Function at 0x403f50
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x48fd9c
mov eax, dword fs:[0]
push eax
sub esp, 0x90
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4b5a50]
xor eax, esp
push eax
lea eax, [esp + 0xa4]
mov dword fs:[0], eax
mov ebp, dword [esp + 0xb4]
xor edi, edi
push 0x204
mov dword [esp + 0x20], edi
call fcn.0043e1fa
add esp, 4
cmp eax, edi
je 0x403fa4
mov esi, eax
call fcn.0043c200
jmp 0x403fa6
xor eax, eax
mov dword [ebp + 0x5c], eax
lea eax, [esp + 0x1c]
push eax
push 0x81
call fcn.00416a50
mov ebx, dword [esp + 0x1c]
mov esi, dword [ebp + 0x5c]
cmp ebx, edi
je 0x403fe8
mov ecx, dword [esi + 0x9c]
cmp ecx, edi
je 0x403fdb
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [esi + 0x9c], edi
mov eax, esi
mov dword [esi + 0x9c], ebx
call fcn.0043c650
mov ebx, dword [ebp + 0x5c]
lea esi, [ebp + 0xb0]
cmp ebx, edi
je 0x40403f
mov eax, dword [ebx + 0xa0]
mov dword [ebx + 0xec], esi
mov dword [esp + 0x14], eax
cmp eax, edi
je 0x404018
lea ecx, [esp + 0x14]
push ecx
lea eax, [esi + 0x50]
call fcn.0043ba00
mov dword [eax], ebx
mov eax, dword [esi + 0x28]
add esi, 0x20
cmp eax, edi
mov dword [esp + 0x18], eax
jge 0x40402b
call fcn.004404b8
mov edi, eax
inc edi
call fcn.0043be80
mov edx, dword [esi + 4]
mov eax, dword [esp + 0x18]
mov dword [edx + eax*4], ebx
xor edi, edi
push 0x204
call fcn.0043e1fa
add esp, 4
cmp eax, edi
je 0x404059
mov esi, eax
call fcn.0043c200
jmp 0x40405b
xor eax, eax
push 0x49aac8
lea ecx, [esp + 0x24]
mov dword [ebp + 0x68], eax
call fcn.00401600
mov dword [esp + 0xac], edi
mov esi, dword [ebp + 0x68]
lea ecx, [esp + 0x20]
push ecx
lea edi, [esi + 0x160]
push edi
call fcn.00410dc0
add esp, 8
test al, al
jne 0x4040a1
lea edx, [esp + 0x20]
push edx
mov ecx, edi
call fcn.00401b30
mov eax, esi
call fcn.0043c650
mov dword [esp + 0xac], 0xffffffff
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4040cc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp + 0x68]
mov ecx, 0xff000000
cmp dword [eax + 0xf0], ecx
je 0x4040e7
mov dword [eax + 0xf0], ecx
call fcn.0043c650
mov eax, dword [ebp + 0x68]
mov dword [eax + 0x100], 0xc
mov ebx, dword [ebp + 0x68]
test ebx, ebx
je 0x404149
mov eax, dword [ebx + 0xa0]
lea esi, [ebp + 0xb0]
mov dword [ebx + 0xec], esi
mov dword [esp + 0x14], eax
test eax, eax
je 0x404124
lea ecx, [esp + 0x14]
push ecx
lea eax, [esi + 0x50]
call fcn.0043ba00
mov dword [eax], ebx
mov eax, dword [esi + 0x28]
add esi, 0x20
mov dword [esp + 0x18], eax
test eax, eax
jge 0x404137
call fcn.004404b8
mov edi, eax
inc edi
call fcn.0043be80
mov edx, dword [esi + 4]
mov eax, dword [esp + 0x18]
mov dword [edx + eax*4], ebx
push 0x204
call fcn.0043e1fa
add esp, 4
test eax, eax
je 0x404163
mov esi, eax
call fcn.0043c200
jmp 0x404165
xor eax, eax
mov dword [ebp + 0x70], eax
lea esi, [esp + 0x14]
mov eax, ebp
call fcn.00402690
mov esi, eax
mov dword [esp + 0xac], 1
mov edi, dword [ebp + 0x70]
lea ebx, [edi + 0x160]
push esi
push ebx
call fcn.00410dc0
add esp, 8
test al, al
jne 0x4041a6
push esi
mov ecx, ebx
call fcn.00401b30
mov eax, edi
call fcn.0043c650
or esi, 0xffffffff
mov dword [esp + 0xac], esi
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
mov edx, esi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4041cf
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp + 0x70]
cmp dword [eax + 0xf0], esi
je 0x4041e5
mov dword [eax + 0xf0], esi
call fcn.0043c650
mov eax, dword [ebp + 0x70]
mov dword [eax + 0x100], 0x10
mov eax, dword [ebp + 0x70]
mov dword [eax + 0x6c], 1
mov ebx, dword [ebp + 0x70]
test ebx, ebx
je 0x404251
mov eax, dword [ebx + 0xa0]
lea esi, [ebp + 0xb0]
mov dword [ebx + 0xec], esi
mov dword [esp + 0x14], eax
test eax, eax
je 0x40422c
lea ecx, [esp + 0x14]
push ecx
lea eax, [esi + 0x50]
call fcn.0043ba00
mov dword [eax], ebx
mov eax, dword [esi + 0x28]
add esi, 0x20
mov dword [esp + 0x18], eax
test eax, eax
jge 0x40423f
call fcn.004404b8
mov edi, eax
inc edi
call fcn.0043be80
mov edx, dword [esi + 4]
mov eax, dword [esp + 0x18]
mov dword [edx + eax*4], ebx
push 0x204
call fcn.0043e1fa
add esp, 4
test eax, eax
je 0x40426b
mov esi, eax
call fcn.0043c200
