Function at 0x4290b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5add06
mov eax, dword fs:[0]
push eax
sub esp, 0x270
mov eax, dword [0x5f8800]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x218], edi
call dword [sym.imp.WINMM.dll_timeGetTime]
movzx ecx, word [edi + 0x144370]
push 0
push 0
mov dword [ebp - 0x228], eax
movzx eax, word [edi + 0x14436e]
movsx esi, cx
push 2
mov dword [ebp - 0x214], eax
push esi
cwde
push eax
mov dword [ebp - 0x210], ecx
mov ecx, edi
push 0x3d
mov dword [ebp - 0x21c], esi
call fcn.0043d1d0
mov ecx, dword [ebp - 0x214]
push 0
push 0
push 0x13
push esi
movsx eax, cx
mov ecx, edi
push eax
push 0x46
call fcn.0043d1d0
xor ecx, ecx
lea eax, [edi + 0x139d64]
mov esi, 0x1f4
xor edi, edi
nop
mov edx, dword [eax]
test edx, edx
je 0x42915e
inc ecx
cmp byte [edx + 0x18], 0
je 0x42915e
inc edi
add eax, 4
sub esi, 1
jne 0x429150
mov esi, dword [ebp - 0x21c]
mov dword [ebp - 0x220], edi
mov edi, dword [ebp - 0x218]
mov dword [ebp - 0x208], ecx
movsx eax, word [edi + 0x144478]
add eax, 6
cmp eax, 0xa
ja case.default.0x429191
jmp dword [eax*4 + 0x42c258]
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push 0x20
movups xmmword [ebp - 0x1ec], xmm0
mov dword [ebp - 0x1d8], 0
call fcn.005aa520
movups xmm0, xmmword [str.DRAW_DIALOGBOX_GUILDLIST25]
mov dword [ebp - 0x1ec], eax
add esp, 4
mov dword [ebp - 0x1dc], 0x1a
mov dword [ebp - 0x1d8], 0x1f
movups xmmword [eax], xmm0
movq xmm0, qword [0x5ccfd8]
movq qword [eax + 0x10], xmm0
mov cx, word [0x5ccfe0]
mov word [eax + 0x18], cx
mov byte [eax + 0x1a], 0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0
push eax
lea eax, [ebp - 0x22c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x42922c
mov eax, dword [eax]
push 0
push 0
push 0
push 0
push eax
lea eax, [esi + 0x2d]
push eax
mov eax, dword [ebp - 0x214]
movsx ecx, ax
lea eax, [ecx + 0xf0]
push eax
lea eax, [ecx + 0x19]
mov ecx, edi
push eax
call fcn.0045d060
mov ecx, dword [ebp - 0x1d8]
cmp ecx, 0xf
jbe case.default.0x429191
mov edx, dword [ebp - 0x1ec]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x429288
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42c252
push ecx
push edx
call fcn.005aa4e8
add esp, 8
jmp case.default.0x429191
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push 0x20
movups xmmword [ebp - 0x1ec], xmm0
mov dword [ebp - 0x1d8], 0
call fcn.005aa520
movups xmm0, xmmword [str.DRAW_DIALOGBOX_GUILDLIST24]
mov dword [ebp - 0x1ec], eax
add esp, 4
mov dword [ebp - 0x1dc], 0x1a
mov dword [ebp - 0x1d8], 0x1f
movups xmmword [eax], xmm0
movq xmm0, qword [0x5ccff4]
movq qword [eax + 0x10], xmm0
mov cx, word [0x5ccffc]
mov word [eax + 0x18], cx
mov byte [eax + 0x1a], 0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 1
push eax
lea eax, [ebp - 0x22c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x42922c
jmp 0x42922a
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push 0x20
movups xmmword [ebp - 0x1ec], xmm0
mov dword [ebp - 0x1d8], 0
call fcn.005aa520
movups xmm0, xmmword [str.DRAW_DIALOGBOX_GUILDLIST22]
mov dword [ebp - 0x1ec], eax
add esp, 4
mov dword [ebp - 0x1dc], 0x1a
mov dword [ebp - 0x1d8], 0x1f
movups xmmword [eax], xmm0
movq xmm0, qword [0x5cd010]
movq qword [eax + 0x10], xmm0
mov cx, word [0x5cd018]
mov word [eax + 0x18], cx
mov byte [eax + 0x1a], 0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 2
push eax
lea eax, [ebp - 0x22c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x42922c
jmp 0x42922a
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push 0x20
movups xmmword [ebp - 0x1ec], xmm0
mov dword [ebp - 0x1d8], 0
call fcn.005aa520
movups xmm0, xmmword [str.DRAW_DIALOGBOX_GUILDLIST8]
mov dword [ebp - 0x1ec], eax
add esp, 4
mov dword [ebp - 0x1dc], 0x19
mov dword [ebp - 0x1d8], 0x1f
movups xmmword [eax], xmm0
movq xmm0, qword [0x5cd02c]
movq qword [eax + 0x10], xmm0
mov cl, byte [0x5cd034]
mov byte [eax + 0x18], cl
mov byte [eax + 0x19], 0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 3
push eax
lea eax, [ebp - 0x22c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x42922c
jmp 0x42922a
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push 0x20
movups xmmword [ebp - 0x1ec], xmm0
mov dword [ebp - 0x1d8], 0
call fcn.005aa520
movups xmm0, xmmword [str.DRAW_DIALOGBOX_GUILDLIST17]
mov dword [ebp - 0x1ec], eax
add esp, 4
mov dword [ebp - 0x1dc], 0x1a
mov dword [ebp - 0x1d8], 0x1f
movups xmmword [eax], xmm0
movq xmm0, qword [0x5cd048]
movq qword [eax + 0x10], xmm0
mov cx, word [0x5cd050]
mov word [eax + 0x18], cx
