Function at 0x403d10
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xe4
push esi
push edi
push 0x50f0d
push dword [esp + 0xf8]
lea eax, [esp + 0xf8]
push eax
lea ecx, [esp + 0x14]
call fcn.00432d90
lea eax, [esp + 0xe8]
push eax
call fcn.00434670
push 4
push 0x58aef4
mov dword [esp + 0xf0], 0x71f0d0
call fcn.0042a840
push 4
push 0x58aef4
mov dword [esp + 0xcc], eax
mov dword [esp + 0xbc], 0x71f078
call fcn.0042a840
add esp, 0x14
mov dword [esp + 0xac], eax
lea eax, [esp + 0xe0]
mov dword [esp + 0xbc], 0x71f078
lea ecx, [esp + 0x50]
mov dword [esp + 0xc0], 0x71f078
mov byte [esp + 0xc8], 0
push eax
mov byte [esp + 0xcf], 0
mov byte [esp + 0xce], 0
mov byte [esp + 0xcd], 0
mov byte [esp + 0xd4], 0
mov byte [esp + 0xcb], 0
mov dword [esp + 0xe0], 0
mov dword [esp + 0x3c], 0x71f078
mov dword [esp + 0x44], 0x71f078
mov dword [esp + 0x48], 0x71f078
mov dword [esp + 0x4c], 0x71f078
mov dword [esp + 0x50], 0x71f0d0
mov dword [esp + 0xe4], 0x71f078
call fcn.004376e0
mov eax, dword [esp + 0xe0]
or edi, 0xffffffff
mov eax, dword [eax]
test eax, eax
je 0x403e3f
cmp eax, edi
je 0x403e52
mov eax, dword [esp + 0xe0]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
setne al
test al, al
jne 0x403e52
push 4
push 2
push dword [esp + 0xe8]
call fcn.00425140
add esp, 0xc
lea eax, [esp + 0xe0]
mov dword [esp + 0xe0], 0x71f078
push eax
lea ecx, [esp + 0x58]
call fcn.004376e0
mov eax, dword [esp + 0xe0]
mov eax, dword [eax]
test eax, eax
je 0x403e95
cmp eax, 0xffffffff
je 0x403ea8
mov eax, dword [esp + 0xe0]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
setne al
test al, al
jne 0x403ea8
push 4
push 2
push dword [esp + 0xe8]
call fcn.00425140
add esp, 0xc
lea ecx, [esp + 0x10]
mov dword [esp + 0x58], 0x71f0e4
mov dword [esp + 0x5c], 0x71f0e4
mov dword [esp + 0x60], 0x71f0d0
mov dword [esp + 0x64], 0x71f0d0
mov dword [esp + 0x68], 0x71f0d0
mov dword [esp + 0x6c], 0
mov byte [esp + 0x70], 0
mov dword [esp + 0x74], 0
call fcn.00406110
mov eax, dword [esp + 0xe8]
mov esi, 1
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 8]
cmp ecx, esi
jle 0x404acc
mov eax, dword [eax]
cmp eax, 1
je 0x403f29
test eax, eax
je 0x403f29
mov eax, dword [esp + 0xe8]
lea ecx, [esp + 0xe8]
push dword [eax + 4]
call fcn.00403100
mov eax, dword [esp + 0xe8]
push 1
push 0x58aefc
push 2
mov ecx, dword [eax + 8]
add ecx, 4
add ecx, esi
lea ecx, [eax + ecx*4]
call fcn.0042e460
test al, al
je 0x403f90
mov eax, dword [esp + 0xe8]
mov eax, dword [eax]
cmp eax, 1
je 0x403f75
test eax, eax
je 0x403f75
mov eax, dword [esp + 0xe8]
lea ecx, [esp + 0xe8]
push dword [eax + 4]
call fcn.00403100
mov eax, dword [esp + 0xe8]
push 1
push 0
mov ecx, dword [eax + 8]
add eax, 0x10
add ecx, esi
lea ecx, [eax + ecx*4]
call fcn.0042c930
mov eax, dword [esp + 0xe8]
mov eax, dword [eax]
cmp eax, 1
je 0x403fb8
test eax, eax
je 0x403fb8
mov eax, dword [esp + 0xe8]
lea ecx, [esp + 0xe8]
push dword [eax + 4]
call fcn.00403100
mov eax, dword [esp + 0xe8]
push 0x58af00
push 2
mov ecx, dword [eax + 8]
add ecx, 4
add ecx, esi
lea ecx, [eax + ecx*4]
call fcn.00427c30
test al, al
jne 0x404a64
mov eax, dword [esp + 0xe8]
mov eax, dword [eax]
cmp eax, 1
je 0x404006
test eax, eax
je 0x404006
mov eax, dword [esp + 0xe8]
lea ecx, [esp + 0xe8]
push dword [eax + 4]
call fcn.00403100
mov eax, dword [esp + 0xe8]
push str._output_file
push 0xc
mov ecx, dword [eax + 8]
add ecx, 4
add ecx, esi
lea ecx, [eax + ecx*4]
call fcn.00427c30
test al, al
jne 0x404a64
mov eax, dword [esp + 0xe8]
mov eax, dword [eax]
cmp eax, 1
je 0x404054
test eax, eax
je 0x404054
mov eax, dword [esp + 0xe8]
lea ecx, [esp + 0xe8]
push dword [eax + 4]
call fcn.00403100
mov eax, dword [esp + 0xe8]
push 0x58af14
push 3
mov ecx, dword [eax + 8]
add ecx, 4
add ecx, esi
lea ecx, [eax + ecx*4]
call fcn.00427c30
test al, al
jne 0x404a15
mov eax, dword [esp + 0xe8]
mov eax, dword [eax]
cmp eax, 1
je 0x4040a2
test eax, eax
je 0x4040a2
mov eax, dword [esp + 0xe8]
lea ecx, [esp + 0xe8]
push dword [eax + 4]
call fcn.00403100
mov eax, dword [esp + 0xe8]
push str._output_format
push 0xe
mov ecx, dword [eax + 8]
add ecx, 4
add ecx, esi
lea ecx, [eax + ecx*4]