jmp 0x40426d
xor eax, eax
lea ecx, [esp + 0x1c]
push ecx
push 0x89
mov dword [ebp + 0x6c], eax
call fcn.00416a50
mov edi, dword [esp + 0x1c]
mov esi, dword [ebp + 0x6c]
test edi, edi
je 0x4042b3
mov ecx, dword [esi + 0x9c]
test ecx, ecx
je 0x4042a6
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [esi + 0x9c], 0
mov eax, esi
mov dword [esi + 0x9c], edi
call fcn.0043c650
mov ebx, dword [ebp + 0x6c]
test ebx, ebx
je 0x404308
mov eax, dword [ebx + 0xa0]
lea esi, [ebp + 0xb0]
mov dword [ebx + 0xec], esi
mov dword [esp + 0x14], eax
test eax, eax
je 0x4042e3
lea ecx, [esp + 0x14]
push ecx
lea eax, [esi + 0x50]
call fcn.0043ba00
mov dword [eax], ebx
mov eax, dword [esi + 0x28]
add esi, 0x20
mov dword [esp + 0x14], eax
test eax, eax
jge 0x4042f6
call fcn.004404b8
lea edi, [eax + 1]
call fcn.0043be80
mov edx, dword [esi + 4]
mov eax, dword [esp + 0x14]
mov dword [edx + eax*4], ebx
push 0xc8
push ebp
lea ecx, [esp + 0x88]
xor eax, eax
push ecx
push 0x40010080
lea ecx, [ebp + 0x130]
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
call fcn.00448af4
push 0x204
call fcn.0043e1fa
add esp, 4
test eax, eax
je 0x404362
mov esi, eax
call fcn.0043c200
jmp 0x404364
xor eax, eax
mov ecx, 0xffaaaaaa
mov dword [ebp + 0xa8], eax
cmp dword [eax + 0xf0], ecx
je 0x404382
mov dword [eax + 0xf0], ecx
call fcn.0043c650
mov ebx, dword [ebp + 0xa8]
test ebx, ebx
je 0x4043da
mov eax, dword [ebx + 0xa0]
lea esi, [ebp + 0xb0]
mov dword [ebx + 0xec], esi
mov dword [esp + 0x14], eax
test eax, eax
je 0x4043b5
lea edx, [esp + 0x14]
push edx
lea eax, [esi + 0x50]
call fcn.0043ba00
mov dword [eax], ebx
mov eax, dword [esi + 0x28]
add esi, 0x20
mov dword [esp + 0x14], eax
test eax, eax
jge 0x4043c8
call fcn.004404b8
lea edi, [eax + 1]
call fcn.0043be80
mov eax, dword [esi + 4]
mov ecx, dword [esp + 0x14]
mov dword [eax + ecx*4], ebx
push 0x208
call fcn.0043e1fa
mov esi, eax
add esp, 4
test esi, esi
je 0x404404
call fcn.0043c200
mov dword [esi], vtable.CUIButton.0
mov dword [esi + 0x204], 0
jmp 0x404406
xor esi, esi
mov dword [ebp + 0x78], esi
lea eax, [ebp + 0x54]
lea edx, [esp + 0x1c]
mov dword [esi + 0xac], eax
mov eax, dword [ebp + 0x78]
push edx
push 0x84
mov dword [eax + 0xa0], 0x3e9
call fcn.00416a50
mov edi, dword [esp + 0x1c]
mov esi, dword [ebp + 0x78]
test edi, edi
je 0x404462
mov ecx, dword [esi + 0x9c]
test ecx, ecx
je 0x404455
mov eax, dword [ecx]
mov edx, dword [eax]
push 1
call edx
mov dword [esi + 0x9c], 0
mov eax, esi
mov dword [esi + 0x9c], edi
call fcn.0043c650
mov ebx, dword [sym.imp.USER32.dll_CopyRect]
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x24], eax
mov eax, dword [ebp + 0x78]
mov dword [esp + 0x28], ecx
lea ecx, [esp + 0x24]
push ecx
add eax, 0x174
mov edx, 0x55
mov esi, 0x22
push eax
mov dword [esp + 0x34], edx
mov dword [esp + 0x38], esi
call ebx
xor eax, eax
mov edx, 0x55
mov dword [esp + 0x24], eax
mov eax, dword [ebp + 0x78]
mov dword [esp + 0x2c], edx
lea edx, [esp + 0x24]
mov ecx, esi
push edx
add eax, 0x184
mov esi, 0x44
push eax
mov dword [esp + 0x30], ecx
mov dword [esp + 0x38], esi
call ebx
mov esi, dword [ebp + 0x78]
mov dword [esp + 0x20], esi
test esi, esi
je 0x404521
mov eax, dword [esi + 0xa0]
lea edi, [ebp + 0xb0]
mov dword [esi + 0xec], edi
mov dword [esp + 0x14], eax
test eax, eax
je 0x4044f8
lea eax, [esp + 0x14]
push eax
lea eax, [edi + 0x50]
call fcn.0043ba00
mov dword [eax], esi
mov eax, dword [edi + 0x28]
lea esi, [edi + 0x20]
mov dword [esp + 0x18], eax
test eax, eax
jge 0x40450b
call fcn.004404b8
mov edi, eax
inc edi
call fcn.0043be80
mov ecx, dword [esi + 4]
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x18]
mov dword [ecx + eax*4], edx
push 0x208
call fcn.0043e1fa
mov esi, eax
add esp, 4
test esi, esi
je 0x40454b
call fcn.0043c200
mov dword [esi], vtable.CUIButton.0
mov dword [esi + 0x204], 0
jmp 0x40454d
xor esi, esi
mov dword [ebp + 0x7c], esi
lea eax, [ebp + 0x54]
lea ecx, [esp + 0x1c]
mov dword [esi + 0xac], eax
mov eax, dword [ebp + 0x7c]
push ecx
push 0x85
mov dword [eax + 0xa0], 0x3ea
call fcn.00416a50
mov edi, dword [esp + 0x1c]
mov esi, dword [ebp + 0x7c]
test edi, edi
je 0x4045a9