mov byte [eax + 0x1a], 0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 4
push eax
lea eax, [ebp - 0x22c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x42922c
jmp 0x42922a
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push 0x20
movups xmmword [ebp - 0x1ec], xmm0
mov dword [ebp - 0x1d8], 0
call fcn.005aa520
movups xmm0, xmmword [str.DRAW_DIALOGBOX_GUILDLIST16]
mov dword [ebp - 0x1ec], eax
add esp, 4
mov dword [ebp - 0x1dc], 0x1a
mov dword [ebp - 0x1d8], 0x1f
movups xmmword [eax], xmm0
movq xmm0, qword [0x5cd064]
movq qword [eax + 0x10], xmm0
mov cx, word [0x5cd06c]
mov word [eax + 0x18], cx
mov byte [eax + 0x1a], 0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 5
push eax
lea eax, [ebp - 0x22c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x42922c
jmp 0x42922a
mov ecx, dword [ebp - 0x214]
lea esi, [edi + 0x18d885]
mov edi, dword [ebp - 0x21c]
push 0
push 0xc8
push 0xc8
movsx eax, cx
add edi, 0x2d
push 0xdc
push esi
push edi
lea ecx, [eax + 0xf0]
add eax, 0x19
push ecx
mov dword [ebp - 0x220], ecx
mov ecx, dword [ebp - 0x218]
push eax
mov dword [ebp - 0x210], eax
call fcn.0045d060
mov eax, dword [ebp - 0x214]
push 0
push 0xc8
push 0xc8
push 0xdc
movsx ecx, ax
push esi
mov esi, dword [ebp - 0x218]
push edi
lea eax, [ecx + 0xf1]
push eax
lea eax, [ecx + 0x1a]
mov ecx, esi
push eax
call fcn.0045d060
push 0x32
lea eax, [ebp - 0x44]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push 0x20
movups xmmword [ebp - 0x1ec], xmm0
mov dword [ebp - 0x1d8], 0
call fcn.005aa520
movups xmm0, xmmword [str.DRAW_DIALOGBOX_GUILDLIST4]
mov dword [ebp - 0x1ec], eax
add esp, 0x10
mov dword [ebp - 0x1dc], 0x19
mov dword [ebp - 0x1d8], 0x1f
movups xmmword [eax], xmm0
movq xmm0, qword [0x5cd080]
movq qword [eax + 0x10], xmm0
mov cl, byte [0x5cd088]
mov byte [eax + 0x18], cl
mov byte [eax + 0x19], 0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 6
push eax
lea eax, [ebp - 0x22c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4296bc
mov eax, dword [eax]
push dword [esi + 0x13b59c]
push eax
lea eax, [ebp - 0x44]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov ecx, dword [ebp - 0x1d8]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x429711
mov edx, dword [ebp - 0x1ec]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x429707
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42c252
push ecx
push edx
call fcn.005aa4e8
add esp, 8
mov edi, dword [ebp - 0x21c]
lea eax, [ebp - 0x44]
push 0
push 0
push eax
lea eax, [edi + 0x41]
mov ecx, esi
push eax
push dword [ebp - 0x210]
call fcn.0045d450
push 0x32
lea eax, [ebp - 0x44]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push 0x20
movups xmmword [ebp - 0x1ec], xmm0
mov dword [ebp - 0x1d8], 0
call fcn.005aa520
movups xmm0, xmmword [str.DRAW_DIALOGBOX_GUILDLIST3]
mov dword [ebp - 0x1ec], eax
add esp, 0x10
mov dword [ebp - 0x1dc], 0x19
mov dword [ebp - 0x1d8], 0x1f
movups xmmword [eax], xmm0
movq xmm0, qword [0x5cd09c]
movq qword [eax + 0x10], xmm0
mov cl, byte [0x5cd0a4]
mov byte [eax + 0x18], cl
mov byte [eax + 0x19], 0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 7
push eax
lea eax, [ebp - 0x22c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4297cf
mov eax, dword [eax]
push dword [esi + 0x13b5a0]
push eax
lea eax, [ebp - 0x44]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov ecx, dword [ebp - 0x1d8]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x429824
mov edx, dword [ebp - 0x1ec]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42981a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42c252
push ecx
push edx
call fcn.005aa4e8
add esp, 8
push 0
push 0
lea eax, [ebp - 0x44]
mov ecx, esi
push eax
lea eax, [edi + 0x50]
push eax
push dword [ebp - 0x210]
call fcn.0045d450
push 0x32
lea eax, [ebp - 0x44]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push 0x20
movups xmmword [ebp - 0x1ec], xmm0
mov dword [ebp - 0x1d8], 0
call fcn.005aa520
movups xmm0, xmmword [str.DRAW_DIALOGBOX_GUILDLIST5]
mov dword [ebp - 0x1ec], eax
add esp, 0x10
mov dword [ebp - 0x1dc], 0x19
mov dword [ebp - 0x1d8], 0x1f
movups xmmword [eax], xmm0
movq xmm0, qword [0x5cd0b8]
movq qword [eax + 0x10], xmm0
mov cl, byte [0x5cd0c0]
mov byte [eax + 0x18], cl
mov byte [eax + 0x19], 0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 8
push eax
lea eax, [ebp - 0x22c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4298dc
mov eax, dword [eax]
push dword [esi + 0x13b5a8]
push dword [esi + 0x13b5a4]
push eax
lea eax, [ebp - 0x44]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov ecx, dword [ebp - 0x1d8]
add esp, 0x10
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x429937
mov edx, dword [ebp - 0x1ec]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42992d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42c252
push ecx
push edx
call fcn.005aa4e8
add esp, 8
push 0
push 0
lea eax, [ebp - 0x44]
mov ecx, esi
push eax
lea eax, [edi + 0x5f]
push eax
push dword [ebp - 0x210]
call fcn.0045d450
push 0x32
lea eax, [ebp - 0x44]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x1dc], 0
xorps xmm0, xmm0
mov dword [ebp - 0x1d8], 0
lea ecx, [ebp - 0x1ec]
movups xmmword [ebp - 0x1ec], xmm0
push 0x19
push str.DRAW_DIALOGBOX_GUILDLIST6
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 9
push eax
lea eax, [ebp - 0x22c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x4299bc
mov eax, dword [eax]
push dword [esi + 0x13b5b0]
push dword [esi + 0x13b5ac]
push eax
lea eax, [ebp - 0x44]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov ecx, dword [ebp - 0x1d8]
add esp, 0x10
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x429a17
mov edx, dword [ebp - 0x1ec]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x429a0d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42c252
push ecx
push edx
call fcn.005aa4e8
add esp, 8
push 0
push 0
lea eax, [ebp - 0x44]
mov ecx, esi
push eax
lea eax, [edi + 0x6e]
push eax
push dword [ebp - 0x210]
call fcn.0045d450
push 0x32
lea eax, [ebp - 0x44]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x1dc], 0
xorps xmm0, xmm0
mov dword [ebp - 0x1d8], 0
lea ecx, [ebp - 0x1ec]
movups xmmword [ebp - 0x1ec], xmm0
push 0x1a
push str.DRAW_DIALOGBOX_GUILDLIST23
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0xa
push eax
lea eax, [ebp - 0x22c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x429a9c
mov eax, dword [eax]
push dword [esi + 0x13b5b4]
push dword [esi + 0x13b5b0]
push eax
lea eax, [ebp - 0x44]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov ecx, dword [ebp - 0x1d8]
add esp, 0x10
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x429af7
mov edx, dword [ebp - 0x1ec]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x429aed
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42c252
push ecx
push edx
call fcn.005aa4e8
add esp, 8
push 0
push 0
lea eax, [ebp - 0x44]
mov ecx, esi
push eax
lea eax, [edi + 0x7d]
push eax
push dword [ebp - 0x210]
call fcn.0045d450
push 0x32
lea eax, [ebp - 0x44]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x1dc], 0
xorps xmm0, xmm0
mov dword [ebp - 0x1d8], 0
lea ecx, [ebp - 0x1ec]
movups xmmword [ebp - 0x1ec], xmm0
push 0x1a
push str.DRAW_DIALOGBOX_GUILDLIST20
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0xb
push eax
lea eax, [ebp - 0x22c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x429b7c
mov eax, dword [eax]
push dword [esi + 0x13b5bc]
push dword [esi + 0x13b5b8]
push eax
lea eax, [ebp - 0x44]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov ecx, dword [ebp - 0x1d8]
add esp, 0x10
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x429bd7
mov edx, dword [ebp - 0x1ec]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x429bcd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42c252
push ecx
push edx
call fcn.005aa4e8
add esp, 8
push 0
push 0
lea eax, [ebp - 0x44]
mov ecx, esi
push eax
lea eax, [edi + 0x8c]
push eax
push dword [ebp - 0x210]
call fcn.0045d450
movsx eax, word [ebp + 8]
cmp eax, dword [ebp - 0x210]
jl 0x429ca9
cmp eax, dword [ebp - 0x220]
jg 0x429ca9
movsx ecx, word [ebp + 0xc]
lea eax, [edi + 0xb9]
mov dword [ebp - 0x20c], ecx
cmp ecx, eax
jl 0x429ca9
lea eax, [edi + 0xc7]
cmp ecx, eax
jg 0x429ca9
push str.DRAW_DIALOGBOX_GUILDLIST7
lea ecx, [ebp - 0x1ec]
call fcn.0040f9f0
push 0
push 0xff
push 0xff
push 0xff
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0xc
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [edi + 0xb9]
mov ecx, esi
push eax
push dword [ebp - 0x220]
push dword [ebp - 0x210]
call fcn.0045d060
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x20c]
jmp 0x429d68
push 0x19
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push str.DRAW_DIALOGBOX_GUILDLIST7
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0x1d8], 0
movups xmmword [ebp - 0x1ec], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0xd
push eax
lea eax, [ebp - 0x22c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x429d05
mov eax, dword [eax]
push 0
push 0x32
push 0
push 4
push eax
lea eax, [edi + 0xb9]
mov ecx, esi
push eax
push dword [ebp - 0x220]
push dword [ebp - 0x210]
call fcn.0045d060
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 4], 0xffffffff
cmp eax, 0xf
jbe 0x429d50
push eax
push dword [ebp - 0x1ec]
lea eax, [ebp - 0x1ec]
push eax
call fcn.0047d060
add esp, 0xc
movsx eax, word [ebp + 8]
movsx ecx, word [ebp + 0xc]
cmp eax, dword [ebp - 0x210]
jl 0x429dcb
cmp eax, dword [ebp - 0x220]
jg 0x429dcb
lea eax, [edi + 0xe1]
mov dword [ebp - 0x20c], eax
cmp ecx, eax
jl 0x429dcb
lea eax, [edi + 0xef]
cmp ecx, eax
jg 0x429dcb
push str.DRAW_DIALOGBOX_GUILDLIST15
lea ecx, [ebp - 0x1ec]
call fcn.0040f9f0
push 0
push 0xff
push 0xff
push 0xff
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0xe
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x20c]
jmp 0x429e37
push 0x1a
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push str.DRAW_DIALOGBOX_GUILDLIST15
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0x1d8], 0
movups xmmword [ebp - 0x1ec], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0xf
push eax
lea eax, [ebp - 0x22c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x429e27
mov eax, dword [eax]
push 0
push 0x32
push 0
push 4
push eax
lea eax, [edi + 0xe1]
push eax
push dword [ebp - 0x220]
mov ecx, esi
push dword [ebp - 0x210]
call fcn.0045d060
lea ecx, [ebp - 0x1ec]
call fcn.00411640
jmp case.default.0x429191
mov edx, dword [edi + 0x144318]
cmp ecx, edx
jle 0x429eef
movsx eax, word [edi + 0x144376]
push 0
push 0
push 3
movd xmm1, eax
mov eax, ecx
sub eax, edx
mov ecx, dword [ebp - 0x214]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
mulsd xmm1, qword [0x5cd590]
mov eax, dword [ebp - 0x21c]
cvtdq2pd xmm0, xmm0
push eax
movsx eax, cx
mov ecx, edi
push eax
push 0x3d
divsd xmm1, xmm0
cvttsd2si esi, xmm1
call fcn.0043d1d0
mov eax, dword [ebp - 0x21c]
mov ecx, dword [ebp - 0x214]
add eax, 0x23
push 0
push 0
push 7
add eax, esi
push eax
movsx eax, cx
mov ecx, edi
add eax, 0xf2
push eax
push 0x3d
call fcn.0043d1d0
mov edx, dword [edi + 0x144318]
mov esi, dword [ebp - 0x21c]
mov ecx, dword [ebp - 0x208]
cmp byte [ebp + 0x14], 0
je 0x429f85
cmp ecx, edx
jle 0x429f85
mov ecx, edi
call fcn.004973c0
cmp eax, 0x30
jne 0x429f8c
mov eax, dword [ebp - 0x214]
movsx edx, word [ebp + 8]
movsx ecx, ax
lea eax, [ecx + 0xeb]
cmp edx, eax
jl 0x429f8c
lea eax, [ecx + 0x104]
cmp edx, eax
jg 0x429f8c
movsx ecx, word [ebp + 0xc]
lea eax, [esi + 0xa]
cmp ecx, eax
jl 0x429f8c
lea eax, [esi + 0x14a]
cmp ecx, eax
jg 0x429f8c
mov eax, dword [ebp - 0x208]
sub ecx, esi
sub ecx, 0x23
sub eax, dword [edi + 0x144318]
movd xmm1, eax
movd xmm0, ecx
cvtdq2pd xmm1, xmm1
cvtdq2pd xmm0, xmm0
mulsd xmm1, xmm0
divsd xmm1, qword [0x5cd590]
addsd xmm1, qword [0x5c5598]
cvttsd2si eax, xmm1
mov word [edi + 0x144376], ax
jmp 0x429f8c
mov byte [edi + 0x14447a], 0
mov ecx, edi
call fcn.004973c0
cmp eax, 0x30
jne 0x429fc7
mov ax, word [ebp + 0x10]
test ax, ax
je 0x429fc7
movsx ecx, ax
mov eax, 0x77777777
imul ecx
sub edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
add word [edi + 0x144376], ax
xor eax, eax
mov word [edi + 0x14a904], ax
mov edx, dword [ebp - 0x208]
mov eax, dword [edi + 0x144318]
cmp edx, eax
jle 0x42a004
movzx ecx, ax
mov dword [ebp - 0x20c], ecx
mov ecx, edx
sub ecx, eax
movsx eax, word [edi + 0x144376]
cmp eax, ecx
jle 0x429ffe
mov eax, edx
sub eax, dword [ebp - 0x20c]
mov word [edi + 0x144376], ax
mov eax, dword [edi + 0x144318]
cmp word [edi + 0x144376], 0
jl 0x42a012
cmp edx, eax
jge 0x42a01b
xor eax, eax
mov word [edi + 0x144376], ax
push 0x19
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push str.DRAW_DIALOGBOX_GUILDLIST1
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0x1d8], 0
movups xmmword [ebp - 0x1ec], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x10
push eax
lea eax, [ebp - 0x22c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov edx, dword [eax]
add edx, 0x20
cmp dword [edx + 0x14], 0xf
jbe 0x42a077
mov edx, dword [edx]
mov ecx, dword [ebp - 0x214]
push 0
push 0
movsx eax, cx
lea ecx, [esi + 0x2d]
push edx
add eax, 0x19
push ecx
push eax
mov ecx, edi
mov dword [ebp - 0x210], eax
call fcn.0045d450
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 4], 0xffffffff
cmp eax, 0xf
jbe 0x42a0c2
push eax
push dword [ebp - 0x1ec]
lea eax, [ebp - 0x1ec]
push eax
call fcn.0047d060
add esp, 0xc
push 0x19
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push str.DRAW_DIALOGBOX_GUILDLIST1
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0x1d8], 0
