c]
push 0
call fcn.0044b8be
push 0x3f94
call fcn.00441ee5
add esp, 4
mov dword [esp + 0x18], eax
mov byte [esp + 0xc8], 5
test eax, eax
je 0x42ca7f
push eax
call fcn.0043bb30
jmp 0x42ca81
xor eax, eax
mov byte [esp + 0xc8], 0
mov dword [edi + 0x1e80], eax
mov edx, dword [eax]
push edi
mov ecx, eax
mov eax, dword [edx + 0x13c]
push 0x67
call eax
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
mov ecx, dword [edi + 0x1e80]
push 1
push edx
push eax
push ebx
push esi
call fcn.0044b87e
mov ecx, dword [edi + 0x1e80]
push 0
call fcn.0044b8be
push 0x13c0
call fcn.00441ee5
add esp, 4
mov dword [esp + 0x18], eax
mov byte [esp + 0xc8], 6
test eax, eax
je 0x42cae9
push eax
call fcn.004126c0
jmp 0x42caeb
xor eax, eax
mov byte [esp + 0xc8], 0
mov dword [edi + 0x1e84], eax
mov edx, dword [eax]
push edi
mov ecx, eax
mov eax, dword [edx + 0x13c]
push 0x67
call eax
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
mov ecx, dword [edi + 0x1e84]
push 1
push edx
push eax
push ebx
push esi
call fcn.0044b87e
mov ecx, dword [edi + 0x1e84]
push 0
call fcn.0044b8be
mov ecx, dword [edi + 0x1e84]
mov edx, dword [edi + 0x1e74]
push 0x84c
mov dword [ecx + 0x13b0], edx
call fcn.00441ee5
add esp, 4
mov dword [esp + 0x18], eax
mov byte [esp + 0xc8], 7
test eax, eax
je 0x42cb65
push eax
call fcn.00408760
jmp 0x42cb67
xor eax, eax
mov byte [esp + 0xc8], 0
mov dword [edi + 0x1e88], eax
mov edx, dword [eax]
push edi
mov ecx, eax
mov eax, dword [edx + 0x13c]
push 0x67
call eax
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
mov ecx, dword [edi + 0x1e88]
push 1
push edx
push eax
push ebx
push esi
call fcn.0044b87e
mov ecx, dword [edi + 0x1e88]
push 0
call fcn.0044b8be
cmp dword [0x5dbb38], 0
jne 0x42cbc0
push 0
lea ecx, [edi + 0x14c0]
call fcn.0044b8be
push 1
mov esi, edi
call fcn.0042dbe0
mov dword [esp + 0xc8], 0xffffffff
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42cbf4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0xc0]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret