Function at 0x40c570
Capabilities:
Check for peb ntglobalflag flag
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x6036e0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x70
push ebx
push ebp
push esi
push edi
mov esi, ecx
mov eax, dword [0x69cfe8]
xor ebx, ebx
mov ebp, 1
mov dword [esp + 0x88], ebx
mov dword [esp + 0x10], ebp
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
lea ecx, [esp + 0x34]
mov byte [esp + 0x88], 2
call fcn.0040e3b0
push 0xa
lea ecx, [esp + 0x68]
mov byte [esp + 0x8c], 3
call fcn.0040e5a0
push ebx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 4
mov dword [esp + 0x2c], vtable.CMarkup.0
call fcn.00427e00
mov eax, dword [esp + 0x90]
lea ecx, [esp + 0x28]
push eax
mov byte [esp + 0x8c], 5
call fcn.00427e00
test al, al
je 0x40dc36
push str.IR_Button
lea ecx, [esp + 0x2c]
call fcn.00428200
test al, al
je 0x40dc2f
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x48]
push ebx
push ecx
push edx
lea ecx, [esp + 0x34]
call fcn.0040ea70
push str.Version
lea ecx, [esp + 0x2c]
call fcn.00428260
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x48]
push ebx
push eax
push ecx
lea ecx, [esp + 0x34]
call fcn.0040ea70
push str.Type
lea ecx, [esp + 0x2c]
call fcn.00428260
test al, al
je 0x40c68f
lea edx, [esp + 0x14]
lea ecx, [esp + 0x28]
push edx
call fcn.0040ea50
mov eax, dword [eax]
push eax
call fcn.005cf40e
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esi + 4], eax
call fcn.005eb9e1
push str.Info
lea ecx, [esp + 0x2c]
call fcn.00428260
test al, al
je 0x40c92d
lea ecx, [esp + 0x28]
call fcn.00428510
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x48]
push ebx
push eax
push ecx
lea ecx, [esp + 0x34]
call fcn.0040ea70
push str.Name
lea ecx, [esp + 0x2c]
call fcn.00428260
test al, al
je 0x40c704
lea edx, [esp + 0x14]
lea ecx, [esp + 0x28]
push edx
call fcn.0040ea50
push eax
lea ecx, [esi + 8]
mov byte [esp + 0x8c], 6
call fcn.005ebb1a
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call fcn.005eb9e1
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x48]
push ebx
push eax
push ecx
lea ecx, [esp + 0x34]
call fcn.0040ea70
push str.Desc
lea ecx, [esp + 0x2c]
call fcn.00428260
test al, al
je 0x40c75a
lea edx, [esp + 0x14]
lea ecx, [esp + 0x28]
push edx
call fcn.0040ea50
push eax
lea ecx, [esi + 0xc]
mov byte [esp + 0x8c], 7
call fcn.005ebb1a
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call fcn.005eb9e1
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x48]
push ebx
push eax
push ecx
lea ecx, [esp + 0x34]
call fcn.0040ea70
push 0x674648
lea ecx, [esp + 0x2c]
call fcn.00428260
test al, al
je 0x40c7b0
lea edx, [esp + 0x14]
lea ecx, [esp + 0x28]
push edx
call fcn.0040ea50
push eax
lea ecx, [esi + 0x10]
mov byte [esp + 0x8c], 8
call fcn.005ebb1a
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call fcn.005eb9e1
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push 0x67463c
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00428260
test al, al
je 0x40c80d
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0040ea50
push eax
lea ecx, [esi + 0x14]
mov byte [esp + 0x8c], 9
call fcn.005ebb1a
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call fcn.005eb9e1
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x674638
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428260
test al, al
je 0x40c86a
lea eax, [esp + 0x14]
lea ecx, [esp + 0x28]
push eax
call fcn.0040ea50
push eax
lea ecx, [esi + 0x18]
mov byte [esp + 0x8c], 0xa
call fcn.005ebb1a
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call fcn.005eb9e1
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push str.Email
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00428260
test al, al
je 0x40c8c7
lea edx, [esp + 0x14]
lea ecx, [esp + 0x28]
push edx
call fcn.0040ea50
push eax
lea ecx, [esi + 0x1c]
mov byte [esp + 0x8c], 0xb
call fcn.005ebb1a
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call fcn.005eb9e1
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push str.Other
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00428260
test al, al
je 0x40c924
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0040ea50
push eax
lea ecx, [esi + 0x20]
mov byte [esp + 0x8c], 0xc
call fcn.005ebb1a
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call fcn.005eb9e1
lea ecx, [esp + 0x28]
call fcn.00428550
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push str.HitThreshold
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428260
test al, al
je 0x40c97f
lea eax, [esp + 0x14]
lea ecx, [esp + 0x28]
push eax
call fcn.0040ea50
mov eax, dword [eax]
push eax
call fcn.005cf40e
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esi + 0x24], eax
call fcn.005eb9e1
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push str.Caption
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00428260
test al, al
je 0x40cd4f
lea ecx, [esp + 0x28]
call fcn.00428510
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push str.Text
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428260
test al, al
je 0x40ca16
lea eax, [esp + 0x14]
lea ecx, [esp + 0x28]
push eax
call fcn.0040ea50
push eax
lea ecx, [esi + 0x28]
mov byte [esp + 0x8c], 0xd
call fcn.005ebb1a
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call fcn.005eb9e1
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push str.Font
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00428260
test al, al
je 0x40cca2
lea ecx, [esp + 0x28]
call fcn.00428510
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push str.Face
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428260
test al, al
je 0x40caad
lea eax, [esp + 0x14]
lea ecx, [esp + 0x28]
push eax
call fcn.0040ea50
push eax
lea ecx, [esi + 0x2c]
mov byte [esp + 0x8c], 0xe
call fcn.005ebb1a
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call fcn.005eb9e1
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push str.CharSet
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00428260
test al, al
je 0x40caff
lea edx, [esp + 0x14]
lea ecx, [esp + 0x28]
push edx
call fcn.0040ea50
mov eax, dword [eax]
push eax
call fcn.005cf40e
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esi + 0x30], eax
call fcn.005eb9e1
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push str.Size
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00428260
test al, al
je 0x40cb51
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0040ea50
mov eax, dword [eax]
push eax
call fcn.005cf40e
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esi + 0x34], eax
call fcn.005eb9e1
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push str.Bold
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428260
test al, al
je 0x40cba3
lea eax, [esp + 0x14]
lea ecx, [esp + 0x28]
push eax
call fcn.0040ea50
mov eax, dword [eax]
push eax
call fcn.005cf40e
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esi + 0x38], eax
call fcn.005eb9e1
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push str.Italic
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00428260
test al, al
je 0x40cbf5
lea edx, [esp + 0x14]
lea ecx, [esp + 0x28]
push edx
call fcn.0040ea50
mov eax, dword [eax]
push eax
call fcn.005cf40e
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esi + 0x3c], eax
call fcn.005eb9e1
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push str.Underline
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00428260
test al, al
je 0x40cc47
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0040ea50
mov eax, dword [eax]
push eax
call fcn.005cf40e
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esi + 0x40], eax
call fcn.005eb9e1
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push str.Strikeout
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428260
test al, al
je 0x40cc99
lea eax, [esp + 0x14]
lea ecx, [esp + 0x28]
push eax
call fcn.0040ea50
mov eax, dword [eax]
push eax
call fcn.005cf40e
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esi + 0x44], eax
call fcn.005eb9e1
lea ecx, [esp + 0x28]
call fcn.00428550
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push str.CenterX
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00428260
test al, al
je 0x40ccf4
lea edx, [esp + 0x14]
lea ecx, [esp + 0x28]
push edx
call fcn.0040ea50
mov eax, dword [eax]
push eax
call fcn.005cf40e
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esi + 0x48], eax
call fcn.005eb9e1
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push str.CenterY
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00428260
test al, al
je 0x40cd46
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0040ea50
mov eax, dword [eax]
push eax
call fcn.005cf40e
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esi + 0x4c], eax
call fcn.005eb9e1
lea ecx, [esp + 0x28]
call fcn.00428550
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push 0x6745ac
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428260
test al, al
je 0x40d57b
lea ecx, [esp + 0x28]
call fcn.00428510
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push str.Normal
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00428260
test al, al
je 0x40cfcc
lea ecx, [esp + 0x28]
call fcn.00428510
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push str.Image
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00428260
test al, al
je 0x40ce22
lea edx, [esp + 0x14]
lea ecx, [esp + 0x28]
push edx
call fcn.0040ea50
push eax
lea ecx, [esi + 0x50]
mov byte [esp + 0x8c], 0xf
call fcn.005ebb1a
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call fcn.005eb9e1
jmp 0x40ce38
push str.Failed_to_find__UpNormalImage__XML_tag.