call fcn.00427c30
test al, al
jne 0x404a15
mov eax, dword [esp + 0xe8]
mov eax, dword [eax]
cmp eax, 1
je 0x4040f0
test eax, eax
je 0x4040f0
mov eax, dword [esp + 0xe8]
lea ecx, [esp + 0xe8]
push dword [eax + 4]
call fcn.00403100
mov eax, dword [esp + 0xe8]
push 0x58af28
push 2
mov ecx, dword [eax + 8]
add ecx, 4
add ecx, esi
lea ecx, [eax + ecx*4]
call fcn.00427c30
test al, al
jne 0x404970
mov eax, dword [esp + 0xe8]
mov eax, dword [eax]
cmp eax, 1
je 0x40413e
test eax, eax
je 0x40413e
mov eax, dword [esp + 0xe8]
lea ecx, [esp + 0xe8]
push dword [eax + 4]
call fcn.00403100
mov eax, dword [esp + 0xe8]
push str._input_file
push 0xb
mov ecx, dword [eax + 8]
add ecx, 4
add ecx, esi
lea ecx, [eax + ecx*4]
call fcn.00427c30
test al, al
jne 0x404970
mov eax, dword [esp + 0xe8]
mov eax, dword [eax]
cmp eax, 1
je 0x40418c
test eax, eax
je 0x40418c
mov eax, dword [esp + 0xe8]
lea ecx, [esp + 0xe8]
push dword [eax + 4]
call fcn.00403100
mov eax, dword [esp + 0xe8]
push 0x58af38
push 3
mov ecx, dword [eax + 8]
add ecx, 4
add ecx, esi
lea ecx, [eax + ecx*4]
call fcn.00427c30
test al, al
jne 0x40491e
mov eax, dword [esp + 0xe8]
mov eax, dword [eax]
cmp eax, 1
je 0x4041da
test eax, eax
je 0x4041da
mov eax, dword [esp + 0xe8]
lea ecx, [esp + 0xe8]
push dword [eax + 4]
call fcn.00403100
mov eax, dword [esp + 0xe8]
push str._input_format
push 0xd
mov ecx, dword [eax + 8]
add ecx, 4
add ecx, esi
lea ecx, [eax + ecx*4]
call fcn.00427c30
test al, al
jne 0x40491e
mov eax, dword [esp + 0xe8]
mov eax, dword [eax]
cmp eax, 1
je 0x404228
test eax, eax
je 0x404228
mov eax, dword [esp + 0xe8]
lea ecx, [esp + 0xe8]
push dword [eax + 4]
call fcn.00403100
mov eax, dword [esp + 0xe8]
push str._drop_tag
push 9
mov ecx, dword [eax + 8]
add ecx, 4
add ecx, esi
lea ecx, [eax + ecx*4]
call fcn.00427c30
test al, al
jne 0x4048c6
mov eax, dword [esp + 0xe8]
mov eax, dword [eax]
cmp eax, 1
je 0x404276
test eax, eax
je 0x404276
mov eax, dword [esp + 0xe8]
lea ecx, [esp + 0xe8]
push dword [eax + 4]
call fcn.00403100
mov eax, dword [esp + 0xe8]
push str._drop_tags
push 0xa
mov ecx, dword [eax + 8]
add ecx, 4
add ecx, esi
lea ecx, [eax + ecx*4]
call fcn.00427c30
test al, al
jne 0x4048c6
mov eax, dword [esp + 0xe8]
mov eax, dword [eax]
cmp eax, 1
je 0x4042c4
test eax, eax
je 0x4042c4
mov eax, dword [esp + 0xe8]
lea ecx, [esp + 0xe8]
push dword [eax + 4]
call fcn.00403100
mov eax, dword [esp + 0xe8]
push str._drop_translations
push 0x12
mov ecx, dword [eax + 8]
add ecx, 4
add ecx, esi
lea ecx, [eax + ecx*4]
call fcn.00427c30
test al, al
je 0x4042f3
mov byte [esp + 0xc8], 1
jmp 0x404ab6
mov eax, dword [esp + 0xe8]
mov eax, dword [eax]
cmp eax, 1
je 0x40431b
test eax, eax
je 0x40431b
mov eax, dword [esp + 0xe8]
lea ecx, [esp + 0xe8]
push dword [eax + 4]
call fcn.00403100
mov eax, dword [esp + 0xe8]
push str._target_language
push 0x10
mov ecx, dword [eax + 8]
add ecx, 4
add ecx, esi
lea ecx, [eax + ecx*4]
call fcn.00427c30
test al, al
mov eax, dword [esp + 0xe8]
je 0x40438f
mov ecx, dword [eax + 0xc]
inc esi
sub ecx, dword [eax + 8]
cmp esi, ecx
jge 0x404adf
mov eax, dword [eax]
cmp eax, 1
je 0x404374
test eax, eax
je 0x404374
mov eax, dword [esp + 0xe8]
lea ecx, [esp + 0xe8]
push dword [eax + 4]
call fcn.00403100
mov eax, dword [esp + 0xe8]
mov ecx, dword [eax + 8]
add ecx, esi
lea eax, [eax + ecx*4]
lea ecx, [esp + 0xbc]
jmp 0x404aad
mov eax, dword [eax]
cmp eax, 1
je 0x4043b0
test eax, eax
je 0x4043b0
mov eax, dword [esp + 0xe8]
lea ecx, [esp + 0xe8]
push dword [eax + 4]
call fcn.00403100
mov eax, dword [esp + 0xe8]
push str._source_language
push 0x10
mov ecx, dword [eax + 8]
add ecx, 4
add ecx, esi
lea ecx, [eax + ecx*4]
call fcn.00427c30
test al, al
mov eax, dword [esp + 0xe8]
je 0x404424
mov ecx, dword [eax + 0xc]
inc esi
sub ecx, dword [eax + 8]
cmp esi, ecx
jge 0x404adf
mov eax, dword [eax]
cmp eax, 1
je 0x404409
test eax, eax
je 0x404409
mov eax, dword [esp + 0xe8]
lea ecx, [esp + 0xe8]
push dword [eax + 4]
call fcn.00403100
mov eax, dword [esp + 0xe8]
mov ecx, dword [eax + 8]
add ecx, esi
lea eax, [eax + ecx*4]
lea ecx, [esp + 0xc0]
jmp 0x404aad
mov eax, dword [eax]