mov ecx, dword [esi + 0x9c]
test ecx, ecx
je 0x40459c
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [esi + 0x9c], 0
mov eax, esi
mov dword [esi + 0x9c], edi
call fcn.0043c650
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x24], eax
mov eax, dword [ebp + 0x7c]
mov dword [esp + 0x28], ecx
lea ecx, [esp + 0x24]
push ecx
add eax, 0x174
mov edx, 0x5b
mov esi, 0x1e
push eax
mov dword [esp + 0x34], edx
mov dword [esp + 0x38], esi
call ebx
xor eax, eax
mov edx, 0x5b
mov dword [esp + 0x24], eax
mov eax, dword [ebp + 0x7c]
mov dword [esp + 0x2c], edx
lea edx, [esp + 0x24]
mov ecx, esi
push edx
add eax, 0x184
mov esi, 0x3c
push eax
mov dword [esp + 0x30], ecx
mov dword [esp + 0x38], esi
call ebx
xor eax, eax
mov ecx, esi
mov dword [esp + 0x24], eax
mov eax, dword [ebp + 0x7c]
mov dword [esp + 0x28], ecx
lea ecx, [esp + 0x24]
push ecx
add eax, 0x194
mov edx, 0x5b
mov esi, 0x5a
push eax
mov dword [esp + 0x34], edx
mov dword [esp + 0x38], esi
call ebx
lea esi, [esp + 0x14]
mov eax, ebp
call fcn.00402660
mov edx, dword [eax]
cmp dword [edx - 0xc], 0
mov eax, dword [esp + 0x14]
sete byte [esp + 0x3b]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x404669
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp byte [esp + 0x3b], 0
lea ecx, [esp + 0x20]
je 0x40468b
push 0x49aad4
call fcn.00401600
mov dword [esp + 0xac], 2
jmp 0x4046a0
push 0x49aae4
call fcn.00401600
mov dword [esp + 0xac], 3
mov esi, dword [ebp + 0x7c]
lea ecx, [esp + 0x20]
push ecx
lea edi, [esi + 0x160]
push edi
call fcn.00410dc0
add esp, 8
test al, al
jne 0x4046ce
lea edx, [esp + 0x20]
push edx
mov ecx, edi
call fcn.00401b30
mov eax, esi
call fcn.0043c650
mov dword [esp + 0xac], 0xffffffff
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4046f9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp + 0x7c]
mov ecx, 0xff000000
cmp dword [eax + 0xf0], ecx
je 0x404714
mov dword [eax + 0xf0], ecx
call fcn.0043c650
mov ecx, dword [ebp + 0x7c]
mov dword [ecx + 0x100], 0xe
mov eax, dword [ebp + 0x7c]
add eax, 0x104
mov ecx, 0xa
mov dword [eax], ecx
xor esi, esi
lea edx, [ecx - 5]
mov dword [eax + 4], edx
xor edi, edi
mov dword [eax + 8], esi
mov dword [eax + 0xc], edi
mov esi, dword [ebp + 0x7c]
mov dword [esp + 0x20], esi
cmp esi, edi
je 0x40479f
mov eax, dword [esi + 0xa0]
lea edi, [ebp + 0xb0]
mov dword [esi + 0xec], edi
mov dword [esp + 0x14], eax
test eax, eax
je 0x404774
lea edx, [esp + 0x14]
push edx
lea eax, [edi + 0x50]
call fcn.0043ba00
mov dword [eax], esi
mov eax, dword [edi + 0x28]
lea esi, [edi + 0x20]
mov dword [esp + 0x18], eax
test eax, eax
jge 0x404787
call fcn.004404b8
mov edi, eax
inc edi
call fcn.0043be80
mov eax, dword [esi + 4]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x18]
mov dword [eax + edx*4], ecx
xor edi, edi
push 0x208
call fcn.0043e1fa
mov esi, eax
add esp, 4
cmp esi, edi
je 0x4047c5
call fcn.0043c200
mov dword [esi], vtable.CUIButton.0
mov dword [esi + 0x204], edi
jmp 0x4047c7
xor esi, esi
mov dword [ebp + 0x88], esi
lea eax, [ebp + 0x54]
lea ecx, [esp + 0x1c]
mov dword [esi + 0xac], eax
mov eax, dword [ebp + 0x88]
push ecx
push 0x86
mov dword [eax + 0xa0], 0x3eb
call fcn.00416a50
mov esi, dword [ebp + 0x88]
cmp dword [esp + 0x1c], edi
je 0x40482a
mov ecx, dword [esi + 0x9c]
cmp ecx, edi
je 0x404819
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [esi + 0x9c], edi
mov ecx, dword [esp + 0x1c]
mov eax, esi
mov dword [esi + 0x9c], ecx
call fcn.0043c650
xor eax, eax
mov edx, 0xb1
mov dword [esp + 0x24], eax
mov eax, dword [ebp + 0x88]
mov dword [esp + 0x2c], edx
lea edx, [esp + 0x24]
push edx
add eax, 0x174
xor ecx, ecx
mov esi, 0x30
push eax
mov dword [esp + 0x30], ecx
mov dword [esp + 0x38], esi
call ebx
mov ecx, esi
mov edx, 0xb1
mov dword [esp + 0x2c], edx
mov edx, dword [ebp + 0x88]
mov dword [esp + 0x28], ecx
lea ecx, [esp + 0x24]
push ecx
add edx, 0x184
xor eax, eax
mov esi, 0x60
push edx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x38], esi
call ebx
xor eax, eax
mov ecx, esi
mov dword [esp + 0x28], ecx
mov ecx, dword [ebp + 0x88]
mov dword [esp + 0x24], eax
lea eax, [esp + 0x24]
push eax
add ecx, 0x194
