Function at 0x412c20
Capabilities:
Create thread

Disassembly:
push 0xffffffffffffffff
push 0x4fbf82
mov eax, dword fs:[0]
push eax
sub esp, 0x290
mov eax, dword [0x52f4a8]
xor eax, esp
mov dword [esp + 0x288], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x52f4a8]
xor eax, esp
push eax
lea eax, [esp + 0x2a4]
mov dword fs:[0], eax
mov edi, dword [sym.imp.LibDui.dll_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const]
mov esi, ecx
lea ebp, [esi + 0x30]
push str.mainswitch
mov ecx, ebp
mov dword [esp + 0x1c], esi
call edi
mov ebx, eax
mov ecx, ebx
mov dword [esp + 0x1c], ebx
call dword [sym.imp.LibDui.dll_public:_int___thiscall_DuiLib::CTabLayoutUI::GetCurSel_void_const]
cmp eax, dword [esp + 0x2b4]
je 0x412ca7
mov eax, dword [ebx]
mov ecx, ebx
mov dword [esp + 0x14], eax
call dword [sym.imp.LibDui.dll_public:_int___thiscall_DuiLib::CTabLayoutUI::GetCurSel_void_const]
mov edx, dword [esp + 0x14]
push eax
mov eax, dword [edx + 0xf0]
mov ecx, ebx
call eax
cmp dword [esi + 0x1bf8], 0
jg 0x412cc0
push 1
mov ecx, esi
call fcn.00412950
xor eax, eax
jmp 0x413770
mov eax, dword [esp + 0x2b4]
cmp eax, 1
jne 0x412cf6
sub esp, 0x84
mov ecx, esp
mov dword [esp + 0x98], esp
push 0xffffffffffffffff
push str.homeOptBuyVip
call dword [sym.imp.LibDui.dll_public:_void___thiscall_DuiLib::CDuiString::constructor_wchar_t_const___int_]
mov edi, esi
call fcn.00415540
push 0
jmp 0x41375f
cmp eax, 2
jne 0x412d25
sub esp, 0x84
mov ecx, esp
mov dword [esp + 0x98], esp
push 0xffffffffffffffff
push str.homeOptMyUc
call dword [sym.imp.LibDui.dll_public:_void___thiscall_DuiLib::CDuiString::constructor_wchar_t_const___int_]
mov edi, esi
call fcn.00415540
push 0
jmp 0x41375f
cmp eax, 0x14
jne 0x412d65
sub esp, 0x84
mov ecx, esp
mov dword [esp + 0x98], esp
push 0xffffffffffffffff
push str.homeOptTg
call dword [sym.imp.LibDui.dll_public:_void___thiscall_DuiLib::CDuiString::constructor_wchar_t_const___int_]
mov edi, esi
call fcn.00415540
mov edx, dword [ebx]
mov eax, dword [edx + 0x200]
push 0
mov ecx, ebx
call eax
call fcn.00446ab0
jmp 0x41376b
cmp eax, 8
jne 0x413139
lea ecx, [esp + 0x214]
call dword [sym.imp.LibDui.dll_public:_void___thiscall_DuiLib::CDuiString::constructor_void_]
mov dword [esp + 0x2ac], 0
cmp dword [esi + 0x1d2c], 0x10
jb 0x412d97
mov esi, dword [esi + 0x1d18]
jmp 0x412d9d
add esi, 0x1d18
push esi
lea ebx, [esp + 0x28]
call fcn.0046b220
add esp, 4
mov esi, eax
mov eax, dword [esp + 0x18]
mov byte [esp + 0x2ac], 1
cmp dword [eax + 0x1eac], 0x10
jb 0x412dc9
mov eax, dword [eax + 0x1e98]
jmp 0x412dce
add eax, 0x1e98
push eax
lea ebx, [esp + 0x4c]
call fcn.0046b220
add esp, 4
mov edx, 8
mov byte [esp + 0x2ac], 2
cmp dword [esi + 0x1c], edx
jb 0x412df2
mov ecx, dword [esi + 8]
jmp 0x412df5
lea ecx, [esi + 8]