cmp eax, 1
je 0x404445
test eax, eax
je 0x404445
mov eax, dword [esp + 0xe8]
lea ecx, [esp + 0xe8]
push dword [eax + 4]
call fcn.00403100
mov eax, dword [esp + 0xe8]
push 1
push 0x58afa0
push 2
mov ecx, dword [eax + 8]
add ecx, 4
add ecx, esi
lea ecx, [eax + ecx*4]
call fcn.0042e460
test al, al
jne 0x404af3
mov eax, dword [esp + 0xe8]
mov eax, dword [eax]
cmp eax, 1
je 0x404495
test eax, eax
je 0x404495
mov eax, dword [esp + 0xe8]
lea ecx, [esp + 0xe8]
push dword [eax + 4]
call fcn.00403100
mov eax, dword [esp + 0xe8]
push str._no_obsolete
push 0xc
mov ecx, dword [eax + 8]
add ecx, 4
add ecx, esi
lea ecx, [eax + ecx*4]
call fcn.00427c30
test al, al
je 0x4044c4
mov byte [esp + 0xcb], 1
jmp 0x404ab6
mov eax, dword [esp + 0xe8]
mov eax, dword [eax]
cmp eax, 1
je 0x4044ec
test eax, eax
je 0x4044ec
mov eax, dword [esp + 0xe8]
lea ecx, [esp + 0xe8]
push dword [eax + 4]
call fcn.00403100
mov eax, dword [esp + 0xe8]
push str._no_finished
push 0xc
mov ecx, dword [eax + 8]
add ecx, 4
add ecx, esi
lea ecx, [eax + ecx*4]
call fcn.00427c30
test al, al
je 0x40451b
mov byte [esp + 0xca], 1
jmp 0x404ab6
mov eax, dword [esp + 0xe8]
mov eax, dword [eax]
cmp eax, 1
je 0x404543
test eax, eax
je 0x404543
mov eax, dword [esp + 0xe8]
lea ecx, [esp + 0xe8]
push dword [eax + 4]
call fcn.00403100
mov eax, dword [esp + 0xe8]
push str._no_untranslated
push 0x10
mov ecx, dword [eax + 8]
add ecx, 4
add ecx, esi
lea ecx, [eax + ecx*4]
call fcn.00427c30
test al, al
je 0x404572
mov byte [esp + 0xc9], 1
jmp 0x404ab6
mov eax, dword [esp + 0xe8]
mov eax, dword [eax]
cmp eax, 1
je 0x40459a
test eax, eax
je 0x40459a
mov eax, dword [esp + 0xe8]
lea ecx, [esp + 0xe8]
push dword [eax + 4]
call fcn.00403100
mov eax, dword [esp + 0xe8]
push str._sort_contexts
push 0xe
mov ecx, dword [eax + 8]
add ecx, 4
add ecx, esi
lea ecx, [eax + ecx*4]
call fcn.00427c30
test al, al
je 0x4045c6
mov byte [esp + 0x6e], 1
jmp 0x404ab6
mov eax, dword [esp + 0xe8]
mov eax, dword [eax]
cmp eax, 1
je 0x4045ee
test eax, eax
je 0x4045ee
mov eax, dword [esp + 0xe8]
lea ecx, [esp + 0xe8]
push dword [eax + 4]
call fcn.00403100
mov eax, dword [esp + 0xe8]
push str._locations
push 0xa
mov ecx, dword [eax + 8]
add ecx, 4
add ecx, esi
lea ecx, [eax + ecx*4]
call fcn.00427c30
test al, al
mov eax, dword [esp + 0xe8]
je 0x404735
mov ecx, dword [eax + 0xc]
inc esi
sub ecx, dword [eax + 8]
cmp esi, ecx
jge 0x404adf
mov eax, dword [eax]
cmp eax, 1
je 0x40464b
test eax, eax
je 0x40464b
mov eax, dword [esp + 0xe8]
lea ecx, [esp + 0xe8]
push dword [eax + 4]
call fcn.00403100
mov eax, dword [esp + 0xe8]
push str.none
push 4
mov ecx, dword [eax + 8]
add ecx, 4
add ecx, esi
lea ecx, [eax + ecx*4]
call fcn.00427c30
test al, al
je 0x40467d
mov dword [esp + 0xdc], 1
jmp 0x404ab6
mov eax, dword [esp + 0xe8]
mov eax, dword [eax]
cmp eax, 1
je 0x4046a5
test eax, eax
je 0x4046a5
mov eax, dword [esp + 0xe8]
lea ecx, [esp + 0xe8]
push dword [eax + 4]
call fcn.00403100
mov eax, dword [esp + 0xe8]
push str.relative
push 8
mov ecx, dword [eax + 8]
add ecx, 4
add ecx, esi
lea ecx, [eax + ecx*4]
call fcn.00427c30
test al, al
je 0x4046d7
mov dword [esp + 0xdc], 2
jmp 0x404ab6
mov eax, dword [esp + 0xe8]
mov eax, dword [eax]
cmp eax, 1
je 0x4046ff
test eax, eax
je 0x4046ff
mov eax, dword [esp + 0xe8]
lea ecx, [esp + 0xe8]
push dword [eax + 4]
call fcn.00403100
mov eax, dword [esp + 0xe8]
push str.absolute
push 8
mov ecx, dword [eax + 8]
add ecx, 4
add ecx, esi
lea ecx, [eax + ecx*4]
call fcn.00427c30
test al, al
je 0x404adf
mov dword [esp + 0xdc], 3
jmp 0x404ab6
mov eax, dword [eax]
cmp eax, 1
je 0x404756
test eax, eax
je 0x404756
mov eax, dword [esp + 0xe8]
lea ecx, [esp + 0xe8]
push dword [eax + 4]
call fcn.00403100
mov eax, dword [esp + 0xe8]
push str._no_ui_lines
push 0xc
mov ecx, dword [eax + 8]
add ecx, 4
add ecx, esi
lea ecx, [eax + ecx*4]
call fcn.00427c30
test al, al
je 0x404785
mov byte [esp + 0xc7], 1
jmp 0x404ab6
mov eax, dword [esp + 0xe8]
mov eax, dword [eax]
cmp eax, 1
je 0x4047ad
test eax, eax
je 0x4047ad
mov eax, dword [esp + 0xe8]
lea ecx, [esp + 0xe8]
push dword [eax + 4]
call fcn.00403100
mov eax, dword [esp + 0xe8]