mov edx, 0xb1
mov esi, 0x90
push ecx
mov dword [esp + 0x34], edx
mov dword [esp + 0x38], esi
call ebx
mov esi, dword [ebp + 0x88]
mov dword [esp + 0x20], esi
cmp esi, edi
je 0x404921
mov eax, dword [esi + 0xa0]
lea edi, [ebp + 0xb0]
mov dword [esi + 0xec], edi
mov dword [esp + 0x14], eax
test eax, eax
je 0x4048f6
lea edx, [esp + 0x14]
push edx
lea eax, [edi + 0x50]
call fcn.0043ba00
mov dword [eax], esi
mov eax, dword [edi + 0x28]
lea esi, [edi + 0x20]
mov dword [esp + 0x18], eax
test eax, eax
jge 0x404909
call fcn.004404b8
mov edi, eax
inc edi
call fcn.0043be80
mov eax, dword [esi + 4]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x18]
mov dword [eax + edx*4], ecx
xor edi, edi
push 0x208
call fcn.0043e1fa
mov esi, eax
add esp, 4
cmp esi, edi
je 0x404947
call fcn.0043c200
mov dword [esi], vtable.CUIButton.0
mov dword [esi + 0x204], edi
jmp 0x404949
xor esi, esi
mov dword [ebp + 0x80], esi
lea eax, [ebp + 0x54]
lea ecx, [esp + 0x1c]
mov dword [esi + 0xac], eax
mov eax, dword [ebp + 0x80]
push ecx
push 0x88
mov dword [eax + 0xa0], 0x3ec
call fcn.00416a50
mov esi, dword [ebp + 0x80]
cmp dword [esp + 0x1c], edi
je 0x4049ac
mov ecx, dword [esi + 0x9c]
cmp ecx, edi
je 0x40499b
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [esi + 0x9c], edi
mov ecx, dword [esp + 0x1c]
mov eax, esi
mov dword [esi + 0x9c], ecx
call fcn.0043c650
xor eax, eax
mov edx, 0x21
mov dword [esp + 0x24], eax
mov eax, dword [ebp + 0x80]
mov dword [esp + 0x2c], edx
lea edx, [esp + 0x24]
push edx
add eax, 0x174
xor ecx, ecx
mov esi, 0x23
push eax
mov dword [esp + 0x30], ecx
mov dword [esp + 0x38], esi
call ebx
xor ecx, ecx
mov edx, 0x42
mov dword [esp + 0x2c], edx
mov edx, dword [ebp + 0x80]
mov dword [esp + 0x28], ecx
lea ecx, [esp + 0x24]
push ecx
add edx, 0x184
mov eax, 0x21
push edx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x38], esi
call ebx
xor ecx, ecx
mov eax, 0x42
mov dword [esp + 0x28], ecx
mov ecx, dword [ebp + 0x80]
mov dword [esp + 0x24], eax
lea eax, [esp + 0x24]
push eax
add ecx, 0x1b4
mov edx, 0x63
push ecx
mov dword [esp + 0x34], edx
mov dword [esp + 0x38], esi
call ebx
mov esi, dword [ebp + 0x80]
mov dword [esp + 0x20], esi
cmp esi, edi
je 0x404a9f
mov eax, dword [esi + 0xa0]
lea edi, [ebp + 0xb0]
mov dword [esi + 0xec], edi
mov dword [esp + 0x14], eax
test eax, eax
je 0x404a74
lea edx, [esp + 0x14]
push edx
lea eax, [edi + 0x50]
call fcn.0043ba00
mov dword [eax], esi
mov eax, dword [edi + 0x28]
lea esi, [edi + 0x20]
mov dword [esp + 0x18], eax
test eax, eax
jge 0x404a87
call fcn.004404b8
mov edi, eax
inc edi
call fcn.0043be80
mov eax, dword [esi + 4]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x18]
mov dword [eax + edx*4], ecx
xor edi, edi
push 0x208
call fcn.0043e1fa
mov esi, eax
add esp, 4
cmp esi, edi
je 0x404ac5
call fcn.0043c200
mov dword [esi], vtable.CUIButton.0
mov dword [esi + 0x204], edi
jmp 0x404ac7
xor esi, esi
mov dword [ebp + 0x84], esi
lea eax, [ebp + 0x54]
lea ecx, [esp + 0x1c]
mov dword [esi + 0xac], eax
mov eax, dword [ebp + 0x84]
push ecx
push 0x90
mov dword [eax + 0xa0], 0x3ed
call fcn.00416a50
mov esi, dword [ebp + 0x84]
cmp dword [esp + 0x1c], edi
je 0x404b2a
mov ecx, dword [esi + 0x9c]
cmp ecx, edi
je 0x404b19
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [esi + 0x9c], edi
mov ecx, dword [esp + 0x1c]
mov eax, esi
mov dword [esi + 0x9c], ecx
call fcn.0043c650
xor eax, eax
mov edx, 0x21
mov dword [esp + 0x24], eax
mov eax, dword [ebp + 0x84]
mov dword [esp + 0x2c], edx
lea edx, [esp + 0x24]
push edx
add eax, 0x174
xor ecx, ecx
mov esi, 0x23
push eax
mov dword [esp + 0x30], ecx
mov dword [esp + 0x38], esi
call ebx
xor ecx, ecx
mov edx, 0x42
mov dword [esp + 0x2c], edx
mov edx, dword [ebp + 0x84]
mov dword [esp + 0x28], ecx
lea ecx, [esp + 0x24]
push ecx
add edx, 0x184
mov eax, 0x21
push edx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x38], esi
call ebx
mov esi, dword [ebp + 0x84]
mov dword [esp + 0x20], esi
cmp esi, edi
je 0x404bed
mov eax, dword [esi + 0xa0]
lea edi, [ebp + 0xb0]
mov dword [esi + 0xec], edi
mov dword [esp + 0x14], eax
test eax, eax
je 0x404bc2
lea eax, [esp + 0x14]
push eax
lea eax, [edi + 0x50]
call fcn.0043ba00
mov dword [eax], esi
mov eax, dword [edi + 0x28]
lea esi, [edi + 0x20]
mov dword [esp + 0x18], eax
test eax, eax
jge 0x404bd5
call fcn.004404b8
mov edi, eax
inc edi
call fcn.0043be80
mov ecx, dword [esi + 4]
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x18]
mov dword [ecx + eax*4], edx
xor edi, edi
push 0x204
call fcn.0043e1fa
add esp, 4
cmp eax, edi
je 0x404c07
mov esi, eax
call fcn.0043c200
jmp 0x404c09
xor eax, eax
lea ecx, [esp + 0x1c]
push ecx
push 0x8a
mov dword [ebp + 0x8c], eax
call fcn.00416a50
mov esi, dword [ebp + 0x8c]
cmp dword [esp + 0x1c], edi
je 0x404c53
mov ecx, dword [esi + 0x9c]
cmp ecx, edi
je 0x404c42
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [esi + 0x9c], edi
mov ecx, dword [esp + 0x1c]
mov eax, esi
mov dword [esi + 0x9c], ecx
call fcn.0043c650
mov esi, dword [ebp + 0x8c]
mov dword [esp + 0x20], esi
cmp esi, edi
je 0x404cb5
mov eax, dword [esi + 0xa0]
lea edi, [ebp + 0xb0]
mov dword [esi + 0xec], edi
mov dword [esp + 0x14], eax
test eax, eax
je 0x404c8a
lea edx, [esp + 0x14]
push edx
lea eax, [edi + 0x50]
call fcn.0043ba00
mov dword [eax], esi
mov eax, dword [edi + 0x28]
lea esi, [edi + 0x20]
mov dword [esp + 0x18], eax
test eax, eax
jge 0x404c9d
call fcn.004404b8
mov edi, eax
inc edi
call fcn.0043be80
mov eax, dword [esi + 4]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x18]
mov dword [eax + edx*4], ecx
xor edi, edi
push 0x204
call fcn.0043e1fa
add esp, 4
cmp eax, edi
je 0x404ccf
mov esi, eax
call fcn.0043c200
jmp 0x404cd1
xor eax, eax
mov dword [ebp + 0x90], eax
lea eax, [esp + 0x1c]
push eax
push 0x8b
call fcn.00416a50
mov esi, dword [ebp + 0x90]
cmp dword [esp + 0x1c], edi
je 0x404d1b
mov ecx, dword [esi + 0x9c]
cmp ecx, edi
je 0x404d0a
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [esi + 0x9c], edi
mov ecx, dword [esp + 0x1c]
mov eax, esi
mov dword [esi + 0x9c], ecx
call fcn.0043c650
mov esi, dword [ebp + 0x90]
mov dword [esp + 0x20], esi
cmp esi, edi
je 0x404d7d
mov eax, dword [esi + 0xa0]
lea edi, [ebp + 0xb0]
mov dword [esi + 0xec], edi
mov dword [esp + 0x14], eax
test eax, eax
je 0x404d52
lea edx, [esp + 0x14]
push edx
lea eax, [edi + 0x50]
call fcn.0043ba00
mov dword [eax], esi
mov eax, dword [edi + 0x28]
lea esi, [edi + 0x20]
mov dword [esp + 0x18], eax
test eax, eax
jge 0x404d65
call fcn.004404b8
mov edi, eax
inc edi
call fcn.0043be80
mov eax, dword [esi + 4]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x18]
mov dword [eax + edx*4], ecx
xor edi, edi
push 0x204
call fcn.0043e1fa
add esp, 4
cmp eax, edi
je 0x404d97
mov esi, eax
call fcn.0043c200
jmp 0x404d99
xor eax, eax
mov dword [ebp + 0x94], eax
lea eax, [esp + 0x1c]
push eax
push 0x8c
call fcn.00416a50
mov esi, dword [ebp + 0x94]
cmp dword [esp + 0x1c], edi
je 0x404de3
mov ecx, dword [esi + 0x9c]
cmp ecx, edi
je 0x404dd2
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [esi + 0x9c], edi
mov ecx, dword [esp + 0x1c]
mov eax, esi
mov dword [esi + 0x9c], ecx
call fcn.0043c650
mov esi, dword [ebp + 0x94]
mov dword [esp + 0x20], esi
cmp esi, edi
je 0x404e45
mov eax, dword [esi + 0xa0]
lea edi, [ebp + 0xb0]
mov dword [esi + 0xec], edi
mov dword [esp + 0x14], eax
test eax, eax
je 0x404e1a
lea edx, [esp + 0x14]
push edx
lea eax, [edi + 0x50]
call fcn.0043ba00
mov dword [eax], esi
mov eax, dword [edi + 0x28]
lea esi, [edi + 0x20]
mov dword [esp + 0x18], eax
test eax, eax
jge 0x404e2d
call fcn.004404b8
mov edi, eax
inc edi
call fcn.0043be80
mov eax, dword [esi + 4]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x18]
mov dword [eax + edx*4], ecx
xor edi, edi
push 0x204
call fcn.0043e1fa
add esp, 4
cmp eax, edi
je 0x404e5f
mov esi, eax
call fcn.0043c200
jmp 0x404e61
xor eax, eax
mov dword [ebp + 0x98], eax
lea eax, [esp + 0x1c]
push eax
push 0x8d
call fcn.00416a50
mov esi, dword [ebp + 0x98]
cmp dword [esp + 0x1c], edi
je 0x404eab
mov ecx, dword [esi + 0x9c]
cmp ecx, edi
je 0x404e9a
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [esi + 0x9c], edi
mov ecx, dword [esp + 0x1c]
mov eax, esi
mov dword [esi + 0x9c], ecx
call fcn.0043c650
mov esi, dword [ebp + 0x98]
mov dword [esp + 0x20], esi
cmp esi, edi
je 0x404f0d
mov eax, dword [esi + 0xa0]
lea edi, [ebp + 0xb0]
mov dword [esi + 0xec], edi
mov dword [esp + 0x14], eax
test eax, eax
je 0x404ee2
lea edx, [esp + 0x14]
push edx
lea eax, [edi + 0x50]
call fcn.0043ba00
mov dword [eax], esi
mov eax, dword [edi + 0x28]
lea esi, [edi + 0x20]
mov dword [esp + 0x18], eax
test eax, eax
jge 0x404ef5
call fcn.004404b8
mov edi, eax
inc edi
call fcn.0043be80
mov eax, dword [esi + 4]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x18]
mov dword [eax + edx*4], ecx
xor edi, edi
push 0x204
call fcn.0043e1fa
add esp, 4
cmp eax, edi
je 0x404f27
mov esi, eax
call fcn.0043c200
jmp 0x404f29
xor eax, eax
mov dword [ebp + 0x9c], eax
lea eax, [esp + 0x1c]
push eax
push 0x94
call fcn.00416a50
mov esi, dword [ebp + 0x9c]
cmp dword [esp + 0x1c], edi
je 0x404f73
mov ecx, dword [esi + 0x9c]
cmp ecx, edi
je 0x404f62
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [esi + 0x9c], edi
mov ecx, dword [esp + 0x1c]
mov eax, esi
mov dword [esi + 0x9c], ecx
call fcn.0043c650
mov esi, dword [ebp + 0x9c]
mov dword [esp + 0x20], esi
cmp esi, edi
je 0x404fd5
mov eax, dword [esi + 0xa0]
lea edi, [ebp + 0xb0]
mov dword [esi + 0xec], edi
mov dword [esp + 0x14], eax
test eax, eax
je 0x404faa
lea edx, [esp + 0x14]
push edx
lea eax, [edi + 0x50]
call fcn.0043ba00
mov dword [eax], esi
mov eax, dword [edi + 0x28]
lea esi, [edi + 0x20]
mov dword [esp + 0x18], eax
test eax, eax
jge 0x404fbd
call fcn.004404b8
mov edi, eax
inc edi
call fcn.0043be80
mov eax, dword [esi + 4]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x18]
mov dword [eax + edx*4], ecx
xor edi, edi
push 0x204
call fcn.0043e1fa
add esp, 4
cmp eax, edi
je 0x404fef
mov esi, eax
call fcn.0043c200
jmp 0x404ff1
xor eax, eax
mov dword [ebp + 0xa0], eax
lea eax, [esp + 0x1c]
push eax
push 0x96
call fcn.00416a50
mov esi, dword [ebp + 0xa0]
cmp dword [esp + 0x1c], edi
je 0x40503b
mov ecx, dword [esi + 0x9c]
cmp ecx, edi
je 0x40502a
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [esi + 0x9c], edi
mov ecx, dword [esp + 0x1c]
mov eax, esi
mov dword [esi + 0x9c], ecx
call fcn.0043c650
mov esi, dword [ebp + 0xa0]
mov dword [esp + 0x20], esi
cmp esi, edi
je 0x40509d
mov eax, dword [esi + 0xa0]
lea edi, [ebp + 0xb0]
mov dword [esi + 0xec], edi
mov dword [esp + 0x14], eax
test eax, eax
je 0x405072
lea edx, [esp + 0x14]
push edx
lea eax, [edi + 0x50]
call fcn.0043ba00
mov dword [eax], esi
mov eax, dword [edi + 0x28]
lea esi, [edi + 0x20]
mov dword [esp + 0x18], eax
test eax, eax
jge 0x405085
call fcn.004404b8
mov edi, eax
inc edi
call fcn.0043be80
mov eax, dword [esi + 4]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x18]
mov dword [eax + edx*4], ecx
xor edi, edi
push 0x204
call fcn.0043e1fa
add esp, 4
cmp eax, edi
je 0x4050b7
mov esi, eax
call fcn.0043c200
jmp 0x4050b9
xor eax, eax
mov dword [ebp + 0xa4], eax
lea eax, [esp + 0x1c]
push eax
push 0x97
call fcn.00416a50
mov esi, dword [ebp + 0xa4]
cmp dword [esp + 0x1c], edi
je 0x405103
mov ecx, dword [esi + 0x9c]
cmp ecx, edi
je 0x4050f2
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [esi + 0x9c], edi
mov ecx, dword [esp + 0x1c]
mov eax, esi
mov dword [esi + 0x9c], ecx
call fcn.0043c650
mov esi, dword [ebp + 0xa4]
mov dword [esp + 0x20], esi
cmp esi, edi
je 0x405165
mov eax, dword [esi + 0xa0]
lea edi, [ebp + 0xb0]
mov dword [esi + 0xec], edi
mov dword [esp + 0x14], eax
test eax, eax
je 0x40513a
lea edx, [esp + 0x14]
push edx
lea eax, [edi + 0x50]
call fcn.0043ba00
mov dword [eax], esi
mov eax, dword [edi + 0x28]
lea esi, [edi + 0x20]
mov dword [esp + 0x18], eax
test eax, eax
jge 0x40514d
call fcn.004404b8
mov edi, eax
inc edi
call fcn.0043be80
mov eax, dword [esi + 4]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x18]
mov dword [eax + edx*4], ecx
xor edi, edi
push 0x214
call fcn.0043e1fa
add esp, 4
cmp eax, edi
je 0x40517d
call fcn.0043a7c0
jmp 0x40517f
xor eax, eax
mov dword [ebp + 0xac], eax
lea eax, [esp + 0x1c]
push eax
push 0x91
call fcn.00416a50
mov esi, dword [ebp + 0xac]
cmp dword [esp + 0x1c], edi
je 0x4051c9
mov ecx, dword [esi + 0x9c]
cmp ecx, edi