cmp dword [eax + 0x1c], edx
jb 0x412dff
mov eax, dword [eax + 8]
jmp 0x412e02
add eax, 8
push ecx
push eax
lea ecx, [esp + 0x21c]
push str._s_s
push ecx
call dword [sym.imp.LibDui.dll_public:_int___cdecl_DuiLib::CDuiString::Format_wchar_t_const__]
add esp, 0x10
lea esi, [esp + 0x48]
mov byte [esp + 0x2ac], 1
call fcn.00401810
lea esi, [esp + 0x24]
mov byte [esp + 0x2ac], 0
call fcn.00401810
push str.myQrcodeUrl
mov ecx, ebp
call dword [sym.imp.LibDui.dll_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const]
mov ebx, eax
mov esi, dword [ebx]
lea ecx, [esp + 0x214]
call dword [sym.imp.LibDui.dll_public:_wchar_t_const____thiscall_DuiLib::CDuiString::operator_wchar_t_const__void_const]
mov edx, dword [esi + 0x2c]
push eax
mov ecx, ebx
call edx
lea esi, [esp + 0x170]
call fcn.0040a230
mov ecx, eax
mov byte [esp + 0x2ac], 3
call dword [sym.imp.LibDui.dll_public:_wchar_t_const____thiscall_DuiLib::CDuiString::GetData_void_const]
lea ecx, [esp + 0x1f4]
push ecx
mov edi, eax
call fcn.00406530
mov byte [esp + 0x2ac], 5
mov edi, dword [sym.imp.LibDui.dll_public:_void___thiscall_DuiLib::CDuiString::destructor_void_]
mov ecx, esi
call edi
lea edx, [esp + 0x1f4]
push edx
mov esi, str.myQrcodePic.bmp
call fcn.004221a0
cmp dword [esp + 0x210], 8
mov eax, dword [esp + 0x1fc]
jae 0x412ec9
lea eax, [esp + 0x1fc]
push eax
lea ecx, [esp + 0x4c]
call fcn.0046b590
add esp, 4
mov esi, eax
lea ecx, [esp + 0x214]
mov byte [esp + 0x2ac], 6
call dword [sym.imp.LibDui.dll_public:_wchar_t_const____thiscall_DuiLib::CDuiString::operator_wchar_t_const__void_const]
push eax
lea ecx, [esp + 0x28]
call fcn.0046b590
add esp, 4
mov edx, 0x10
mov byte [esp + 0x2ac], 7
cmp dword [esi + 0x1c], edx
jb 0x412f11
mov ecx, dword [esi + 8]
jmp 0x412f14
lea ecx, [esi + 8]
cmp dword [eax + 0x1c], edx
jb 0x412f1e
mov eax, dword [eax + 8]
jmp 0x412f21
add eax, 8
push ecx
call fcn.0046baa0
add esp, 4
lea ecx, [esp + 0x24]
mov byte [esp + 0x2ac], 6
call fcn.00401740
lea ecx, [esp + 0x48]
mov byte [esp + 0x2ac], 5
call fcn.00401740
push str.myQrcodePic
mov ecx, ebp
call dword [sym.imp.LibDui.dll_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const]
lea esi, [esp + 0x68]
mov dword [esp + 0x14], eax
call fcn.0040a230
push str.myQrcodePic.bmp
lea ecx, [esp + 0xf0]
push ecx
mov ecx, eax
mov byte [esp + 0x2b4], 8
call dword [sym.imp.LibDui.dll_public:_class_DuiLib::CDuiString___thiscall_DuiLib::CDuiString::operator_wchar_t_const__]
mov ecx, eax
mov byte [esp + 0x2ac], 9
call dword [sym.imp.LibDui.dll_public:_wchar_t_const____thiscall_DuiLib::CDuiString::operator_wchar_t_const__void_const]
mov ecx, dword [esp + 0x14]
push eax
call dword [sym.imp.LibDui.dll_public:_void___thiscall_DuiLib::CControlUI::SetBkImage_wchar_t_const__]
lea ecx, [esp + 0xec]
mov byte [esp + 0x2ac], 8
call edi
mov ecx, esi
mov byte [esp + 0x2ac], 5
call edi
lea esi, [esp + 0xec]
call fcn.0040a230
push str.myQrcodePic.bmp
lea edx, [esp + 0x6c]
push edx
mov ecx, eax
mov byte [esp + 0x2b4], 0xa
call dword [sym.imp.LibDui.dll_public:_class_DuiLib::CDuiString___thiscall_DuiLib::CDuiString::operator_wchar_t_const__]
mov byte [esp + 0x2ac], 0xb
mov esi, dword [ebx]
mov ecx, eax
call dword [sym.imp.LibDui.dll_public:_wchar_t_const____thiscall_DuiLib::CDuiString::operator_wchar_t_const__void_const]
push eax
mov eax, dword [esi + 0xe8]
mov ecx, ebx
call eax
lea ecx, [esp + 0x68]
mov byte [esp + 0x2ac], 0xa
call edi
lea ecx, [esp + 0xec]
mov byte [esp + 0x2ac], 5
call edi
push str.share_groupName
mov ecx, ebp
call dword [sym.imp.LibDui.dll_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const]
mov esi, eax
mov eax, dword [esp + 0x18]
cmp dword [eax + 0x1c60], 0x10
jb 0x413041
mov eax, dword [eax + 0x1c4c]
jmp 0x413046
add eax, 0x1c4c
push eax
lea ebx, [esp + 0x28]
call fcn.0046b220
add esp, 4
mov byte [esp + 0x2ac], 0xc
cmp dword [eax + 0x1c], 8
jb 0x413066
mov eax, dword [eax + 8]
jmp 0x413069
add eax, 8
mov edx, dword [esi]
push eax
mov eax, dword [edx + 0x2c]
mov ecx, esi
call eax
lea esi, [esp + 0x24]
mov byte [esp + 0x2ac], 5
call fcn.00401810
push str.share_endTime
mov ecx, ebp
call dword [sym.imp.LibDui.dll_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const]
mov ebp, eax
mov eax, dword [esp + 0x18]
cmp dword [eax + 0x1c38], 0x10
jb 0x4130a8
mov eax, dword [eax + 0x1c24]
jmp 0x4130ad
add eax, 0x1c24
push eax
lea ebx, [esp + 0x28]
call fcn.0046b220
add esp, 4
mov byte [esp + 0x2ac], 0xd
cmp dword [eax + 0x1c], 8
jb 0x4130cd
mov eax, dword [eax + 8]
jmp 0x4130d0
add eax, 8
push eax
lea ecx, [esp + 0x218]
push 0x50fd5c
push ecx
call dword [sym.imp.LibDui.dll_public:_int___cdecl_DuiLib::CDuiString::Format_wchar_t_const__]
add esp, 0xc
lea esi, [esp + 0x24]
mov byte [esp + 0x2ac], 5
call fcn.00401810
lea edx, [esp + 0x214]
push edx
call fcn.004350d0
mov esi, dword [ebp]
add esp, 4
lea ecx, [esp + 0x214]
call dword [sym.imp.LibDui.dll_public:_wchar_t_const____thiscall_DuiLib::CDuiString::operator_wchar_t_const__void_const]
push eax
mov eax, dword [esi + 0x2c]
mov ecx, ebp
call eax
lea esi, [esp + 0x1f4]
mov byte [esp + 0x2ac], 0
call fcn.00401810
jmp 0x413245
cmp eax, 0xe
jne 0x413148
call fcn.00446e90
jmp 0x41374b
cmp eax, 0xf
je 0x413746
cmp eax, 0x10
je 0x413746
cmp eax, 0x11
jne 0x413169
call fcn.00446f50
jmp 0x41374b
cmp eax, 0x12
jne 0x413178
call fcn.00446fb0
jmp 0x41374b
cmp eax, 9
jne 0x413187
call fcn.00446ab0
jmp 0x41374b
cmp eax, 0xa
jne 0x413262
push str.yuyanlist
mov ecx, ebp
call dword [sym.imp.LibDui.dll_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const]
lea ecx, [esp + 0x214]
mov esi, eax
call dword [sym.imp.LibDui.dll_public:_void___thiscall_DuiLib::CDuiString::constructor_void_]
push str.lan_id
mov ebx, 0x50e924
lea edi, [esp + 0x6c]
mov dword [esp + 0x2b0], 0xe
call fcn.004353c0
add esp, 4
push eax
lea ecx, [esp + 0x218]
mov byte [esp + 0x2b0], 0xf
call dword [sym.imp.LibDui.dll_public:_class_DuiLib::CDuiString_const____thiscall_DuiLib::CDuiString::operator_class_DuiLib::CDuiString_const__]
mov byte [esp + 0x2ac], 0xe
mov ecx, edi
mov edi, dword [sym.imp.LibDui.dll_public:_void___thiscall_DuiLib::CDuiString::destructor_void_]
call edi
lea ecx, [esp + 0x214]
call dword [sym.imp.LibDui.dll_public:_wchar_t_const____thiscall_DuiLib::CDuiString::GetData_void_const]
push eax
lea ecx, [esp + 0x28]
call fcn.0046b590
add esp, 4
cmp dword [eax + 0x1c], 0x10
jb 0x41321a
mov eax, dword [eax + 8]
jmp 0x41321d
add eax, 8
push eax
call fcn.0047ec80
add esp, 4
lea ecx, [esp + 0x24]
mov ebx, eax
call fcn.00401740
mov edx, dword [esi + 0x6c0]
mov eax, dword [edx + 0xc]
lea ecx, [esi + 0x6c0]
push 0
push ebx
call eax
lea ecx, [esp + 0x214]
mov dword [esp + 0x2ac], 0xffffffff
call edi
mov ebx, dword [esp + 0x1c]
jmp 0x41374b
cmp eax, 0xb
jne 0x413425
push str.desk_webBtn
mov ecx, ebp
call edi
cmp dword [esi + 0x1e6c], 0x10
mov edi, eax
jb 0x413287
mov esi, dword [esi + 0x1e58]
jmp 0x41328d
add esi, 0x1e58
lea ecx, [esp + 0x24]
push ecx
mov ebx, esi
call fcn.0046b730
add esp, 4
mov ebx, 8
mov dword [esp + 0x2ac], 0x10
cmp dword [eax + 0x1c], ebx
jb 0x4132b6
mov eax, dword [eax + 8]
jmp 0x4132b9
add eax, 8
mov edx, dword [edi]
push eax
mov eax, dword [edx + 0x2c]
mov ecx, edi
call eax
lea esi, [esp + 0x24]
mov dword [esp + 0x2ac], 0xffffffff
call fcn.00401810
lea esi, [esp + 0x68]
call fcn.0040a230
mov ecx, eax
mov dword [esp + 0x2ac], 0x11
call dword [sym.imp.LibDui.dll_public:_wchar_t_const____thiscall_DuiLib::CDuiString::GetData_void_const]
lea ecx, [esp + 0x1f4]
push ecx
mov edi, eax
call fcn.00406530
mov byte [esp + 0x2ac], 0x13
mov edi, dword [sym.imp.LibDui.dll_public:_void___thiscall_DuiLib::CDuiString::destructor_void_]
mov ecx, esi
call edi
lea edx, [esp + 0x1f4]
push edx
mov esi, str.desk_qrcode.bmp
call fcn.004221a0
mov eax, dword [esp + 0x1fc]
cmp dword [esp + 0x210], ebx
jae 0x41333d
lea eax, [esp + 0x1fc]
push eax
lea ecx, [esp + 0x28]
call fcn.0046b590
add esp, 4
mov edx, 0x10
mov byte [esp + 0x2ac], 0x14
cmp dword [eax + 0x1c], edx
jb 0x413361
mov ecx, dword [eax + 8]
jmp 0x413364
lea ecx, [eax + 8]
mov eax, dword [esp + 0x18]
cmp dword [eax + 0x1e6c], edx
jb 0x413378
mov eax, dword [eax + 0x1e58]
jmp 0x41337d
add eax, 0x1e58
push ecx
call fcn.0046baa0
add esp, 4
lea ecx, [esp + 0x24]
mov byte [esp + 0x2ac], 0x13
call fcn.00401740
push str.desk_qrcode