push str._verbose
push 8
mov ecx, dword [eax + 8]
add ecx, 4
add ecx, esi
lea ecx, [eax + ecx*4]
call fcn.00427c30
test al, al
je 0x4047dc
mov byte [esp + 0xd0], 1
jmp 0x404ab6
mov eax, dword [esp + 0xe8]
mov eax, dword [eax]
cmp eax, 1
je 0x404804
test eax, eax
je 0x404804
mov eax, dword [esp + 0xe8]
lea ecx, [esp + 0xe8]
push dword [eax + 4]
call fcn.00403100
mov eax, dword [esp + 0xe8]
mov edx, 0x2d
push 1
mov ecx, dword [eax + 8]
add eax, 0x10
add ecx, esi
lea ecx, [eax + ecx*4]
push ecx
mov eax, esp
mov word [eax], dx
call fcn.0042e400
test al, al
jne 0x404adf
mov eax, dword [esp + 0xe8]
mov dword [esp + 0xd4], 0x71f078
mov dword [esp + 0xd8], 0x71f078
mov eax, dword [eax]
cmp eax, 1
je 0x40486e
test eax, eax
je 0x40486e
mov eax, dword [esp + 0xe8]
lea ecx, [esp + 0xe8]
push dword [eax + 4]
call fcn.00403100
mov eax, dword [esp + 0xe8]
mov ecx, dword [eax + 8]
add ecx, esi
lea eax, [eax + ecx*4]
add eax, 0x10
lea ecx, [esp + 0xd4]
push eax
call fcn.00427320
lea eax, [esp + 0xb8]
push eax
lea ecx, [esp + 0xdc]
call fcn.00427320
lea eax, [esp + 0xd4]
push eax
lea ecx, [esp + 0xe8]
call fcn.00402b90
lea ecx, [esp + 0xd4]
call fcn.00402540
jmp 0x404ab6
mov eax, dword [esp + 0xe8]
inc esi
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 8]
cmp esi, ecx
jge 0x404adf
mov eax, dword [eax]
cmp eax, 1
je 0x4048fd
test eax, eax
je 0x4048fd
mov eax, dword [esp + 0xe8]
lea ecx, [esp + 0xe8]
push dword [eax + 4]
call fcn.00403100
mov eax, dword [esp + 0xe8]
mov ecx, dword [eax + 8]
add ecx, esi
lea eax, [eax + ecx*4]
add eax, 0x10
lea ecx, [esp + 0x64]
push eax
call fcn.00402cb0
jmp 0x404ab6
mov eax, dword [esp + 0xe8]
inc esi
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 8]
cmp esi, ecx
jge 0x404adf
mov eax, dword [eax]
cmp eax, 1
je 0x404955
test eax, eax
je 0x404955
mov eax, dword [esp + 0xe8]
lea ecx, [esp + 0xe8]
push dword [eax + 4]
call fcn.00403100
mov eax, dword [esp + 0xe8]
mov ecx, dword [eax + 8]
add ecx, esi
lea eax, [eax + ecx*4]
lea ecx, [esp + 0xb8]
jmp 0x404aad
mov eax, dword [esp + 0xe8]
inc esi
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 8]
cmp esi, ecx
jge 0x404adf
mov dword [esp + 0xb0], 0x71f078
mov dword [esp + 0xb4], 0x71f078
mov eax, dword [eax]
cmp eax, 1
je 0x4049bd
test eax, eax
je 0x4049bd
mov eax, dword [esp + 0xe8]
lea ecx, [esp + 0xe8]
push dword [eax + 4]
call fcn.00403100
mov eax, dword [esp + 0xe8]
mov ecx, dword [eax + 8]
add ecx, esi
lea eax, [eax + ecx*4]
add eax, 0x10
lea ecx, [esp + 0xb0]
push eax
call fcn.00427320
lea eax, [esp + 0xb8]
push eax
lea ecx, [esp + 0xb8]
call fcn.00427320
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0xe8]
call fcn.00402b90
lea ecx, [esp + 0xb0]
call fcn.00402540
jmp 0x404ab6
mov eax, dword [esp + 0xe8]
inc esi
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 8]
cmp esi, ecx
jge 0x404adf
mov eax, dword [eax]
cmp eax, 1
je 0x404a4c
test eax, eax
je 0x404a4c
mov eax, dword [esp + 0xe8]
lea ecx, [esp + 0xe8]
push dword [eax + 4]
call fcn.00403100
mov eax, dword [esp + 0xe8]
mov ecx, dword [eax + 8]
add ecx, esi
lea eax, [eax + ecx*4]
lea ecx, [esp + 0xac]
jmp 0x404aad
mov eax, dword [esp + 0xe8]
inc esi
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 8]
cmp esi, ecx
jge 0x404adf
mov eax, dword [eax]
cmp eax, 1
je 0x404a97
test eax, eax
je 0x404a97
mov eax, dword [esp + 0xe8]
lea ecx, [esp + 0xe8]
push dword [eax + 4]
call fcn.00403100
mov eax, dword [esp + 0xe8]
mov ecx, dword [eax + 8]
add ecx, esi
lea eax, [eax + ecx*4]
lea ecx, [esp + 0xa8]
add eax, 0x10
push eax
call fcn.00427320
mov eax, dword [esp + 0xe8]
inc esi
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 8]
cmp esi, ecx
jl 0x403f08
mov eax, dword [esp + 0xe4]
mov ecx, dword [eax + 0xc]
cmp ecx, dword [eax + 8]
jne 0x404ce5
lea eax, [esp + 0xe8]
push eax
call fcn.00403900
add esp, 4
mov edi, eax
jmp 0x404b05
lea eax, [esp + 0xe8]
push eax
call fcn.00403900
add esp, 4
xor edi, edi
lea ecx, [esp + 0x10]
call fcn.004025a0
lea ecx, [esp + 0x38]
call fcn.004022b0
mov eax, dword [esp + 0xc0]
mov eax, dword [eax]
test eax, eax
je 0x404b3f
cmp eax, 0xffffffff
je 0x404b52
