Function at 0x416420
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x46dbe8
mov eax, dword fs:[0]
push eax
sub esp, 0x7ac
mov eax, dword [0x487550]
xor eax, esp
mov dword [esp + 0x7a8], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x487550]
xor eax, esp
push eax
lea eax, [esp + 0x7c0]
mov dword fs:[0], eax
mov eax, dword [esp + 0x7d0]
mov esi, ecx
mov dword [esp + 0x38], eax
mov dword [esi + 4], eax
mov eax, dword [esp + 0x7d4]
lea edi, [esi + 0xc]
push edi
mov dword [esp + 0x38], esi
mov dword [esi], vtable.IBaseView.0
mov dword [esi + 8], eax
call fcn.00433790
or eax, 0xffffffff
mov dword [esi + 0x28], eax
mov dword [esi + 0x24], eax
xor ebp, ebp
mov dword [esp + 0x7c8], ebp
mov dword [esi], vtable.InstallReminderView.0
xor ecx, ecx
mov dword [esi + 0x44], 7
mov dword [esi + 0x40], ebp
mov word [esi + 0x30], cx
mov ebx, 1
push 0x6c
mov byte [esp + 0x7cc], bl
call fcn.0044cbec
add esp, 4
mov dword [esp + 0x14], eax
mov byte [esp + 0x7c8], 2
cmp eax, ebp
je 0x4164e8
push 5
push eax
mov ecx, ebx
call fcn.00414c00
mov ebp, eax
mov dword [esp + 0x30], eax
jmp 0x4164ee
xor ebp, ebp
mov dword [esp + 0x30], ebp
mov byte [esp + 0x7c8], bl
mov ecx, dword [edi + 0xc]
mov dword [esp + 0x1c], ebp
test ecx, ecx
jne 0x416504
xor eax, eax
jmp 0x41650c
mov eax, dword [edi + 0x14]
sub eax, ecx
sar eax, 2
mov esi, dword [edi + 0x10]
mov edx, esi
sub edx, ecx
sar edx, 2
cmp edx, eax
jae 0x416524
mov dword [esi], ebp
add esi, 4
mov dword [edi + 0x10], esi
jmp 0x416542
cmp ecx, esi
jbe 0x41652d
call fcn.0044cae8
mov eax, dword [edi]
push esi
push eax
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x20]
push ecx
mov eax, edi
call fcn.00403a60
lea edx, [esp + 0x26c]
push edx
call fcn.004025e0
mov byte [esp + 0x7c8], 3
mov dword [esp + 0x274], ebx
mov ebx, 4
push 0x160
mov dword [esp + 0x274], 0xffffffff
mov dword [esp + 0x280], 0xffc0c0c0
mov dword [esp + 0x27c], ebx
call fcn.0044cbec
add esp, 4
mov dword [esp + 0x14], eax
mov byte [esp + 0x7c8], bl
test eax, eax
je 0x4165af
push 0
push eax
lea edx, [esp + 0x274]
xor ecx, ecx
call fcn.00411830
jmp 0x4165b1
xor eax, eax
mov byte [esp + 0x7c8], 3
cmp dword [ebp + 0x38], eax
je 0x4165c1
mov dword [ebp + 0x38], eax
mov edx, dword [edi + 0xc]
mov dword [esp + 0x1c], eax
test edx, edx
jne 0x4165d0
xor ecx, ecx
jmp 0x4165d8
mov ecx, dword [edi + 0x14]
sub ecx, edx
sar ecx, 2
mov esi, dword [edi + 0x10]
mov ebx, esi
sub ebx, edx
sar ebx, 2
cmp ebx, ecx
jae 0x4165f0
mov dword [esi], eax
add esi, 4
mov dword [edi + 0x10], esi
jmp 0x41660e
cmp edx, esi
jbe 0x4165f9
call fcn.0044cae8
mov eax, dword [edi]
push esi
push eax
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x20]
push ecx
mov eax, edi
call fcn.00403a60
push 0x6c
call fcn.0044cbec