mov ecx, ebp
call dword [sym.imp.LibDui.dll_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const]
lea esi, [esp + 0x170]
mov ebp, eax
call fcn.0040a230
push str.desk_qrcode.bmp
lea ecx, [esp + 0xf0]
push ecx
mov bl, 0x15
mov ecx, eax
mov byte [esp + 0x2b4], bl
call dword [sym.imp.LibDui.dll_public:_class_DuiLib::CDuiString___thiscall_DuiLib::CDuiString::operator_wchar_t_const__]
mov ecx, eax
mov byte [esp + 0x2ac], 0x16
call dword [sym.imp.LibDui.dll_public:_wchar_t_const____thiscall_DuiLib::CDuiString::operator_wchar_t_const__void_const]
push eax
mov ecx, ebp
call dword [sym.imp.LibDui.dll_public:_void___thiscall_DuiLib::CControlUI::SetBkImage_wchar_t_const__]
lea ecx, [esp + 0xec]
mov byte [esp + 0x2ac], bl
call edi
mov ecx, esi
mov byte [esp + 0x2ac], 0x13
call edi
lea esi, [esp + 0x1f4]
mov dword [esp + 0x2ac], 0xffffffff
call fcn.00401810
mov ebx, dword [esp + 0x1c]
jmp 0x41374b
cmp eax, 0xc
jne 0x413449
push str.gonggaolist
mov ecx, ebp
call edi
mov edx, dword [eax + 0x550]
lea ecx, [eax + 0x550]
mov eax, dword [edx + 0x20]
call eax
jmp 0x41374b
cmp eax, 0x1d
jne 0x4134d8
mov ecx, dword [esi + 0x1c64]
cmp ecx, 2
jg 0x41348d
mov eax, esi
call fcn.004137a0
test eax, eax
jne 0x413484
mov ecx, dword [esi + 0x204c]
mov dword [esi + 0x2178], ecx
push 0x1e
mov ecx, esi
call fcn.00412c20
xor eax, eax
jmp 0x413770
cmp ecx, 2
jle 0x41374b
mov eax, esi
call fcn.004137a0
test eax, eax
jne 0x41374b
push str._vN_kT
push 0x50fdd8
push eax
push 0x50fde4
mov eax, esi
call fcn.0040ca70
cmp eax, 1
jne 0x41374b
mov edx, dword [esi + 0x204c]
push 0x1e
mov ecx, esi
mov dword [esi + 0x2178], edx
call fcn.00412c20
xor eax, eax
jmp 0x413770
cmp eax, 0x15
jne 0x413500
lea eax, [esp + 0x44]
push eax
push 0
push esi
push 0x436d20
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x41374b
cmp eax, 0x16
jne 0x413555
push str.Exchange_submitpage
mov ecx, ebp
call edi
push str.Exchange_querypage
mov ecx, ebp
mov esi, eax
call edi
mov edx, dword [esi]
mov ebx, eax
mov eax, dword [edx + 0xf8]
push 0
mov ecx, esi
call eax
mov edx, dword [ebx]
mov eax, dword [edx + 0xf8]
push 1
mov ecx, ebx
call eax
push str.BtnExchange
mov ecx, ebp
call edi
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x11c]
call eax
mov ebx, dword [esp + 0x1c]
jmp 0x41374b
cmp eax, 0x17
jne 0x413561
push str.Btnchangepwd
jmp 0x413577
cmp eax, 0x18
jne 0x41356d
push str.Btnsetemailpwd
jmp 0x413577
cmp eax, 0x19
jne 0x41358c
push str.BtnReward
mov ecx, ebp
call edi
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x11c]
call eax
jmp 0x41374b
cmp eax, 0x1b
jne 0x4135da
push str.OptOrderStatus0
mov ecx, ebp
call edi
push str.OptOrderStatus1
mov ecx, ebp
mov dword [esp + 0x18], eax
call edi
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov esi, eax