mov eax, dword [esp + 0xc0]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
setne al
test al, al
jne 0x404b52
push 4
push 2
push dword [esp + 0xc8]
call fcn.00425140
add esp, 0xc
mov eax, dword [esp + 0xbc]
mov eax, dword [eax]
test eax, eax
je 0x404b7a
cmp eax, 0xffffffff
je 0x404b8d
mov eax, dword [esp + 0xbc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
setne al
test al, al
jne 0x404b8d
push 4
push 2
push dword [esp + 0xc4]
call fcn.00425140
add esp, 0xc
mov eax, dword [esp + 0xac]
mov eax, dword [eax]
test eax, eax
je 0x404bb5
cmp eax, 0xffffffff
je 0x404bc8
mov eax, dword [esp + 0xac]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
setne al
test al, al
jne 0x404bc8
push 4
push 2
push dword [esp + 0xb4]
call fcn.00425140
add esp, 0xc
mov eax, dword [esp + 0xa8]
mov eax, dword [eax]
test eax, eax
je 0x404bf0
cmp eax, 0xffffffff
je 0x404c03
mov eax, dword [esp + 0xa8]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
setne al
test al, al
jne 0x404c03
push 4
push 2
push dword [esp + 0xb0]
call fcn.00425140
add esp, 0xc
mov eax, dword [esp + 0xb8]
mov eax, dword [eax]
test eax, eax
je 0x404c2b
cmp eax, 0xffffffff
je 0x404c3e
mov eax, dword [esp + 0xb8]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
setne al
test al, al
jne 0x404c3e
push 4
push 2
push dword [esp + 0xc0]
call fcn.00425140
add esp, 0xc
mov eax, dword [esp + 0xe4]
mov eax, dword [eax]
test eax, eax
je 0x404c66
cmp eax, 0xffffffff
je 0x404c79
mov eax, dword [esp + 0xe4]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
setne al
test al, al
jne 0x404c79
push dword [esp + 0xe4]
lea ecx, [esp + 0xe8]
call fcn.00402ef0
mov eax, dword [esp + 0xe8]
mov eax, dword [eax]
test eax, eax
je 0x404ca1
cmp eax, 0xffffffff
je 0x404cd1
mov eax, dword [esp + 0xe8]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
setne al
test al, al
jne 0x404cd1
mov esi, dword [esp + 0xe8]
lea ecx, [esp + 0xe8]
mov eax, dword [esi + 0xc]
add eax, 4
lea eax, [esi + eax*4]
push eax
mov eax, dword [esi + 8]
add eax, 4
lea eax, [esi + eax*4]
push eax
call fcn.004037e0
push esi
call fcn.00430ae0
add esp, 4
lea ecx, [esp + 8]
call fcn.004333a0
mov eax, edi
pop edi
pop esi
add esp, 0xe4
ret
push 0
lea ecx, [esp + 0xe8]
call fcn.004029d0
push eax
lea eax, [esp + 0xd0]
push eax
call fcn.00408820
add esp, 8
lea ecx, [esp + 0x18]
push eax
call fcn.00427320
mov eax, dword [esp + 0xcc]
mov eax, dword [eax]
test eax, eax
je 0x404d35
cmp eax, 0xffffffff
je 0x404d48
mov eax, dword [esp + 0xcc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
setne al
test al, al
jne 0x404d48
push 4
push 2
push dword [esp + 0xd4]
call fcn.00425140
add esp, 0xc
push 0
lea ecx, [esp + 0xe8]
call fcn.004029d0
push 0
lea ecx, [esp + 0xe8]
lea esi, [eax + 4]
call fcn.004029d0
push esi
lea ecx, [esp + 0x3c]
push ecx
push eax
lea ecx, [esp + 0x1c]
call fcn.00408c50
test al, al
jne 0x404e32
lea eax, [esp + 0xcc]
push eax
lea ecx, [esp + 0x3c]
call fcn.00403360
lea ecx, [esp + 0xdc]
push ecx
mov ecx, eax
call fcn.004038c0
mov eax, dword [eax]
mov ecx, dword [eax + 0xc]
add ecx, eax
push ecx
push 0x737fc0
call fcn.004015c0
mov eax, dword [esp + 0xe4]
add esp, 8
mov eax, dword [eax]
test eax, eax
je 0x404ddb
cmp eax, 0xffffffff
je 0x404dee
mov eax, dword [esp + 0xdc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
setne al
test al, al
jne 0x404dee
push 4
push 1
push dword [esp + 0xe4]
call fcn.00425140
add esp, 0xc
mov eax, dword [esp + 0xcc]
mov eax, dword [eax]
test eax, eax
je 0x404e15
cmp eax, 0xffffffff
je 0x404e28
mov eax, dword [esp + 0xcc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
setne al
test al, al
jne 0x404e28
push 4
push 2
push dword [esp + 0xd4]
call fcn.00425140
add esp, 0xc
mov edi, 2
jmp 0x404b05
push 0
lea ecx, [esp + 0xe8]
call fcn.004029d0
mov esi, eax
lea ecx, [esp + 0x10]
lea eax, [esp + 0xa0]
push eax
call fcn.0040a540
push dword [esp + 0xd0]
lea ecx, [esp + 0x14]
push esi
push eax
call fcn.0040a020
lea ecx, [esp + 0xa0]
call fcn.004024e0
mov eax, dword [esp + 0xe4]
mov dword [esp + 0xe0], 1
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 8]
cmp ecx, 1
jle 0x40543a