je 0x4051b8
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [esi + 0x9c], edi
mov ecx, dword [esp + 0x1c]
mov eax, esi
mov dword [esi + 0x9c], ecx
call fcn.0043c650
xor eax, eax
mov edx, 0x18
mov dword [esp + 0x24], eax
mov eax, dword [ebp + 0xac]
mov dword [esp + 0x2c], edx
lea edx, [esp + 0x24]
push edx
add eax, 0x174
mov ecx, 0x10
mov esi, 0x20
push eax
mov dword [esp + 0x30], ecx
mov dword [esp + 0x38], esi
call ebx
xor ecx, ecx
mov edx, 0x18
mov dword [esp + 0x2c], edx
mov edx, dword [ebp + 0xac]
mov dword [esp + 0x28], ecx
lea ecx, [esp + 0x24]
push ecx
add edx, 0x184
xor eax, eax
mov esi, 0x10
push edx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x38], esi
call ebx
mov eax, dword [ebp + 0xac]
mov dword [eax + 0x210], 0x18
mov eax, 2
xor ecx, ecx
mov edx, eax
mov dword [esp + 0x2c], edx
mov edx, dword [ebp + 0xac]
mov dword [esp + 0x28], ecx
lea ecx, [esp + 0x24]
push ecx
add edx, 0xb0
xor esi, esi
push edx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x38], esi
call ebx
mov ebx, dword [ebp + 0xac]
cmp ebx, edi
je 0x4052c8
mov eax, dword [ebx + 0xa0]
lea esi, [ebp + 0xb0]
mov dword [ebx + 0xec], esi
mov dword [esp + 0x14], eax
cmp eax, edi
je 0x4052a1
lea eax, [esp + 0x14]
push eax
lea eax, [esi + 0x50]
call fcn.0043ba00
mov dword [eax], ebx
mov eax, dword [esi + 0x28]
add esi, 0x20
cmp eax, edi
mov dword [esp + 0x14], eax
jge 0x4052b4
call fcn.004404b8
lea edi, [eax + 1]
call fcn.0043be80
mov ecx, dword [esi + 4]
mov edx, dword [esp + 0x14]
mov dword [ecx + edx*4], ebx
xor edi, edi
push 0x204
call fcn.0043e1fa
add esp, 4
cmp eax, edi
je 0x4052e4
mov esi, eax
call fcn.0043c200
mov esi, eax
jmp 0x4052e6
xor esi, esi
lea ebx, [ebp + 0x12c]
lea edi, [esi + 0x160]
push ebx
push edi
mov dword [ebp + 0x74], esi
call fcn.00410dc0
add esp, 8
test al, al
jne 0x405312
push ebx
mov ecx, edi
call fcn.00401b30
mov eax, esi
call fcn.0043c650
mov eax, dword [ebp + 0x74]
mov ecx, 0xff000000
cmp dword [eax + 0xf0], ecx
je 0x40532d
mov dword [eax + 0xf0], ecx
call fcn.0043c650
mov eax, dword [ebp + 0x74]
mov dword [eax + 0x100], 0xc
mov ebx, dword [ebp + 0x74]
test ebx, ebx
je 0x40538f
mov eax, dword [ebx + 0xa0]
lea esi, [ebp + 0xb0]
mov dword [ebx + 0xec], esi
mov dword [esp + 0x14], eax
test eax, eax
je 0x40536a
lea ecx, [esp + 0x14]
push ecx
lea eax, [esi + 0x50]
call fcn.0043ba00
mov dword [eax], ebx
mov eax, dword [esi + 0x28]
add esi, 0x20
mov dword [esp + 0x14], eax
test eax, eax
jge 0x40537d
call fcn.004404b8
lea edi, [eax + 1]
call fcn.0043be80
mov edx, dword [esi + 4]
mov eax, dword [esp + 0x14]
mov dword [edx + eax*4], ebx
mov eax, dword [ebp + 0x204]
xor ecx, ecx
cmp eax, ecx
mov dword [esp + 0x3c], eax
mov dword [esp + 0x20], ecx
jle 0x405793
mov dword [esp + 0x48], 0x1e
mov dword [esp + 0x4c], 0xf
mov dword [esp + 0x18], ecx
push 0x208
call fcn.0043e1fa
mov esi, eax
add esp, 4
test esi, esi
je 0x4053e7
call fcn.0043c200
mov dword [esi], vtable.CUIButton.0
mov dword [esi + 0x204], 0
mov ebx, esi
jmp 0x4053e9
xor ebx, ebx
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x1c]
push edx
lea eax, [ebp + 0x54]
add ecx, 0x3f2
push 0x87
mov dword [ebx + 0xac], eax
mov dword [ebx + 0xa0], ecx
call fcn.00416a50
mov esi, dword [esp + 0x1c]
test esi, esi
je 0x405482
mov ecx, dword [ebx + 0x9c]
test ecx, ecx
je 0x405435
mov eax, dword [ecx]
mov edx, dword [eax]
push 1
call edx
mov dword [ebx + 0x9c], 0
mov eax, dword [ebx + 0xec]
mov dword [ebx + 0x9c], esi
test eax, eax
je 0x405482
mov ecx, dword [ebx + 0xc0]
mov edx, dword [ebx + 0xc4]
mov dword [esp + 0x24], ecx
mov ecx, dword [ebx + 0xc8]
mov dword [esp + 0x28], edx
mov edx, dword [ebx + 0xcc]
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x30], edx
mov eax, dword [eax + 0x6c]
test eax, eax
je 0x405482
push 1
lea ecx, [esp + 0x28]
push ecx
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
mov esi, dword [sym.imp.USER32.dll_CopyRect]
xor eax, eax
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], eax
mov eax, 0xf
lea edx, [esp + 0x90]
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
push edx
lea eax, [ebx + 0x174]
push eax
call esi