movups xmmword [ebp - 0x1ec], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x11
push eax
lea eax, [ebp - 0x22c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x42a11e
mov eax, dword [eax]
mov ecx, dword [ebp - 0x214]
push 0
push 0
push eax
lea eax, [esi + 0x2d]
push eax
movsx eax, cx
mov ecx, edi
add eax, 0x1a
push eax
call fcn.0045d450
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 4], 0xffffffff
cmp eax, 0xf
jbe 0x42a163
push eax
push dword [ebp - 0x1ec]
lea eax, [ebp - 0x1ec]
push eax
call fcn.0047d060
add esp, 0xc
push 0x19
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push str.DRAW_DIALOGBOX_GUILDLIST2
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0x1d8], 0
movups xmmword [ebp - 0x1ec], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x12
push eax
lea eax, [ebp - 0x22c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov edx, dword [eax]
add edx, 0x20
cmp dword [edx + 0x14], 0xf
jbe 0x42a1bf
mov edx, dword [edx]
mov ecx, dword [ebp - 0x214]
push 0
push 0
movsx eax, cx
lea ecx, [esi + 0x2d]
push edx
add eax, 0x78
push ecx
push eax
mov ecx, edi
mov dword [ebp - 0x20c], eax
call fcn.0045d450
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 4], 0xffffffff
cmp eax, 0xf
jbe 0x42a20a
push eax
push dword [ebp - 0x1ec]
lea eax, [ebp - 0x1ec]
push eax
call fcn.0047d060
add esp, 0xc
push 0x19
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push str.DRAW_DIALOGBOX_GUILDLIST2
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0x1d8], 0
movups xmmword [ebp - 0x1ec], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x13
push eax
lea eax, [ebp - 0x22c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x42a266
mov eax, dword [eax]
mov ecx, dword [ebp - 0x214]
push 0
push 0
push eax
lea eax, [esi + 0x2d]
push eax
movsx eax, cx
mov ecx, edi
add eax, 0x79
push eax
call fcn.0045d450
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 4], 0xffffffff
cmp eax, 0xf
jbe 0x42a2ab
push eax
push dword [ebp - 0x1ec]
lea eax, [ebp - 0x1ec]
push eax
call fcn.0047d060
add esp, 0xc
push 0x32
lea eax, [ebp - 0x44]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push dword [ebp - 0x208]
mov eax, dword [ebp - 0x220]
push eax
lea eax, [ebp - 0x44]
push str.___d____d__
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov ecx, dword [ebp - 0x214]
lea eax, [ebp - 0x44]
add esp, 0x1c
push 0
push 0x969696
push eax
lea eax, [esi + 0x23]
push eax
movsx eax, cx
mov ecx, edi
add eax, 0xaa
push eax
call fcn.0045d450
cmp dword [edi + 0x144318], 0
mov dword [ebp - 0x208], 0
jle 0x42a7ee
add esi, 0x41
nop word [eax + eax]
movsx eax, word [edi + 0x144376]
add eax, dword [ebp - 0x208]
cmp eax, 0x1f4
jge 0x42a7cc
cmp dword [edi + eax*4 + 0x139d64], 0
je 0x42a7cc
xorps xmm0, xmm0
mov word [ebp - 0x48], 0
movq qword [ebp - 0x50], xmm0
mov byte [ebp - 0x46], 0
mov eax, dword [edi + eax*4 + 0x139d64]
add eax, 4
push eax
lea eax, [ebp - 0x50]
push 0xb
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
push 0xff
lea eax, [ebp - 0x150]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movsx eax, word [edi + 0x144376]
add esp, 0x18
add eax, dword [ebp - 0x208]
mov eax, dword [edi + eax*4 + 0x139d64]
mov eax, dword [eax + 0x10]
cmp eax, 9
ja case.0x42a3a4.9
jmp dword [eax*4 + 0x42c284]
push 0x18
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push str.DEF_MSG_GUILDRANK0_SHORT
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0x1d8], 0
movups xmmword [ebp - 0x1ec], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x14
push eax
lea eax, [ebp - 0x22c]
jmp 0x42a6d6
push 0x18
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push str.DEF_MSG_GUILDRANK1_SHORT
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0x1d8], 0
movups xmmword [ebp - 0x1ec], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x15
push eax
lea eax, [ebp - 0x224]
jmp 0x42a6d6
push 0x18
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push str.DEF_MSG_GUILDRANK2_SHORT
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0x1d8], 0
movups xmmword [ebp - 0x1ec], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x16
push eax
lea eax, [ebp - 0x24c]
jmp 0x42a6d6
push 0x18
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push str.DEF_MSG_GUILDRANK3_SHORT
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0x1d8], 0
movups xmmword [ebp - 0x1ec], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x17
push eax
lea eax, [ebp - 0x254]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x42a4e2