lea ecx, [esp + 0x78]
call fcn.00406110
mov eax, dword [esp + 0xe4]
mov eax, dword [eax]
cmp eax, 1
je 0x404f2f
test eax, eax
je 0x404f2f
mov eax, dword [esp + 0xe4]
mov ecx, dword [eax + 8]
push dword [eax + 4]
add ecx, 4
lea edi, [eax + ecx*4]
lea ecx, [esp + 0xe8]
call fcn.004309e0
mov ecx, dword [esp + 0xe4]
push edi
mov dword [esp + 0xd0], eax
mov edx, dword [ecx + 0xc]
add edx, 4
lea esi, [ecx + edx*4]
mov edx, dword [ecx + 8]
push esi
lea ecx, [ecx + edx*4]
add ecx, 0x10
push ecx
lea ecx, [esp + 0xf0]
call fcn.00403740
mov ecx, dword [esp + 0xcc]
mov eax, dword [ecx]
test eax, eax
je 0x404f22
cmp eax, 0xffffffff
je 0x404f2f
or edi, 0xffffffff
mov eax, edi
lock xadd dword [ecx], eax
dec eax
setne al
test al, al
jne 0x404f2f
push ecx
lea ecx, [esp + 0xe8]
call fcn.00402ef0
mov eax, dword [esp + 0xe4]
mov edx, dword [esp + 0xe0]
mov ecx, dword [eax + 8]
add ecx, edx
mov ecx, dword [eax + ecx*4 + 0x10]
mov eax, dword [eax]
add ecx, 4
mov dword [esp + 0xb4], ecx
cmp eax, 1
je 0x404fe6
test eax, eax
je 0x404fe6
mov eax, dword [esp + 0xe4]
mov ecx, dword [eax + 8]
push dword [eax + 4]
add ecx, 4
lea edi, [eax + ecx*4]
lea ecx, [esp + 0xe8]
call fcn.004309e0
mov ecx, dword [esp + 0xe4]
push edi
mov dword [esp + 0xd0], eax
mov edx, dword [ecx + 0xc]
add edx, 4
lea esi, [ecx + edx*4]
mov edx, dword [ecx + 8]
push esi
lea ecx, [ecx + edx*4]
add ecx, 0x10
push ecx
lea ecx, [esp + 0xf0]
call fcn.00403740
mov ecx, dword [esp + 0xcc]
mov eax, dword [ecx]
test eax, eax
je 0x404fd2
cmp eax, 0xffffffff
je 0x404fdf
or eax, 0xffffffff
lock xadd dword [ecx], eax
dec eax
setne al
test al, al
jne 0x404fdf
push ecx
lea ecx, [esp + 0xe8]
call fcn.00402ef0
mov edx, dword [esp + 0xe0]
mov eax, dword [esp + 0xe4]
push dword [esp + 0xb4]
mov ecx, dword [eax + 8]
add ecx, edx
lea edx, [esp + 0x3c]
push edx
push dword [eax + ecx*4 + 0x10]
lea ecx, [esp + 0x84]
call fcn.00408c50
test al, al
je 0x405554
mov eax, dword [esp + 0xe4]
mov eax, dword [eax]
cmp eax, 1
je 0x4050a8
test eax, eax
je 0x4050a8
mov eax, dword [esp + 0xe4]
mov ecx, dword [eax + 8]
push dword [eax + 4]
add ecx, 4
lea edi, [eax + ecx*4]
lea ecx, [esp + 0xe8]
call fcn.004309e0
mov ecx, dword [esp + 0xe4]
push edi
mov dword [esp + 0xb8], eax
mov edx, dword [ecx + 0xc]
add edx, 4
lea esi, [ecx + edx*4]
mov edx, dword [ecx + 8]
push esi
lea ecx, [ecx + edx*4]
add ecx, 0x10
push ecx
lea ecx, [esp + 0xf0]
call fcn.00403740
mov ecx, dword [esp + 0xb4]
mov eax, dword [ecx]
test eax, eax
je 0x40509b
cmp eax, 0xffffffff
je 0x4050a8
or eax, 0xffffffff
lock xadd dword [ecx], eax
dec eax
setne al
test al, al
jne 0x4050a8
push ecx
lea ecx, [esp + 0xe8]
call fcn.00402ef0
mov eax, dword [esp + 0xe4]
mov ecx, dword [eax + 8]
add ecx, dword [esp + 0xe0]
mov esi, dword [eax + ecx*4 + 0x10]
lea eax, [esp + 0xa0]
push eax
lea ecx, [esp + 0x7c]
call fcn.0040a540
push dword [esp + 0xd0]
lea ecx, [esp + 0x7c]
push esi
push eax
call fcn.0040a020
mov ecx, dword [esp + 0xa4]
add ecx, 8
mov eax, dword [ecx]
test eax, eax
je 0x405104
cmp eax, 0xffffffff
je 0x405115
or eax, 0xffffffff
lock xadd dword [ecx], eax
dec eax
setne al
test al, al
jne 0x405115
mov ecx, dword [esp + 0xa4]
push fcn.00402fc0
call fcn.004320c0
mov ecx, dword [esp + 0xa0]
add ecx, 8
mov eax, dword [ecx]
test eax, eax
je 0x405139
cmp eax, 0xffffffff
je 0x40514a
or eax, 0xffffffff
lock xadd dword [ecx], eax
dec eax
setne al
test al, al
jne 0x40514a
mov ecx, dword [esp + 0xa0]
push fcn.00402fc0
call fcn.004320c0
mov ecx, dword [esp + 0x78]
xor esi, esi
mov dword [esp + 0xcc], esi
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 8]
test eax, eax
jle 0x405244
mov eax, dword [ecx]
cmp eax, 1
je 0x405214
test eax, eax
je 0x405214
mov ecx, dword [esp + 0x78]
mov eax, dword [ecx + 8]
push dword [ecx + 4]
add eax, 4
lea edi, [ecx + eax*4]
lea ecx, [esp + 0x7c]
call fcn.004309e0
mov edx, dword [esp + 0x78]
mov dword [esp + 0xd8], eax
mov eax, dword [edx + 0xc]
mov esi, dword [edx + 8]
add eax, 4
add esi, 4
lea eax, [edx + eax*4]
lea esi, [edx + esi*4]
mov dword [esp + 0xb4], eax
cmp esi, eax
je 0x4051e2
sub edi, esi
nop dword [eax + eax]
push 0x40