add esp, 4
mov dword [esp + 0x14], eax
mov byte [esp + 0x7c8], 5
test eax, eax
je 0x416639
push 5
push eax
mov ecx, 2
call fcn.00414c00
mov esi, eax
jmp 0x41663b
xor esi, esi
mov byte [esp + 0x7c8], 3
mov eax, 0xa
mov ecx, 5
push 3
push esi
mov ebx, ebp
mov dword [esi + 0x24], eax
mov dword [esi + 0x28], ecx
mov dword [esi + 0x2c], eax
mov dword [esi + 0x30], ecx
call fcn.00414d20
mov eax, dword [edi + 0xc]
mov dword [esp + 0x1c], esi
test eax, eax
jne 0x416672
xor ecx, ecx
jmp 0x41667a
mov ecx, dword [edi + 0x14]
sub ecx, eax
sar ecx, 2
mov ebx, dword [edi + 0x10]
mov edx, ebx
sub edx, eax
sar edx, 2
cmp edx, ecx
jae 0x416692
mov dword [ebx], esi
add ebx, 4
mov dword [edi + 0x10], ebx
jmp 0x4166b0
cmp eax, ebx
jbe 0x41669b
call fcn.0044cae8
mov eax, dword [edi]
push ebx
push eax
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x20]
push ecx
mov eax, edi
call fcn.00403a60
lea edx, [esp + 0x37c]
push edx
call fcn.004025e0
mov bl, 6
mov byte [esp + 0x7c8], bl
push 0x160
mov dword [esp + 0x388], 1
mov dword [esp + 0x38c], 4
mov dword [esp + 0x390], 0xffffff
mov dword [esp + 0x384], 0xfff9f9f9
call fcn.0044cbec
add esp, 4
mov dword [esp + 0x14], eax
mov byte [esp + 0x7c8], 7
test eax, eax
je 0x416722
push 0
push eax
lea edx, [esp + 0x384]
xor ecx, ecx
call fcn.00411830
jmp 0x416724
xor eax, eax
mov byte [esp + 0x7c8], bl
mov dword [eax + 0x134], 0xffffffff
mov dword [eax + 0x138], 0xfffffffe
cmp dword [esi + 0x38], eax
je 0x416747
mov dword [esi + 0x38], eax
mov edx, dword [edi + 0xc]
mov dword [esp + 0x1c], eax
test edx, edx
jne 0x416756
xor ecx, ecx
jmp 0x41675e
mov ecx, dword [edi + 0x14]
sub ecx, edx
sar ecx, 2
mov ebx, dword [edi + 0x10]
mov ebp, ebx
sub ebp, edx
sar ebp, 2
cmp ebp, ecx
jae 0x416776
mov dword [ebx], eax
add ebx, 4
mov dword [edi + 0x10], ebx
jmp 0x416794
cmp edx, ebx
jbe 0x41677f
call fcn.0044cae8
mov eax, dword [edi]
push ebx
push eax
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x20]
push ecx
mov eax, edi
call fcn.00403a60
lea edx, [esp + 0x59c]
push edx
call fcn.004025e0
mov byte [esp + 0x7c8], 8
push 0x180
mov dword [esp + 0x5a4], 0xffffff
mov dword [esp + 0x5a0], 0xff666666
mov dword [esp + 0x5b4], 0xe
call fcn.0044cbec
add esp, 4
mov dword [esp + 0x14], eax
mov byte [esp + 0x7c8], 9
test eax, eax
je 0x416802
push 0x477efc
push eax
lea ebx, [esp + 0x5a4]
mov ecx, 4
call fcn.00414600
mov ebp, eax
jmp 0x416804
xor ebp, ebp
push 0x1b
push ebp
mov ebx, esi
mov byte [esp + 0x7d0], 8
call fcn.00414d20
mov eax, dword [edi + 0xc]
mov dword [esp + 0x1c], ebp
test eax, eax
jne 0x416825
xor ecx, ecx
jmp 0x41682d
mov ecx, dword [edi + 0x14]
sub ecx, eax
sar ecx, 2
mov esi, dword [edi + 0x10]
mov edx, esi
sub edx, eax
sar edx, 2
cmp edx, ecx
jae 0x416845
mov dword [esi], ebp
add esi, 4
mov dword [edi + 0x10], esi
jmp 0x416863
cmp eax, esi
jbe 0x41684e
call fcn.0044cae8
mov eax, dword [edi]
push esi
push eax
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x20]
push ecx
mov eax, edi
call fcn.00403a60
push 0x6c
call fcn.0044cbec
add esp, 4
mov dword [esp + 0x14], eax
mov byte [esp + 0x7c8], 0xa
test eax, eax
je 0x416892
push 5
push eax
mov ecx, 1
call fcn.00414c00
mov ebp, eax
mov dword [esp + 0x1c], eax
jmp 0x416898
xor ebp, ebp
mov dword [esp + 0x1c], ebp
mov ebx, dword [esp + 0x30]
mov byte [esp + 0x7c8], 8
mov eax, 0x18
mov ecx, 0x10
push 0x11
push ebp
mov dword [ebp + 0x24], eax
mov dword [ebp + 0x28], ecx
mov dword [ebp + 0x2c], eax
mov dword [ebp + 0x30], ecx
call fcn.00414d20
mov eax, dword [edi + 0xc]
mov dword [esp + 0x20], ebp
test eax, eax
jne 0x4168d1
xor ecx, ecx
jmp 0x4168d9
mov ecx, dword [edi + 0x14]
sub ecx, eax
sar ecx, 2
mov esi, dword [edi + 0x10]
mov edx, esi
sub edx, eax
sar edx, 2
cmp edx, ecx
jae 0x4168f1
mov dword [esi], ebp
add esi, 4
mov dword [edi + 0x10], esi
jmp 0x41690f
cmp eax, esi
jbe 0x4168fa
call fcn.0044cae8
mov eax, dword [edi]
push esi
push eax
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x20]
push ecx
mov eax, edi
call fcn.00403a60
push 0x6c
call fcn.0044cbec
add esp, 4
mov dword [esp + 0x14], eax
mov byte [esp + 0x7c8], 0xb
test eax, eax
je 0x41693c
push 5
push eax
mov ecx, 1
call fcn.00414c00
mov dword [esp + 0x2c], eax
jmp 0x416944
mov dword [esp + 0x2c], 0
mov esi, dword [esp + 0x2c]
push 5
push esi
mov ebx, ebp
mov byte [esp + 0x7d0], 8
call fcn.00414d20
mov eax, dword [edi + 0xc]
mov dword [esp + 0x20], esi
test eax, eax
jne 0x416969
xor ecx, ecx
jmp 0x416971
mov ecx, dword [edi + 0x14]
sub ecx, eax
sar ecx, 2
mov esi, dword [edi + 0x10]
mov edx, esi
sub edx, eax
sar edx, 2
cmp edx, ecx
jae 0x41698d
mov eax, dword [esp + 0x2c]
mov dword [esi], eax
add esi, 4
mov dword [edi + 0x10], esi
jmp 0x4169ab
cmp eax, esi
jbe 0x416996
call fcn.0044cae8
mov eax, dword [edi]
push esi
push eax
lea ecx, [esp + 0x28]
push ecx
lea edx, [esp + 0x20]
push edx
mov eax, edi
call fcn.00403a60
push 0x6c
call fcn.0044cbec
add esp, 4
mov dword [esp + 0x14], eax
mov byte [esp + 0x7c8], 0xc
test eax, eax
je 0x4169da
push 5
push eax
mov ecx, 2
call fcn.00414c00
mov ebp, eax
mov dword [esp + 0x20], eax
jmp 0x4169e0
xor ebp, ebp
mov dword [esp + 0x20], ebp
mov ebx, dword [esp + 0x2c]
push 0x28
push ebp
mov byte [esp + 0x7d0], 8
call fcn.00414d20
mov eax, dword [edi + 0xc]
mov dword [esp + 0x14], ebp
test eax, eax
jne 0x416a03
xor ecx, ecx
jmp 0x416a0b
mov ecx, dword [edi + 0x14]
sub ecx, eax
sar ecx, 2
mov esi, dword [edi + 0x10]
mov edx, esi
sub edx, eax
sar edx, 2
cmp edx, ecx
jae 0x416a23
mov dword [esi], ebp
add esi, 4
mov dword [edi + 0x10], esi
jmp 0x416a41
cmp eax, esi
jbe 0x416a2c
call fcn.0044cae8
mov eax, dword [edi]
push esi
push eax
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x30]
push ecx
mov eax, edi
call fcn.00403a60
push 0x160
call fcn.0044cbec
add esp, 4
mov dword [esp + 0x14], eax
mov byte [esp + 0x7c8], 0xd
test eax, eax
je 0x416a6f
push 1
xor edx, edx
push eax
lea ecx, [edx + 3]
call fcn.00411830
mov esi, eax
jmp 0x416a71
xor esi, esi
mov byte [esp + 0x7c8], 8
mov edx, dword [esp + 0x34]
mov eax, dword [edx + 8]
mov ecx, dword [eax]
mov edx, dword [ecx]
push 0x478d50
push eax
call edx
cmp dword [esi + 0x148], eax
je 0x416a9f
mov dword [esi + 0x148], eax
call fcn.00411f00
push 0x1e
push esi
mov ebx, ebp
call fcn.00414d20
mov eax, dword [edi + 0xc]
mov dword [esp + 0x14], esi
test eax, eax
jne 0x416ab8
xor ecx, ecx
jmp 0x416ac0
mov ecx, dword [edi + 0x14]
sub ecx, eax
sar ecx, 2
mov ebx, dword [edi + 0x10]
mov edx, ebx
sub edx, eax
sar edx, 2
cmp edx, ecx
jae 0x416ad8
mov dword [ebx], esi
add ebx, 4
mov dword [edi + 0x10], ebx
jmp 0x416af6
cmp eax, ebx
jbe 0x416ae1
call fcn.0044cae8
mov eax, dword [edi]
push ebx
push eax
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x30]
push ecx
mov eax, edi
call fcn.00403a60
push 0x20
call fcn.0044cbec
add esp, 4
test eax, eax
je 0x416b32
mov cl, 1
mov byte [eax + 0x1c], cl
mov byte [eax + 0x1d], cl
xor ecx, ecx
mov dword [eax + 4], 0xa
mov dword [eax + 8], 6
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], ecx
mov dword [eax + 0x18], ecx
mov dword [eax], vtable.CSpacerResource.0
mov esi, eax
jmp 0x416b34
xor esi, esi
push 0x10
push esi
mov ebx, ebp
call fcn.00414d20
mov eax, dword [edi + 0xc]
mov dword [esp + 0x14], esi
test eax, eax
jne 0x416b4d
xor ecx, ecx
jmp 0x416b55
mov ecx, dword [edi + 0x14]
sub ecx, eax
sar ecx, 2
mov ebx, dword [edi + 0x10]
mov edx, ebx
sub edx, eax
sar edx, 2
cmp edx, ecx
jae 0x416b6d
mov dword [ebx], esi
add ebx, 4
mov dword [edi + 0x10], ebx
jmp 0x416b8b
cmp eax, ebx
jbe 0x416b76
call fcn.0044cae8
mov eax, dword [edi]
push ebx
push eax
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x30]
push ecx
mov eax, edi
call fcn.00403a60
lea edx, [esp + 0x6ac]
push edx
call fcn.004025e0
mov ebx, 0xe
mov byte [esp + 0x7c8], bl
push 0x180
mov dword [esp + 0x6b0], 0xff1a1a1a
mov dword [esp + 0x6c4], ebx
call fcn.0044cbec
add esp, 4
mov dword [esp + 0x14], eax
mov byte [esp + 0x7c8], 0xf
test eax, eax
je 0x416bf3
push 0x47902c
push eax
lea ebx, [esp + 0x6b4]
mov ecx, 4
call fcn.00414600
mov ebp, eax
mov ebx, 0xe
jmp 0x416bf5
xor ebp, ebp
push 0x12c
mov byte [esp + 0x7cc], bl
mov ebx, dword [esp + 0x24]
push ebp
call fcn.00414d20
mov eax, dword [edi + 0xc]
mov dword [esp + 0x14], ebp
test eax, eax
jne 0x416c1a
xor ecx, ecx
jmp 0x416c22
mov ecx, dword [edi + 0x14]
sub ecx, eax
sar ecx, 2
mov esi, dword [edi + 0x10]
mov edx, esi
sub edx, eax
sar edx, 2
cmp edx, ecx
jae 0x416c3a
mov dword [esi], ebp
add esi, 4
mov dword [edi + 0x10], esi
jmp 0x416c58
cmp eax, esi
jbe 0x416c43
call fcn.0044cae8
mov eax, dword [edi]
push esi
push eax
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x30]
push ecx
mov eax, edi
call fcn.00403a60
push 0x6c
call fcn.0044cbec
add esp, 4
mov dword [esp + 0x14], eax
mov byte [esp + 0x7c8], 0x10
test eax, eax
je 0x416c87
push 5
push eax
mov ecx, 2
call fcn.00414c00
mov ebp, eax
mov dword [esp + 0x20], eax
jmp 0x416c8d
xor ebp, ebp
mov dword [esp + 0x20], ebp
mov ebx, dword [esp + 0x2c]
push 0x3c
push ebp
mov byte [esp + 0x7d0], 0xe
call fcn.00414d20
mov eax, dword [edi + 0xc]
mov dword [esp + 0x14], ebp
test eax, eax
jne 0x416cb0
xor ecx, ecx
jmp 0x416cb8
mov ecx, dword [edi + 0x14]
sub ecx, eax
sar ecx, 2
mov esi, dword [edi + 0x10]
mov edx, esi
sub edx, eax
sar edx, 2
cmp edx, ecx
jae 0x416cd0
mov dword [esi], ebp
add esi, 4
mov dword [edi + 0x10], esi
jmp 0x416cee
cmp eax, esi
jbe 0x416cd9
call fcn.0044cae8
mov eax, dword [edi]
push esi
push eax
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x30]
push ecx
mov eax, edi
call fcn.00403a60
push 0x20
call fcn.0044cbec
add esp, 4
test eax, eax
je 0x416d2a
mov cl, 1
mov byte [eax + 0x1c], cl
mov byte [eax + 0x1d], cl
xor ecx, ecx
mov dword [eax + 4], 0xa
mov dword [eax + 8], 6
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], ecx
mov dword [eax + 0x18], ecx
mov dword [eax], vtable.CSpacerResource.0
mov esi, eax
jmp 0x416d2c
xor esi, esi
push 0x1e
push esi
mov ebx, ebp
call fcn.00414d20
mov eax, dword [edi + 0xc]
mov dword [esp + 0x14], esi
test eax, eax
jne 0x416d45
xor ecx, ecx
jmp 0x416d4d
mov ecx, dword [edi + 0x14]
sub ecx, eax
sar ecx, 2
mov ebx, dword [edi + 0x10]
mov edx, ebx
sub edx, eax
sar edx, 2
cmp edx, ecx
jae 0x416d65
mov dword [ebx], esi
add ebx, 4
mov dword [edi + 0x10], ebx
jmp 0x416d83
cmp eax, ebx
jbe 0x416d6e
call fcn.0044cae8
mov eax, dword [edi]
push ebx
push eax
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x30]
push ecx
mov eax, edi
call fcn.00403a60
push 0x20
call fcn.0044cbec
add esp, 4
test eax, eax
je 0x416dbf
mov cl, 1
mov byte [eax + 0x1c], cl
mov byte [eax + 0x1d], cl
xor ecx, ecx
mov dword [eax + 4], 0xa
mov dword [eax + 8], 6
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], ecx
mov dword [eax + 0x18], ecx
mov dword [eax], vtable.CSpacerResource.0
mov esi, eax
jmp 0x416dc1
xor esi, esi
push 0x10
push esi
mov ebx, ebp
call fcn.00414d20
mov eax, dword [edi + 0xc]
mov dword [esp + 0x14], esi
test eax, eax
jne 0x416dda
xor ecx, ecx
jmp 0x416de2
mov ecx, dword [edi + 0x14]
sub ecx, eax
sar ecx, 2
mov ebx, dword [edi + 0x10]
mov edx, ebx
sub edx, eax
sar edx, 2
cmp edx, ecx
jae 0x416dfa
mov dword [ebx], esi
add ebx, 4
mov dword [edi + 0x10], ebx
jmp 0x416e18
cmp eax, ebx
jbe 0x416e03
call fcn.0044cae8
mov eax, dword [edi]
push ebx
push eax
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x30]
push ecx
mov eax, edi
call fcn.00403a60
lea edx, [esp + 0x48c]
push edx
call fcn.004025e0
mov byte [esp + 0x7c8], 0x11
push 0x180
mov dword [esp + 0x490], 0xff666666
mov dword [esp + 0x4cc], 0
mov dword [esp + 0x4a4], 0xe
call fcn.0044cbec
add esp, 4
mov dword [esp + 0x14], eax
mov byte [esp + 0x7c8], 0x12
test eax, eax
je 0x416e86
push 0x479040
push eax
lea ebx, [esp + 0x494]
mov ecx, 4
call fcn.00414600
mov ebp, eax
jmp 0x416e88
xor ebp, ebp
push 0x12c
mov byte [esp + 0x7cc], 0x11
mov ebx, dword [esp + 0x24]
push ebp
call fcn.00414d20
mov eax, dword [edi + 0xc]
mov dword [esp + 0x14], ebp
test eax, eax
jne 0x416eae
xor ecx, ecx
jmp 0x416eb6
mov ecx, dword [edi + 0x14]
sub ecx, eax
sar ecx, 2
mov esi, dword [edi + 0x10]
mov edx, esi
sub edx, eax
sar edx, 2
cmp edx, ecx
jae 0x416ece
mov dword [esi], ebp
add esi, 4
mov dword [edi + 0x10], esi
jmp 0x416eec
cmp eax, esi
jbe 0x416ed7
call fcn.0044cae8
mov eax, dword [edi]
push esi
push eax
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x30]
push ecx
mov eax, edi
call fcn.00403a60
push 0x6c
call fcn.0044cbec
add esp, 4
mov dword [esp + 0x14], eax
mov byte [esp + 0x7c8], 0x13
test eax, eax
je 0x416f17
push 5
push eax
mov ecx, 2
call fcn.00414c00
mov ebp, eax
jmp 0x416f19
xor ebp, ebp
push 2
mov byte [esp + 0x7cc], 0x11
mov ebx, dword [esp + 0x20]
push ebp
call fcn.00414d20
mov eax, dword [edi + 0xc]
mov dword [esp + 0x14], ebp
test eax, eax
jne 0x416f3c
xor ecx, ecx
jmp 0x416f44
mov ecx, dword [edi + 0x14]
sub ecx, eax
sar ecx, 2
mov esi, dword [edi + 0x10]
mov edx, esi
sub edx, eax
sar edx, 2
cmp edx, ecx
jae 0x416f5c
mov dword [esi], ebp
add esi, 4
mov dword [edi + 0x10], esi
jmp 0x416f7a
cmp eax, esi
jbe 0x416f65
call fcn.0044cae8
mov eax, dword [edi]
push esi
push eax
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x30]
push ecx
mov eax, edi
call fcn.00403a60
push 0x20
call fcn.0044cbec
add esp, 4
test eax, eax
je 0x416fb6
mov cl, 1
mov byte [eax + 0x1c], cl
mov byte [eax + 0x1d], cl
xor ecx, ecx
mov dword [eax + 4], 0xa
mov dword [eax + 8], 6
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], ecx
mov dword [eax + 0x18], ecx
mov dword [eax], vtable.CSpacerResource.0
mov esi, eax
jmp 0x416fb8
xor esi, esi
push 0xf
push esi
mov ebx, ebp
call fcn.00414d20
mov eax, dword [edi + 0xc]
mov dword [esp + 0x14], esi
test eax, eax
jne 0x416fd1
xor ecx, ecx
jmp 0x416fd9
mov ecx, dword [edi + 0x14]
sub ecx, eax
sar ecx, 2
mov ebx, dword [edi + 0x10]
mov edx, ebx
sub edx, eax
sar edx, 2
cmp edx, ecx
jae 0x416ff1
mov dword [ebx], esi
add ebx, 4
mov dword [edi + 0x10], ebx
jmp 0x41700f
cmp eax, ebx
jbe 0x416ffa
call fcn.0044cae8
mov eax, dword [edi]
push ebx
push eax
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x30]
push ecx
mov eax, edi
call fcn.00403a60
lea edx, [esp + 0x4c]
push edx
call fcn.004025e0
mov eax, 0xfff2f2f2
mov bl, 0x14
mov byte [esp + 0x7c8], bl
mov dword [esp + 0x50], eax
mov dword [esp + 0x94], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0xa0], eax
mov eax, 2
mov esi, 1
mov edx, 0xffd8d8d8
mov ecx, 0xff666666
mov dword [esp + 0x58], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xe0], eax
mov eax, 0xe
push 0x1a0
mov dword [esp + 0xdc], edx
mov dword [esp + 0x50], ecx
mov dword [esp + 0x94], 0xff999999
mov dword [esp + 0xd8], ecx
mov dword [esp + 0xe8], edx
mov dword [esp + 0x58], esi
mov dword [esp + 0x9c], esi
mov dword [esp + 0xe0], esi
mov dword [esp + 0x88], esi
mov dword [esp + 0xcc], esi
mov dword [esp + 0x110], esi
mov dword [esp + 0x64], eax
mov dword [esp + 0xa8], eax
mov dword [esp + 0xec], eax
call fcn.0044cbec
add esp, 4
mov dword [esp + 0x14], eax
mov byte [esp + 0x7c8], 0x15
test eax, eax
je 0x4170f8
lea ecx, [esp + 0x4c]
push ecx
push 0x478dd0
push eax
mov ecx, esi
call fcn.00412010
mov esi, eax
jmp 0x4170fa
xor esi, esi
mov byte [esp + 0x7c8], bl
fld qword [0x47b600]
push 6
fstp qword [esi + 0x140]
push esi
mov ebx, ebp
call fcn.00414d20
mov eax, dword [edi + 0xc]
mov dword [esp + 0x14], esi
test eax, eax
jne 0x417126
xor ecx, ecx
jmp 0x41712e
mov ecx, dword [edi + 0x14]
sub ecx, eax
sar ecx, 2
mov ebx, dword [edi + 0x10]
mov edx, ebx
sub edx, eax
sar edx, 2
cmp edx, ecx
jae 0x417146
mov dword [ebx], esi
add ebx, 4
mov dword [edi + 0x10], ebx
jmp 0x417164
cmp eax, ebx
jbe 0x41714f
call fcn.0044cae8
mov eax, dword [edi]
push ebx
push eax
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x30]
push ecx
mov eax, edi
call fcn.00403a60
push 0x20
call fcn.0044cbec
add esp, 4
test eax, eax
je 0x4171a0
mov cl, 1
mov byte [eax + 0x1c], cl
mov byte [eax + 0x1d], cl
xor ecx, ecx
mov dword [eax + 4], 0xa
mov dword [eax + 8], 6
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], ecx
mov dword [eax + 0x18], ecx
mov dword [eax], vtable.CSpacerResource.0
mov esi, eax
jmp 0x4171a2
xor esi, esi
push 1
push esi
mov ebx, ebp
call fcn.00414d20
mov eax, dword [edi + 0xc]
mov dword [esp + 0x14], esi
test eax, eax
jne 0x4171bb
xor ecx, ecx
jmp 0x4171c3
mov ecx, dword [edi + 0x14]
sub ecx, eax
sar ecx, 2
mov ebx, dword [edi + 0x10]
mov edx, ebx
sub edx, eax