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x4c]
mov eax, 0xf
mov dword [esp + 0x50], eax
xor eax, eax
mov dword [esp + 0x54], eax
lea eax, [esp + 0x50]
mov dword [esp + 0x58], ecx
push eax
lea ecx, [ebx + 0x184]
push ecx
mov dword [esp + 0x64], edx
call esi
mov esi, 1
mov dword [ebx + 0x204], esi
cmp dword [ebx + 0xe8], esi
je 0x405558
mov ecx, dword [ebx + 0xa8]
test ecx, ecx
je 0x405524
mov eax, dword [ebx + 0xec]
test eax, eax
je 0x405524
push ecx
push eax
call fcn.0043b130
test eax, eax
je 0x405524
push 0
mov ecx, eax
call fcn.0043d9e0
mov ecx, dword [ebx + 0xa4]
mov eax, ecx
or eax, 4
cmp ecx, eax
je 0x405540
mov dword [ebx + 0xa4], eax
mov eax, ebx
call fcn.0043c650
mov ecx, dword [ebx + 0xac]
mov dword [ebx + 0xe8], esi
test ecx, ecx
je 0x405558
mov edx, dword [ecx]
mov eax, dword [edx + 0x14]
push ebx
call eax
mov eax, dword [ebx + 0xa0]
lea esi, [ebp + 0xb0]
mov dword [ebx + 0xec], esi
mov dword [esp + 0x14], eax
test eax, eax
je 0x405581
lea ecx, [esp + 0x14]
push ecx
lea eax, [esi + 0x50]
call fcn.0043ba00
mov dword [eax], ebx
mov eax, dword [esi + 0x28]
add esi, 0x20
mov dword [esp + 0x34], eax
test eax, eax
jl 0x404026
mov edi, eax
inc edi
call fcn.0043be80
mov edx, dword [esi + 4]
mov eax, dword [esp + 0x34]
push 0x204
mov dword [edx + eax*4], ebx
call fcn.0043e1fa
add esp, 4
test eax, eax
je 0x4055c5
mov esi, eax
call fcn.0043c200
mov esi, eax
mov dword [esp + 0x34], esi
jmp 0x4055d1
mov dword [esp + 0x34], 0
mov esi, dword [esp + 0x34]
mov eax, dword [esp + 0x18]
test eax, eax
jl 0x404026
mov ecx, dword [esp + 0x20]
cmp ecx, dword [ebp + 0x204]
jge 0x404026
mov ecx, dword [ebp + 0x200]
mov edx, dword [ecx + eax]
add ecx, eax
test edx, edx
je 0x4057af
mov eax, dword [esi + 0x160]
mov di, word [eax]
cmp di, word [edx]
jne 0x40562c
test di, di
je 0x405628
mov di, word [eax + 2]
cmp di, word [edx + 2]
jne 0x40562c
add eax, 4
add edx, 4
test di, di
jne 0x405606
xor eax, eax
jmp 0x405631
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x405688
push ecx
lea ecx, [esi + 0x160]
call fcn.00401b30
mov eax, dword [esi + 0xec]
test eax, eax
je 0x405688
mov edx, dword [esi + 0xc0]
mov ecx, dword [esi + 0xc4]
mov dword [esp + 0x60], edx
mov edx, dword [esi + 0xc8]
mov dword [esp + 0x64], ecx
mov ecx, dword [esi + 0xcc]
mov dword [esp + 0x68], edx
mov dword [esp + 0x6c], ecx
mov eax, dword [eax + 0x6c]
test eax, eax
je 0x405688
push 1
lea edx, [esp + 0x64]
push edx
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
mov eax, 0xff000000
cmp dword [esi + 0xf0], eax
je 0x4056e2
mov dword [esi + 0xf0], eax
mov eax, dword [esi + 0xec]
test eax, eax
je 0x4056e2
mov ecx, dword [esi + 0xc0]
mov edx, dword [esi + 0xc4]
mov dword [esp + 0x70], ecx
mov ecx, dword [esi + 0xc8]
mov dword [esp + 0x74], edx
mov edx, dword [esi + 0xcc]
mov dword [esp + 0x78], ecx
mov dword [esp + 0x7c], edx
mov eax, dword [eax + 0x6c]
test eax, eax
je 0x4056e2
push 1
lea ecx, [esp + 0x74]
push ecx
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
mov dword [esi + 0x100], 0xd
mov eax, dword [esi + 0xa0]
lea edi, [ebp + 0xb0]
mov dword [esi + 0xec], edi
mov dword [esp + 0x14], eax
test eax, eax
je 0x405715
lea edx, [esp + 0x14]
push edx
lea eax, [edi + 0x50]
call fcn.0043ba00
mov dword [eax], esi
mov eax, dword [edi + 0x28]
lea esi, [edi + 0x20]
mov dword [esp + 0x14], eax
test eax, eax
jl 0x404026
mov edi, eax
inc edi
call fcn.0043be80
mov eax, dword [esi + 4]
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x34]
lea esi, [ebp + 0x1e8]
mov dword [eax + edx*4], ecx
mov eax, dword [esi + 8]
mov dword [esp + 0x14], eax
test eax, eax
jl 0x404026
mov edi, eax
inc edi
call fcn.00412c80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x48]
add dword [esp + 0x18], 0x30
shl eax, 4
add eax, dword [esi + 4]
mov dword [eax], ebx
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x4c]
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov eax, dword [esp + 0x20]
inc eax
cmp eax, dword [esp + 0x3c]
mov dword [esp + 0x20], eax
jl 0x4053bb
mov ecx, dword [esp + 0xa4]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x9c
ret 4
push 0x80004005
call fcn.004010b0
int3