call fcn.00553354
add esp, 4
mov ecx, eax
push dword [edi + esi]
call fcn.004019e0
mov dword [esi], eax
add esi, 4
cmp esi, dword [esp + 0xb4]
jne 0x4051c0
mov ecx, dword [esp + 0xd8]
mov eax, dword [ecx]
test eax, eax
je 0x405203
cmp eax, 0xffffffff
je 0x40520d
or eax, 0xffffffff
lock xadd dword [ecx], eax
dec eax
setne al
test al, al
jne 0x40520d
push ecx
lea ecx, [esp + 0x7c]
call fcn.00402f50
mov esi, dword [esp + 0xcc]
mov ecx, dword [esp + 0x78]
mov eax, dword [ecx + 8]
add eax, esi
push dword [ecx + eax*4 + 0x10]
lea ecx, [esp + 0x14]
call fcn.00409eb0
mov ecx, dword [esp + 0x78]
inc esi
mov dword [esp + 0xcc], esi
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 8]
cmp esi, eax
jl 0x405165
mov ecx, dword [esp + 0x9c]
add ecx, 8
mov eax, dword [ecx]
test eax, eax
je 0x405268
cmp eax, 0xffffffff
je 0x405279
or eax, 0xffffffff
lock xadd dword [ecx], eax
dec eax
setne al
test al, al
jne 0x405279
mov ecx, dword [esp + 0x9c]
push 0x403070
call fcn.004320c0
mov ecx, dword [esp + 0x98]
add ecx, 8
mov eax, dword [ecx]
test eax, eax
je 0x40529d
cmp eax, 0xffffffff
je 0x4052ae
or eax, 0xffffffff
lock xadd dword [ecx], eax
dec eax
setne al
test al, al
jne 0x4052ae
mov ecx, dword [esp + 0x98]
push 0x402fd0
call fcn.004320c0
mov ecx, dword [esp + 0x94]
add ecx, 8
mov eax, dword [ecx]
test eax, eax
je 0x4052d2
cmp eax, 0xffffffff
je 0x4052e3
or eax, 0xffffffff
lock xadd dword [ecx], eax
dec eax
setne al
test al, al
jne 0x4052e3
mov ecx, dword [esp + 0x94]
push 0x402fd0
call fcn.004320c0
mov ecx, dword [esp + 0x8c]
add ecx, 8
mov eax, dword [ecx]
test eax, eax
je 0x405307
cmp eax, 0xffffffff
je 0x405318
or eax, 0xffffffff
lock xadd dword [ecx], eax
dec eax
setne al
test al, al
jne 0x405318
mov ecx, dword [esp + 0x8c]
push 0x403010
call fcn.004320c0
mov eax, dword [esp + 0x88]
mov eax, dword [eax]
test eax, eax
je 0x405341
or esi, 0xffffffff
cmp eax, esi
je 0x405374
mov eax, dword [esp + 0x88]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
setne al
test al, al
jne 0x405374
mov esi, dword [esp + 0x88]
lea ecx, [esp + 0x88]
mov eax, dword [esi + 0xc]
add eax, 4
lea eax, [esi + eax*4]
push eax
mov eax, dword [esi + 8]
add eax, 4
lea eax, [esi + eax*4]
push eax
call fcn.004037e0
push esi
call fcn.00430ae0
add esp, 4
or esi, 0xffffffff
mov eax, dword [esp + 0x84]
mov eax, dword [eax]
test eax, eax
je 0x40539b
cmp eax, 0xffffffff
je 0x4053ae
mov eax, dword [esp + 0x84]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
setne al
test al, al
jne 0x4053ae
push 4
push 2
push dword [esp + 0x8c]
call fcn.00425140
add esp, 0xc
mov eax, dword [esp + 0x80]
mov eax, dword [eax]
test eax, eax
je 0x4053d5
cmp eax, 0xffffffff
je 0x4053e8
mov eax, dword [esp + 0x80]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
setne al
test al, al
jne 0x4053e8
push 4
push 2
push dword [esp + 0x88]
call fcn.00425140
add esp, 0xc
mov eax, dword [esp + 0x78]
mov eax, dword [eax]
test eax, eax
je 0x405409
cmp eax, 0xffffffff
je 0x405416
mov eax, dword [esp + 0x78]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
setne al
test al, al
jne 0x405416
push dword [esp + 0x78]
lea ecx, [esp + 0x7c]
call fcn.00402f50
mov eax, dword [esp + 0xe4]
mov edx, dword [esp + 0xe0]
inc edx
mov dword [esp + 0xe0], edx
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 8]
cmp edx, ecx
jl 0x404e92
mov eax, dword [esp + 0xbc]
cmp dword [eax + 4], 0
je 0x405458
lea eax, [esp + 0xbc]
push eax
lea ecx, [esp + 0x1c]
call fcn.00427320
mov eax, dword [esp + 0xc0]
cmp dword [eax + 4], 0
je 0x405476
lea eax, [esp + 0xc0]
push eax
lea ecx, [esp + 0x20]
call fcn.00427320
cmp byte [esp + 0xcb], 0
je 0x405489
lea ecx, [esp + 0x10]
call fcn.0040b650
cmp byte [esp + 0xca], 0
je 0x40549c
lea ecx, [esp + 0x10]
call fcn.0040b5a0
cmp byte [esp + 0xc9], 0
je 0x4054af
lea ecx, [esp + 0x10]
call fcn.0040b710
cmp byte [esp + 0xc8], 0
je 0x4054c2
lea ecx, [esp + 0x10]
call fcn.00407750
cmp byte [esp + 0xc7], 0
je 0x4054d5
lea ecx, [esp + 0x10]
call fcn.00407900
mov eax, dword [esp + 0xdc]
test eax, eax
je 0x4054e4
mov dword [esp + 0x14], eax
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x14]