sar edx, 2
cmp edx, ecx
jae 0x4171db
mov dword [ebx], esi
add ebx, 4
mov dword [edi + 0x10], ebx
jmp 0x4171f9
cmp eax, ebx
jbe 0x4171e4
call fcn.0044cae8
mov eax, dword [edi]
push ebx
push eax
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x30]
push ecx
mov eax, edi
call fcn.00403a60
lea edx, [esp + 0x15c]
push edx
call fcn.004025e0
or eax, 0xffffffff
mov bl, 0x16
mov byte [esp + 0x7c8], bl
mov dword [esp + 0x15c], eax
mov dword [esp + 0x1a0], eax
mov dword [esp + 0x1e4], eax
mov eax, 1
mov esi, 2
mov dword [esp + 0x194], eax
mov dword [esp + 0x1d8], eax
mov dword [esp + 0x21c], eax
mov dword [esp + 0x198], eax
mov dword [esp + 0x1dc], eax
mov dword [esp + 0x220], eax
mov eax, 0xe
push 0x1a0
mov dword [esp + 0x164], 0xff88dd9b
mov dword [esp + 0x1a8], 0xff12bb37
mov dword [esp + 0x1ec], 0xff0f9f2e
mov dword [esp + 0x16c], esi
mov dword [esp + 0x1b0], esi
mov dword [esp + 0x1f4], esi
mov dword [esp + 0x174], eax
mov dword [esp + 0x1b8], eax
mov dword [esp + 0x1fc], eax
call fcn.0044cbec
add esp, 4
mov dword [esp + 0x14], eax
mov byte [esp + 0x7c8], 0x17
test eax, eax
je 0x4172e1
lea ecx, [esp + 0x15c]
push ecx
push 0x478dd8
push eax
mov ecx, esi
call fcn.00412010
mov esi, eax
jmp 0x4172e3
xor esi, esi
mov byte [esp + 0x7c8], bl
fld qword [0x47b600]
push 6
fstp qword [esi + 0x140]
push esi
mov ebx, ebp
call fcn.00414d20
mov eax, dword [edi + 0xc]
mov dword [esp + 0x14], esi
test eax, eax
jne 0x41730f
xor ecx, ecx
jmp 0x417317
mov ecx, dword [edi + 0x14]
sub ecx, eax
sar ecx, 2
mov ebx, dword [edi + 0x10]
mov edx, ebx
sub edx, eax
sar edx, 2
cmp edx, ecx
jae 0x41732f
mov dword [ebx], esi
add ebx, 4
mov dword [edi + 0x10], ebx
jmp 0x41734d
cmp eax, ebx
jbe 0x417338
call fcn.0044cae8
mov eax, dword [edi]
push ebx
push eax
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x30]
push ecx
mov eax, edi
call fcn.00403a60
mov eax, dword [esp + 0x38]
lea edx, [esp + 0x3c]
push edx
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
mov esi, dword [esp + 0x3c]
mov ecx, dword [esp + 0x30]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [esp + 0x50]
mov dword [eax + 4], esi
mov esi, dword [esp + 0x54]
mov dword [eax + 8], esi
mov esi, dword [esp + 0x58]
mov dword [eax + 0xc], esi
mov eax, dword [edx + 8]
push ecx
call eax
lea esi, [esp + 0x15c]
call fcn.00402660
lea esi, [esp + 0x4c]
call fcn.00402660
lea esi, [esp + 0x48c]
call fcn.00402660
lea esi, [esp + 0x6ac]
call fcn.00402660
lea esi, [esp + 0x59c]
call fcn.00402660
lea esi, [esp + 0x37c]
call fcn.00402660
lea esi, [esp + 0x26c]
call fcn.00402660
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x7c0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x7a8]
xor ecx, esp
call fcn.0044c790
add esp, 0x7b8
ret 8