lea ecx, [esi + 0xe0]
call fcn.005ebb6a
xor ebp, ebp
mov dword [esp + 0x10], ebp
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push str.FontColor
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00428260
test al, al
je 0x40cf1d
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0040ea50
mov edi, dword [eax]
lea edx, [esp + 0x20]
push edx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 0x10
call fcn.0040ea50
mov ebp, dword [eax]
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 0x11
call fcn.0040ea50
mov ecx, dword [eax]
push 0x10
push ebx
push ebp
mov dword [esp + 0x24], ecx
call fcn.005d0035
xor ecx, ecx
xor edx, edx
mov cl, ah
push 0x10
mov dh, cl
push ebx
push edi
mov ebx, edx
call fcn.005d0035
push 0x10
shr eax, 0x10
mov bl, al
mov eax, dword [esp + 0x34]
push 0
push eax
call fcn.005d0035
and eax, 0xff
add esp, 0x24
shl eax, 0x10
or ebx, eax
lea ecx, [esp + 0x1c]
mov dword [esi + 0x54], ebx
call fcn.005eb9e1
lea ecx, [esp + 0x20]
mov byte [esp + 0x88], 0x10
call fcn.005eb9e1
lea ecx, [esp + 0x24]
mov byte [esp + 0x88], 5
call fcn.005eb9e1
mov ebp, dword [esp + 0x10]
xor ebx, ebx
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push str.DeltaX
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00428260
test al, al
je 0x40cf6f
lea edx, [esp + 0x24]
lea ecx, [esp + 0x28]
push edx
call fcn.0040ea50
mov eax, dword [eax]
push eax
call fcn.005cf40e
add esp, 4
lea ecx, [esp + 0x24]
mov dword [esi + 0x58], eax
call fcn.005eb9e1
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push str.DeltaY
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00428260
test al, al
je 0x40cfc1
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0040ea50
mov eax, dword [eax]
push eax
call fcn.005cf40e
add esp, 4
lea ecx, [esp + 0x24]
mov dword [esi + 0x5c], eax
call fcn.005eb9e1
lea ecx, [esp + 0x28]
call fcn.00428550
jmp 0x40cfe2
push str.Failed_to_find__UpNormal__XML_tag.
lea ecx, [esi + 0xe0]
call fcn.005ebb6a
xor ebp, ebp
mov dword [esp + 0x10], ebp
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push str.Highlight
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428260
test al, al
je 0x40d225
lea ecx, [esp + 0x28]
call fcn.00428510
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push str.Image
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00428260
test al, al
je 0x40d07b
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0040ea50
push eax
lea ecx, [esi + 0x60]
mov byte [esp + 0x8c], 0x12
call fcn.005ebb1a
lea ecx, [esp + 0x24]
mov byte [esp + 0x88], 5
call fcn.005eb9e1
jmp 0x40d091
push str.Failed_to_find__UpHighlightImage__XML_tag.