call fcn.00409470
mov eax, dword [esp + 0x68]
mov dword [esp + 0xe0], eax
mov eax, dword [eax]
test eax, eax
jne 0x405612
mov eax, dword [esp + 0x68]
lea ecx, [esp + 0xe0]
push dword [eax + 4]
call fcn.004309e0
mov ecx, dword [esp + 0x68]
mov eax, dword [ecx + 8]
add ecx, 0x10
lea eax, [ecx + eax*4]
push eax
mov eax, dword [esp + 0xe4]
mov ecx, dword [eax + 0xc]
add ecx, 4
lea ecx, [eax + ecx*4]
push ecx
mov ecx, dword [eax + 8]
lea eax, [eax + ecx*4]
add eax, 0x10
lea ecx, [esp + 0xe8]
push eax
call fcn.004037a0
jmp 0x40561e
lea eax, [esp + 0xdc]
push eax
lea ecx, [esp + 0x3c]
call fcn.00403360
lea ecx, [esp + 0xd0]
push ecx
mov ecx, eax
call fcn.004038c0
mov eax, dword [eax]
mov ecx, dword [eax + 0xc]
add ecx, eax
push ecx
push 0x737fc0
call fcn.004015c0
mov eax, dword [esp + 0xd8]
add esp, 8
mov eax, dword [eax]
test eax, eax
je 0x4055b1
cmp eax, 0xffffffff
je 0x4055c4
mov eax, dword [esp + 0xd0]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
setne al
test al, al
jne 0x4055c4
push 4
push 1
push dword [esp + 0xd8]
call fcn.00425140
add esp, 0xc
mov eax, dword [esp + 0xdc]
mov eax, dword [eax]
test eax, eax
je 0x4055ec
cmp eax, 0xffffffff
je 0x4055ff
mov eax, dword [esp + 0xdc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
setne al
test al, al
jne 0x4055ff
push 4
push 2
push dword [esp + 0xe4]
call fcn.00425140
add esp, 0xc
lea ecx, [esp + 0x78]
call fcn.004025a0
mov edi, 2
jmp 0x404b05
cmp eax, 0xffffffff
je 0x40561e
mov eax, dword [esp + 0x68]
lock inc dword [eax]
mov eax, dword [esp + 0xe0]
mov edx, dword [eax + 8]
mov edi, dword [eax + 0xc]
mov eax, dword [eax]
mov dword [esp + 0xd8], edx
test eax, eax
je 0x405654
or esi, 0xffffffff
cmp eax, esi
je 0x40568e
mov eax, dword [esp + 0xe0]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
setne al
test al, al
jne 0x40568e
mov esi, dword [esp + 0xe0]
lea ecx, [esp + 0xe0]
mov eax, dword [esi + 0xc]
add eax, 4
lea eax, [esi + eax*4]
push eax
mov eax, dword [esi + 8]
add eax, 4
lea eax, [esi + eax*4]
push eax
call fcn.004037e0
push esi
call fcn.00430ae0
mov edx, dword [esp + 0xdc]
add esp, 4
or esi, 0xffffffff
cmp edi, edx
je 0x405767
lea eax, [esp + 0xdc]
push eax
lea ecx, [esp + 0x3c]
call fcn.00403360
lea ecx, [esp + 0xd0]
push ecx
mov ecx, eax
call fcn.004038c0
mov eax, dword [eax]
mov ecx, dword [eax + 0xc]
add ecx, eax
push ecx
push 0x737fc0
call fcn.004015c0
mov eax, dword [esp + 0xd8]
add esp, 8
mov eax, dword [eax]
test eax, eax
je 0x4056f2
cmp eax, 0xffffffff
je 0x405705
mov eax, dword [esp + 0xd0]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
setne al
test al, al
jne 0x405705
push 4
push 1
push dword [esp + 0xd8]
call fcn.00425140
add esp, 0xc
mov eax, dword [esp + 0xdc]
mov eax, dword [eax]
test eax, eax
je 0x40572c
cmp eax, 0xffffffff
je 0x40573f
mov eax, dword [esp + 0xdc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
setne al
test al, al
jne 0x40573f
push 4
push 2
push dword [esp + 0xe4]
call fcn.00425140
add esp, 0xc
lea eax, [esp + 0xd0]
mov dword [esp + 0xd0], 0x71f0d0
push eax
lea ecx, [esp + 0x6c]
call fcn.00402970
lea ecx, [esp + 0xd0]
call fcn.004021c0
lea eax, [esp + 0xac]
push eax
lea eax, [esp + 0x3c]
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x1c]
call fcn.0040af10
test al, al
jne 0x404b03
lea eax, [esp + 0xdc]
push eax
lea ecx, [esp + 0x3c]
call fcn.00403360
lea ecx, [esp + 0xd0]
push ecx
mov ecx, eax
call fcn.004038c0
mov eax, dword [eax]
mov ecx, dword [eax + 0xc]
add ecx, eax
push ecx
push 0x737fc0
call fcn.004015c0
mov eax, dword [esp + 0xd8]
add esp, 8
mov eax, dword [eax]
test eax, eax
je 0x4057e9
cmp eax, 0xffffffff
je 0x4057fc
mov eax, dword [esp + 0xd0]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
setne al
test al, al
jne 0x4057fc
push 4
push 1
push dword [esp + 0xd8]
call fcn.00425140
add esp, 0xc
mov eax, dword [esp + 0xdc]
mov eax, dword [eax]
test eax, eax
je 0x405823
cmp eax, 0xffffffff
je 0x405836
mov eax, dword [esp + 0xdc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
setne al
test al, al
jne 0x405836
push 4
push 2
push dword [esp + 0xe4]
call fcn.00425140
add esp, 0xc
mov edi, 3
jmp 0x404b05