mov eax, dword [edx + 0x1b0]
push 0
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x1b0]
push 0
mov ecx, esi
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x1b0]
push 1
mov ecx, esi
call eax
jmp 0x41374b
cmp eax, 0x1c
je 0x41374b
cmp eax, 0x1e
jne 0x413725
push str.backTitleUc
mov ecx, ebp
call edi
push str.bd_pwd
mov ecx, ebp
mov dword [esp + 0x24], eax
call edi
push str.bd_repwd
mov ecx, ebp
mov ebx, eax
call edi
push str.bd_UserNames
mov ecx, ebp
mov dword [esp + 0x18], eax
call edi
push str.bd_tips
mov ecx, ebp
mov dword [esp + 0x1c], eax
call edi
mov edx, dword [ebx]
mov edi, eax
mov eax, dword [edx + 0x2c]
push 0x50d618
mov ecx, ebx
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov eax, dword [edx + 0x2c]
push 0x50d618
call eax
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx]
mov eax, dword [edx + 0x2c]
push 0x50d618
call eax
cmp dword [esi + 0x2178], 0
jne 0x413684
mov ebp, dword [esp + 0x20]
mov edx, dword [ebp]
mov eax, dword [edx + 0x2c]
push 0x50febc
mov ecx, ebp
call eax
mov ecx, dword [esp + 0x18]
push 0x50facc
call dword [sym.imp.LibDui.dll_public:_void___thiscall_DuiLib::CEditUI::SetTipValue_wchar_t_const__]
jmp 0x4136a7
mov ecx, dword [esp + 0x20]
mov edx, dword [ecx]
mov eax, dword [edx + 0x2c]
push 0x50fec8
call eax
mov ecx, dword [esp + 0x18]
push str.Kb:g
call dword [sym.imp.LibDui.dll_public:_void___thiscall_DuiLib::CEditUI::SetTipValue_wchar_t_const__]
mov ebp, dword [esp + 0x20]
mov eax, esi
call fcn.004137a0
test eax, eax
jne 0x4136f3
mov edx, dword [ebp]
mov eax, dword [edx + 0x2c]
push str._u7b
mov ecx, ebp
call eax
mov edx, dword [ebx]
mov eax, dword [edx + 0xf8]
push 1
mov ecx, ebx
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov eax, dword [edx + 0xf8]
push 1
call eax
mov edx, dword [edi]
mov eax, dword [edx + 0xf8]
push 1
mov ecx, edi
call eax
mov ebx, dword [esp + 0x1c]
jmp 0x41374b
mov edx, dword [ebx]
mov eax, dword [edx + 0xf8]
push 0
mov ecx, ebx
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov eax, dword [edx + 0xf8]
push 0
call eax
mov edx, dword [edi]
mov eax, dword [edx + 0xf8]
push 0
mov ecx, edi
call eax
mov ebx, dword [esp + 0x1c]
jmp 0x41374b
cmp eax, 3
jne 0x413733
mov edi, esi
call fcn.00447040
jmp 0x41374b
cmp eax, 0x1f
je 0x41374b
cmp eax, 5
jne 0x41374b
mov ecx, esi
call fcn.00412290
jmp 0x41374b
call fcn.00446ef0
mov ecx, ebx
call dword [sym.imp.LibDui.dll_public:_int___thiscall_DuiLib::CTabLayoutUI::GetCurSel_void_const]
mov ecx, dword [esp + 0x2b4]
cmp eax, ecx
je 0x41376b
push ecx
mov edx, dword [ebx]
mov eax, dword [edx + 0x200]
mov ecx, ebx
call eax
mov eax, 1
mov ecx, dword [esp + 0x2a4]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x288]
xor ecx, esp
call fcn.00476680
add esp, 0x29c
ret 4