lea ecx, [esi + 0xe0]
call fcn.005ebb6a
xor ebp, ebp
mov dword [esp + 0x10], ebp
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push str.FontColor
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428260
test al, al
je 0x40d176
lea eax, [esp + 0x14]
lea ecx, [esp + 0x28]
push eax
call fcn.0040ea50
mov edi, dword [eax]
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 0x13
call fcn.0040ea50
mov ebp, dword [eax]
lea edx, [esp + 0x1c]
push edx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 0x14
call fcn.0040ea50
mov eax, dword [eax]
push 0x10
push ebx
push ebp
mov dword [esp + 0x2c], eax
call fcn.005d0035
xor ecx, ecx
xor edx, edx
mov cl, ah
push 0x10
mov dh, cl
push ebx
push edi
mov ebx, edx
call fcn.005d0035
mov edx, dword [esp + 0x38]
push 0x10
push 0
shr eax, 0x10
push edx
mov bl, al
call fcn.005d0035
and eax, 0xff
add esp, 0x24
shl eax, 0x10
or ebx, eax
lea ecx, [esp + 0x1c]
mov dword [esi + 0x64], ebx
call fcn.005eb9e1
lea ecx, [esp + 0x18]
mov byte [esp + 0x88], 0x13
call fcn.005eb9e1
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call fcn.005eb9e1
mov ebp, dword [esp + 0x10]
xor ebx, ebx
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push str.DeltaX
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00428260
test al, al
je 0x40d1c8
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0040ea50
mov eax, dword [eax]
push eax
call fcn.005cf40e
add esp, 4
lea ecx, [esp + 0x24]
mov dword [esi + 0x68], eax
call fcn.005eb9e1
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push str.DeltaY
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428260
test al, al
je 0x40d21a
lea eax, [esp + 0x24]
lea ecx, [esp + 0x28]
push eax
call fcn.0040ea50
mov eax, dword [eax]
push eax
call fcn.005cf40e
add esp, 4
lea ecx, [esp + 0x24]
mov dword [esi + 0x6c], eax
call fcn.005eb9e1
lea ecx, [esp + 0x28]
call fcn.00428550
jmp 0x40d23b
push str.Failed_to_find__UpHighlight__XML_tag.
lea ecx, [esi + 0xe0]
call fcn.005ebb6a
xor ebp, ebp
mov dword [esp + 0x10], ebp
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push str.Disabled
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00428260
test al, al
je 0x40d47e
lea ecx, [esp + 0x28]
call fcn.00428510
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push str.Image
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428260
test al, al
je 0x40d2d4
lea eax, [esp + 0x24]
lea ecx, [esp + 0x28]
push eax
call fcn.0040ea50
push eax
lea ecx, [esi + 0x70]
mov byte [esp + 0x8c], 0x15
call fcn.005ebb1a
lea ecx, [esp + 0x24]
mov byte [esp + 0x88], 5
call fcn.005eb9e1
jmp 0x40d2ea
push str.Failed_to_find__UpDisabledImage__XML_tag.
lea ecx, [esi + 0xe0]
call fcn.005ebb6a
xor ebp, ebp
mov dword [esp + 0x10], ebp
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push str.FontColor
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00428260
test al, al
je 0x40d3cf
lea edx, [esp + 0x14]
lea ecx, [esp + 0x28]
push edx
call fcn.0040ea50
mov edi, dword [eax]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 0x16
call fcn.0040ea50
mov ebp, dword [eax]
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 0x17
call fcn.0040ea50
mov edx, dword [eax]
push 0x10
push ebx
push ebp
mov dword [esp + 0x2c], edx
call fcn.005d0035
xor ecx, ecx
xor edx, edx
mov cl, ah
push 0x10
mov dh, cl
push ebx
push edi
mov ebx, edx
call fcn.005d0035
mov edx, dword [esp + 0x38]
push 0x10
push 0
shr eax, 0x10
push edx
mov bl, al
call fcn.005d0035
and eax, 0xff
add esp, 0x24
shl eax, 0x10
or ebx, eax
lea ecx, [esp + 0x1c]
mov dword [esi + 0x74], ebx
call fcn.005eb9e1
lea ecx, [esp + 0x18]
mov byte [esp + 0x88], 0x16
call fcn.005eb9e1
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call fcn.005eb9e1
mov ebp, dword [esp + 0x10]
xor ebx, ebx
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push str.DeltaX
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00428260
test al, al
je 0x40d421
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0040ea50
mov eax, dword [eax]
push eax
call fcn.005cf40e
add esp, 4
lea ecx, [esp + 0x24]
mov dword [esi + 0x78], eax
call fcn.005eb9e1
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push str.DeltaY
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428260
test al, al
je 0x40d473
lea eax, [esp + 0x24]
lea ecx, [esp + 0x28]
push eax
call fcn.0040ea50
mov eax, dword [eax]
push eax
call fcn.005cf40e
add esp, 4
lea ecx, [esp + 0x24]
mov dword [esi + 0x7c], eax
call fcn.005eb9e1
lea ecx, [esp + 0x28]
call fcn.00428550
jmp 0x40d494
push str.Failed_to_find__UpDisabled__XML_tag.