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x150]
push 0xff
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
mov eax, dword [ebp - 0x1d8]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
cmp eax, 0xf
jbe 0x42a715
push eax
push dword [ebp - 0x1ec]
lea eax, [ebp - 0x1ec]
push eax
call fcn.0047d060
add esp, 0xc
jmp 0x42a715
push 0x18
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push str.DEF_MSG_GUILDRANK4_SHORT
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0x1d8], 0
movups xmmword [ebp - 0x1ec], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x18
push eax
lea eax, [ebp - 0x25c]
jmp 0x42a6d6
push 0x18
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push str.DEF_MSG_GUILDRANK5_SHORT
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0x1d8], 0
movups xmmword [ebp - 0x1ec], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x19
push eax
lea eax, [ebp - 0x264]
jmp 0x42a6d6
push 0x18
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push str.DEF_MSG_GUILDRANK6_SHORT
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0x1d8], 0
movups xmmword [ebp - 0x1ec], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x1a
push eax
lea eax, [ebp - 0x26c]
jmp 0x42a6d6
push 0x18
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push str.DEF_MSG_GUILDRANK7_SHORT
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0x1d8], 0
movups xmmword [ebp - 0x1ec], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x1b
push eax
lea eax, [ebp - 0x274]
jmp 0x42a6d6
push 0x18
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push str.DEF_MSG_GUILDRANK8_SHORT
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0x1d8], 0
movups xmmword [ebp - 0x1ec], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x1c
push eax
lea eax, [ebp - 0x23c]
jmp 0x42a6d6
push 0x18
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push str.DEF_MSG_GUILDRANK9_SHORT
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0x1d8], 0
movups xmmword [ebp - 0x1ec], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x1d
push eax
lea eax, [ebp - 0x234]
push eax
mov ecx, 0x5fd3c4
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x42a6ee
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x150]
push 0xff
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1ec]
call fcn.00411640
mov ax, word [ebp + 8]
mov edx, dword [ebp - 0x210]
cwde
cmp eax, edx
jl 0x42a76c
mov ecx, dword [ebp - 0x214]
mov edi, dword [ebp - 0x218]
movsx eax, cx
movsx ecx, word [ebp + 8]
add eax, 0xf0
cmp ecx, eax
jg 0x42a76c
movsx ecx, word [ebp + 0xc]
cmp ecx, esi
jl 0x42a76c
lea eax, [esi + 0xe]
cmp ecx, eax
jg 0x42a76c
push 0
push 0xffffff
lea eax, [ebp - 0x50]
mov ecx, edi
push eax
push esi
push edx
call fcn.0045d450
push 0
push 0xffffff
jmp 0x42a7b7
movsx eax, word [edi + 0x144376]
mov ecx, edi
add eax, dword [ebp - 0x208]
push 0
mov eax, dword [edi + eax*4 + 0x139d64]
cmp byte [eax + 0x18], 0
lea eax, [ebp - 0x50]
je 0x42a7a3
push 0xff00
push eax
push esi
push edx
call fcn.0045d450
push 0
push 0xff00
jmp 0x42a7b7
push 0xff
push eax
push esi
push edx
call fcn.0045d450
push 0
push 0xff
lea eax, [ebp - 0x150]
mov ecx, edi
push eax
push esi
push dword [ebp - 0x20c]
call fcn.0045d450
mov eax, dword [ebp - 0x208]
add esi, 0x12
inc eax
mov dword [ebp - 0x208], eax
cmp eax, dword [edi + 0x144318]
jl 0x42a320
mov esi, dword [ebp - 0x21c]
mov eax, dword [ebp - 0x214]
movsx edx, word [ebp + 8]
movsx ecx, ax
lea eax, [ecx + 0x20]
cmp edx, eax
jl 0x42a82b
lea eax, [ecx + 0x5f]
cmp edx, eax
jg 0x42a82b
movsx edx, word [ebp + 0xc]
lea ecx, [esi + 0x12c]
cmp edx, ecx
jl 0x42a82b
lea eax, [esi + 0x140]
cmp edx, eax
jg 0x42a82b
mov eax, 6
lea edx, [eax + 0xe]
jmp 0x42a838
lea ecx, [esi + 0x12c]
xor eax, eax
mov edx, 7
push edx
push eax
push eax
push str.Back
push ecx
push dword [ebp - 0x210]
mov ecx, edi
call fcn.0045dd00
jmp case.default.0x429191
mov esi, dword [edi + 0x14431c]
mov dword [ebp - 0x208], esi
mov eax, dword [edi + esi*4 + 0x139d64]
mov eax, dword [eax + 0x14]
movsx eax, word [eax + 0x20]
sub eax, 1
je 0x42a87e
sub eax, 1
jne 0x42a889
mov eax, 4
jmp 0x42a883
mov eax, 1
mov word [0x5f9e04], ax
mov eax, dword [edi + esi*4 + 0x139d64]
mov eax, dword [eax + 0x10]
cmp eax, 9
ja case.0x42a89c.9
jmp dword [eax*4 + 0x42c2ac]
push str.DEF_MSG_GUILDRANK0_SHORT
lea ecx, [ebp - 0x1ec]
call fcn.0040f9f0
mov dword [ebp - 4], 0x1e
lea eax, [ebp - 0x1ec]
mov ecx, 0x5fd3c4
push eax
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
lea eax, [ebp - 0x150]
push eax