lea ecx, [esi + 0xe0]
call fcn.005ebb6a
xor ebp, ebp
mov dword [esp + 0x10], ebp
lea ecx, [esp + 0x28]
call fcn.00428550
cmp ebp, ebx
je 0x40dc48
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push str.Down
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00428260
test al, al
je 0x40dc28
lea ecx, [esp + 0x28]
call fcn.00428510
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push str.Normal
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428260
test al, al
je 0x40d738
lea ecx, [esp + 0x28]
call fcn.00428510
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push str.Image
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00428260
test al, al
je 0x40d585
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0040ea50
push eax
lea ecx, [esi + 0x80]
mov byte [esp + 0x8c], 0x18
call fcn.005ebb1a
lea ecx, [esp + 0x24]
mov byte [esp + 0x88], 5
call fcn.005eb9e1
jmp 0x40d59b
push str.Failed_to_find__Up__XML_tag.
jmp 0x40dc3b
push str.Failed_to_find__DownNormalImage__XML_tag.
lea ecx, [esi + 0xe0]
call fcn.005ebb6a
xor ebp, ebp
mov dword [esp + 0x10], ebp
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push str.FontColor
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428260
test al, al
je 0x40d683
lea eax, [esp + 0x14]
lea ecx, [esp + 0x28]
push eax
call fcn.0040ea50
mov edi, dword [eax]
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 0x19
call fcn.0040ea50
mov ebp, dword [eax]
lea edx, [esp + 0x1c]
push edx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 0x1a
call fcn.0040ea50
mov eax, dword [eax]
push 0x10
push ebx
push ebp
mov dword [esp + 0x2c], eax
call fcn.005d0035
xor ecx, ecx
xor edx, edx
mov cl, ah
push 0x10
mov dh, cl
push ebx
push edi
mov ebx, edx
call fcn.005d0035
mov edx, dword [esp + 0x38]
push 0x10
push 0
shr eax, 0x10
push edx
mov bl, al
call fcn.005d0035
and eax, 0xff
add esp, 0x24
shl eax, 0x10
or ebx, eax
lea ecx, [esp + 0x1c]
mov dword [esi + 0x84], ebx
call fcn.005eb9e1
lea ecx, [esp + 0x18]
mov byte [esp + 0x88], 0x19
call fcn.005eb9e1
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call fcn.005eb9e1
mov ebp, dword [esp + 0x10]
xor ebx, ebx
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push str.DeltaX
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00428260
test al, al
je 0x40d6d8
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0040ea50
mov eax, dword [eax]
push eax
call fcn.005cf40e
add esp, 4
lea ecx, [esp + 0x24]
mov dword [esi + 0x88], eax
call fcn.005eb9e1
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push str.DeltaY
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428260
test al, al
je 0x40d72d
lea eax, [esp + 0x24]
lea ecx, [esp + 0x28]
push eax
call fcn.0040ea50
mov eax, dword [eax]
push eax
call fcn.005cf40e
add esp, 4
lea ecx, [esp + 0x24]
mov dword [esi + 0x8c], eax
call fcn.005eb9e1
lea ecx, [esp + 0x28]
call fcn.00428550
jmp 0x40d74e
push str.Failed_to_find__DownNormal__XML_tag.
lea ecx, [esi + 0xe0]
call fcn.005ebb6a
xor ebp, ebp
mov dword [esp + 0x10], ebp
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push str.Highlight
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00428260
test al, al
je 0x40d99d
lea ecx, [esp + 0x28]
call fcn.00428510
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push str.Image
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428260
test al, al
je 0x40d7ea
lea eax, [esp + 0x24]
lea ecx, [esp + 0x28]
push eax
call fcn.0040ea50
push eax
lea ecx, [esi + 0x90]
mov byte [esp + 0x8c], 0x1b
call fcn.005ebb1a
lea ecx, [esp + 0x24]
mov byte [esp + 0x88], 5
call fcn.005eb9e1
jmp 0x40d800
push str.Failed_to_find__DownHighlightImage__XML_tag.
lea ecx, [esi + 0xe0]
call fcn.005ebb6a
xor ebp, ebp
mov dword [esp + 0x10], ebp
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push str.FontColor
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00428260
test al, al
je 0x40d8e8
lea edx, [esp + 0x14]
lea ecx, [esp + 0x28]
push edx
call fcn.0040ea50
mov edi, dword [eax]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 0x1c
call fcn.0040ea50
mov ebp, dword [eax]
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 0x1d
call fcn.0040ea50
mov edx, dword [eax]
push 0x10
push ebx
push ebp
mov dword [esp + 0x2c], edx
call fcn.005d0035
xor ecx, ecx
xor edx, edx
mov cl, ah
push 0x10
mov dh, cl
push ebx
push edi
mov ebx, edx
call fcn.005d0035
mov edx, dword [esp + 0x38]
push 0x10
push 0
shr eax, 0x10
push edx
mov bl, al
call fcn.005d0035
and eax, 0xff
add esp, 0x24
shl eax, 0x10
or ebx, eax
lea ecx, [esp + 0x1c]
mov dword [esi + 0x94], ebx
call fcn.005eb9e1
lea ecx, [esp + 0x18]
mov byte [esp + 0x88], 0x1c
call fcn.005eb9e1
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call fcn.005eb9e1
mov ebp, dword [esp + 0x10]
xor ebx, ebx
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push str.DeltaX
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00428260
test al, al
je 0x40d93d
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0040ea50
mov eax, dword [eax]
push eax
call fcn.005cf40e
add esp, 4
lea ecx, [esp + 0x24]
mov dword [esi + 0x98], eax
call fcn.005eb9e1
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push str.DeltaY
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428260
test al, al
je 0x40d992
lea eax, [esp + 0x24]
lea ecx, [esp + 0x28]
push eax
call fcn.0040ea50
mov eax, dword [eax]
push eax
call fcn.005cf40e
add esp, 4
lea ecx, [esp + 0x24]
mov dword [esi + 0x9c], eax
call fcn.005eb9e1
lea ecx, [esp + 0x28]
call fcn.00428550
jmp 0x40d9b3
push str.Failed_to_find__DownHighlight__XML_tag.
lea ecx, [esi + 0xe0]
call fcn.005ebb6a
xor ebp, ebp
mov dword [esp + 0x10], ebp
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push str.Disabled
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00428260
test al, al
je 0x40dc0b
lea ecx, [esp + 0x28]
call fcn.00428510
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push str.Image
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428260
test al, al
je 0x40da4f
lea eax, [esp + 0x24]
lea ecx, [esp + 0x28]
push eax
call fcn.0040ea50
push eax
lea ecx, [esi + 0xa0]
mov byte [esp + 0x8c], 0x1e
call fcn.005ebb1a
lea ecx, [esp + 0x24]
mov byte [esp + 0x88], 5
call fcn.005eb9e1
jmp 0x40da65
push str.Failed_to_find__DownDisabledImage__XML_tag.