call fcn.0040eae0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1ec]
call fcn.00411640
jmp 0x42aa6c
push str.DEF_MSG_GUILDRANK1_SHORT
lea ecx, [ebp - 0x1ec]
call fcn.0040f9f0
mov dword [ebp - 4], 0x1f
jmp 0x42a8ba
push str.DEF_MSG_GUILDRANK2_SHORT
lea ecx, [ebp - 0x1ec]
call fcn.0040f9f0
mov dword [ebp - 4], 0x20
jmp 0x42a8ba
push str.DEF_MSG_GUILDRANK3_SHORT
lea ecx, [ebp - 0x1ec]
call fcn.0040f9f0
mov dword [ebp - 4], 0x21
jmp 0x42a8ba
push str.DEF_MSG_GUILDRANK4_SHORT
lea ecx, [ebp - 0x1ec]
call fcn.0040f9f0
mov dword [ebp - 4], 0x22
jmp 0x42a8ba
push str.DEF_MSG_GUILDRANK5_SHORT
lea ecx, [ebp - 0x1ec]
call fcn.0040f9f0
mov dword [ebp - 4], 0x23
jmp 0x42a8ba
push str.DEF_MSG_GUILDRANK6_SHORT
lea ecx, [ebp - 0x1ec]
call fcn.0040f9f0
mov dword [ebp - 4], 0x24
jmp 0x42a8ba
push str.DEF_MSG_GUILDRANK7_SHORT
lea ecx, [ebp - 0x1ec]
call fcn.0040f9f0
mov dword [ebp - 4], 0x25
jmp 0x42a8ba
push str.DEF_MSG_GUILDRANK8_SHORT
lea ecx, [ebp - 0x1ec]
call fcn.0040f9f0
mov dword [ebp - 4], 0x26
jmp 0x42a8ba
push 0x18
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push str.DEF_MSG_GUILDRANK9_SHORT
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0x1d8], 0
movups xmmword [ebp - 0x1ec], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x27
push eax
lea eax, [ebp - 0x234]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x42aa2f
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x150]
push 0xff
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
mov eax, dword [ebp - 0x1d8]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
cmp eax, 0xf
jbe 0x42aa6c
push eax
push dword [ebp - 0x1ec]
lea eax, [ebp - 0x1ec]
push eax
call fcn.0047d060
add esp, 0xc
push 0x80
lea eax, [ebp - 0x1d0]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
lea eax, [ebp - 0x1d0]
push eax
mov eax, dword [edi + esi*4 + 0x139d64]
mov eax, dword [eax + 0x14]
add eax, 0x13
push eax
call fcn.005666c0
mov eax, dword [edi + esi*4 + 0x139d64]
add esp, 0x14
mov ecx, dword [ebp - 0x214]
xorps xmm0, xmm0
mov eax, dword [eax + 0x14]
push 0
push 0xc8
push 0xc8
movzx eax, word [eax + 0x1e]
dec ax
add word [0x5f9e04], ax
movzx eax, byte [edi + 0x18dab4]
mov byte [0x5f9e07], al
mov eax, dword [edi + esi*4 + 0x139d64]
push 0xdc
mov eax, dword [eax + 0x14]
movzx eax, word [eax + 0x22]
mov word [0x5f9e08], ax
mov eax, dword [edi + esi*4 + 0x139d64]
mov eax, dword [eax + 0x14]
movzx eax, word [eax + 0x24]
mov word [0x5f9e0c], ax
mov eax, dword [edi + esi*4 + 0x139d64]
mov eax, dword [eax + 0x14]
movzx eax, word [eax + 0x26]
mov word [0x5f9e10], ax
mov eax, dword [edi + esi*4 + 0x139d64]
mov eax, dword [eax + 0x14]
movzx eax, word [eax + 0x28]
mov word [0x5f9e14], ax
mov eax, dword [edi + esi*4 + 0x139d64]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0x3c]
mov dword [0x5f9e3c], eax
mov eax, dword [edi + esi*4 + 0x139d64]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0x40]
mov dword [0x5f9e50], eax
mov eax, dword [edi + esi*4 + 0x139d64]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0x44]
mov dword [0x5f9e18], eax
mov eax, dword [edi + esi*4 + 0x139d64]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0x48]
mov dword [0x5f9e1c], eax
movq qword [0x5f9e24], xmm0
mov dword [0x5f9e2c], 0
mov eax, dword [edi + esi*4 + 0x139d64]
lea esi, [edi + 0x18d885]
push esi
movq xmm0, qword [eax + 4]
movq qword [0x5f9e24], xmm0
movzx eax, word [eax + 0xc]
mov word [0x5f9e2c], ax
mov byte [0x5f9e06], 1
movzx eax, byte [edi + 0x18dab6]
mov edi, dword [ebp - 0x21c]
mov byte [0x5f9e0a], al
add edi, 0x2d
movsx eax, cx
push edi
lea ecx, [eax + 0xf0]
add eax, 0x19
push ecx
mov dword [ebp - 0x20c], ecx
mov ecx, dword [ebp - 0x218]
mov dword [ebp - 0x220], eax
push eax
call fcn.0045d060
mov eax, dword [ebp - 0x214]
mov ecx, dword [ebp - 0x218]
push 0
push 0xc8
push 0xc8
push 0xdc
push esi
push edi
movsx edi, ax
lea eax, [edi + 0xf1]
push eax
lea eax, [edi + 0x1a]
push eax
call fcn.0045d060
mov eax, dword [ebp - 0x218]
add edi, 0x87
mov esi, dword [ebp - 0x21c]
push 0xffffffffffffffff
push 0xffffffffffffffff
mov ecx, dword [eax + 0x18334c]
add esi, 0x7d
push 0
push 0
push 0x64
push 1
push dword [eax + 0x189300]
push 1
push esi
push edi
call fcn.0057ed30
mov eax, dword [ebp - 0x218]
xor edx, edx
push 0
push 0
push dword [eax + 0x189300]
push 0
push esi
push edi
mov esi, eax
push 0
mov ecx, esi
call fcn.00442bc0
mov eax, dword [ebp - 0x208]
mov ecx, esi
mov edi, dword [ebp - 0x21c]
push 0
push 0
mov eax, dword [esi + eax*4 + 0x139d64]
push 0
push 0