lea ecx, [esi + 0xe0]
call fcn.005ebb6a
xor ebp, ebp
mov dword [esp + 0x10], ebp
mov edi, dword [esp + 0x4c]
xor ecx, ecx
cmp edi, ebx
push str.FontColor
setne cl
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00428260
test al, al
je 0x40db4d
lea edx, [esp + 0x14]
lea ecx, [esp + 0x28]
push edx
call fcn.0040ea50
mov edi, dword [eax]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 0x1f
call fcn.0040ea50
mov ebp, dword [eax]
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 0x20
call fcn.0040ea50
mov edx, dword [eax]
push 0x10
push ebx
push ebp
mov dword [esp + 0x2c], edx
call fcn.005d0035
xor ecx, ecx
xor edx, edx
mov cl, ah
push 0x10
mov dh, cl
push ebx
push edi
mov ebx, edx
call fcn.005d0035
mov edx, dword [esp + 0x38]
push 0x10
push 0
shr eax, 0x10
push edx
mov bl, al
call fcn.005d0035
and eax, 0xff
add esp, 0x24
shl eax, 0x10
or ebx, eax
lea ecx, [esp + 0x1c]
mov dword [esi + 0xa4], ebx
call fcn.005eb9e1
lea ecx, [esp + 0x18]
mov byte [esp + 0x88], 0x1f
call fcn.005eb9e1
lea ecx, [esp + 0x14]
mov byte [esp + 0x88], 5
call fcn.005eb9e1
mov ebp, dword [esp + 0x10]
xor ebx, ebx
mov edi, dword [esp + 0x4c]
xor eax, eax
cmp edi, ebx
push str.DeltaX
setne al
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], eax
call fcn.00428260
test al, al
je 0x40dba2
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0040ea50
mov eax, dword [eax]
push eax
call fcn.005cf40e
add esp, 4
lea ecx, [esp + 0x24]
mov dword [esi + 0xa8], eax
call fcn.005eb9e1
mov edi, dword [esp + 0x4c]
xor edx, edx
cmp edi, ebx
push str.DeltaY
setne dl
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], edx
call fcn.00428260
test al, al
je 0x40dbf7
lea eax, [esp + 0x24]
lea ecx, [esp + 0x28]
push eax
call fcn.0040ea50
mov eax, dword [eax]
push eax
call fcn.005cf40e
add esp, 4
lea ecx, [esp + 0x24]
mov dword [esi + 0xac], eax
call fcn.005eb9e1
lea ecx, [esp + 0x28]
call fcn.00428550
lea ecx, [esp + 0x28]
call fcn.00428550
jmp 0x40dc48
push str.Failed_to_find__DownDisabled__XML_tag.
lea ecx, [esi + 0xe0]
call fcn.005ebb6a
lea ecx, [esp + 0x28]
xor ebp, ebp
call fcn.00428550
jmp 0x40dc48
push str.Failed_to_find__Down__XML_tag.
jmp 0x40dc3b
push str.Failed_to_find__IR_Button__XML_tag.
jmp 0x40dc3b
push str.Could_not_set_XML_data.
lea ecx, [esi + 0xe0]
call fcn.005ebb6a
xor ebp, ebp
mov dword [esp + 0x28], vtable.CMarkup.0
lea ecx, [esp + 0x64]
mov dword [esp + 0x64], vtable.CMap_class_CString__char_const___struct_CMarkup::SavedPos__struct_CMarkup::SavedPos_.0
mov dword [esp + 0x20], ecx
mov eax, dword [esp + 0x68]
mov byte [esp + 0x88], 0x24
cmp eax, ebx
je 0x40dc9f
mov ecx, dword [esp + 0x6c]
xor edi, edi
cmp ecx, ebx
jbe 0x40dc9f
mov esi, dword [eax + edi*4]
cmp esi, ebx
je 0x40dc96
lea edx, [esi + 8]
push 1
push edx
call fcn.005e81c6
mov esi, dword [esi]
cmp esi, ebx
jne 0x40dc81
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x6c]
inc edi
cmp edi, ecx
jb 0x40dc7a
push eax
call fcn.005eb74b
mov ecx, dword [esp + 0x7c]
add esp, 4
mov dword [esp + 0x68], ebx
mov dword [esp + 0x70], ebx
mov dword [esp + 0x74], ebx
call fcn.005ea3ee
lea eax, [esp + 0x34]
mov dword [esp + 0x78], ebx
mov dword [esp + 0x20], eax
mov dword [esp + 0x34], vtable.CArray_struct_CMarkup::ElemPos__struct_CMarkup::ElemPos__.0
mov eax, dword [esp + 0x38]
mov byte [esp + 0x88], 0x25
cmp eax, ebx
je 0x40dcea
push eax
call fcn.005eb74b
add esp, 4
lea ecx, [esp + 0x30]
mov byte [esp + 0x88], 0x21
call fcn.005eb9e1
lea ecx, [esp + 0x2c]
mov byte [esp + 0x88], bl
call fcn.005eb9e1
lea ecx, [esp + 0x90]
mov dword [esp + 0x88], 0xffffffff
call fcn.005eb9e1
mov ecx, dword [esp + 0x80]
pop edi
mov eax, ebp
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x7c
ret 4