add eax, 4
push eax
lea eax, [edi + 0xa0]
push eax
push dword [ebp - 0x20c]
push dword [ebp - 0x220]
call fcn.0045d060
push 0x32
lea eax, [ebp - 0x44]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x1dc], 0
xorps xmm0, xmm0
mov dword [ebp - 0x1d8], 0
lea ecx, [ebp - 0x1ec]
movups xmmword [ebp - 0x1ec], xmm0
push 0x1a
push str.DRAW_DIALOGBOX_GUILDLIST13
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x28
push eax
lea eax, [ebp - 0x234]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x42ad18
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x208]
mov eax, dword [esi + eax*4 + 0x139d64]
mov eax, dword [eax + 0x14]
movsx eax, word [eax + 0x36]
push eax
push ecx
lea eax, [ebp - 0x44]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov eax, dword [ebp - 0x1d8]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
cmp eax, 0xf
jbe 0x42ad63
push eax
push dword [ebp - 0x1ec]
lea eax, [ebp - 0x1ec]
push eax
call fcn.0047d060
add esp, 0xc
push 0
push 0
lea eax, [ebp - 0x44]
mov ecx, esi
push eax
lea eax, [edi + 0xb4]
push eax
push dword [ebp - 0x220]
call fcn.0045d450
push 0x32
lea eax, [ebp - 0x44]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x1dc], 0
xorps xmm0, xmm0
mov dword [ebp - 0x1d8], 0
lea ecx, [ebp - 0x1ec]
movups xmmword [ebp - 0x1ec], xmm0
push 0x1a
push str.DRAW_DIALOGBOX_GUILDLIST14
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x29
push eax
lea eax, [ebp - 0x234]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x42adeb
mov eax, dword [eax]
lea ecx, [ebp - 0x150]
push ecx
push eax
lea eax, [ebp - 0x44]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1ec]
call fcn.00411640
push 0
push 0
lea eax, [ebp - 0x44]
mov ecx, esi
push eax
lea eax, [edi + 0xc3]
push eax
push dword [ebp - 0x220]
call fcn.0045d450
push 0x32
lea eax, [ebp - 0x44]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x1dc], 0
xorps xmm0, xmm0
mov dword [ebp - 0x1d8], 0
lea ecx, [ebp - 0x1ec]
movups xmmword [ebp - 0x1ec], xmm0
push 0x1a
push str.DRAW_DIALOGBOX_GUILDLIST12
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x2a
push eax
lea eax, [ebp - 0x234]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x42ae9a
mov eax, dword [eax]
lea ecx, [ebp - 0x1d0]
push ecx
push eax
lea eax, [ebp - 0x44]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1ec]
call fcn.00411640
push 0
push 0
lea eax, [ebp - 0x44]
mov ecx, esi
push eax
lea eax, [edi + 0xd2]
push eax
push dword [ebp - 0x220]
call fcn.0045d450
mov eax, dword [ebp - 0x208]
lea ecx, [ebp - 0x1ec]
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
mov dword [ebp - 0x1d8], 0
movups xmmword [ebp - 0x1ec], xmm0
mov eax, dword [esi + eax*4 + 0x139d64]
cmp byte [eax + 0x18], 0
je 0x42af9d
push 0x19
push str.DRAW_DIALOGBOX_GUILDLIST9
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x2b
push eax
lea eax, [ebp - 0x234]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x42af50
mov eax, dword [eax]
push 0
push 0xff00
push eax
lea eax, [edi + 0xe1]
mov ecx, esi
push eax
push dword [ebp - 0x220]
call fcn.0045d450
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 4], 0xffffffff
cmp eax, 0xf
jbe 0x42b0ea
push eax
push dword [ebp - 0x1ec]
lea eax, [ebp - 0x1ec]
push eax
call fcn.0047d060
add esp, 0xc
jmp 0x42b0ea
push 0x1a
push str.DRAW_DIALOGBOX_GUILDLIST10
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x2c
push eax
lea eax, [ebp - 0x234]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x42afd5
mov eax, dword [eax]
push 0
push 0xff
push eax
lea eax, [edi + 0xe1]
mov ecx, esi
push eax
push dword [ebp - 0x220]
call fcn.0045d450
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0x32
lea eax, [ebp - 0x44]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x1dc], 0
xorps xmm0, xmm0
mov dword [ebp - 0x1d8], 0
lea ecx, [ebp - 0x1ec]
movups xmmword [ebp - 0x1ec], xmm0
push 0x1a
push str.DRAW_DIALOGBOX_GUILDLIST11
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x2d
push eax
lea eax, [ebp - 0x23c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov edx, dword [eax]
add edx, 0x20
cmp dword [edx + 0x14], 0xf
jbe 0x42b06f
mov edx, dword [edx]
mov eax, dword [ebp - 0x208]
mov eax, dword [esi + eax*4 + 0x139d64]
mov ecx, dword [eax + 0x14]
movsx eax, word [ecx + 0x54]
push eax
movsx eax, word [ecx + 0x52]
push eax
movsx eax, word [ecx + 0x50]
push eax
movsx eax, word [ecx + 0x4e]
push eax
movsx eax, word [ecx + 0x4c]
push eax
push edx
lea eax, [ebp - 0x44]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov eax, dword [ebp - 0x1d8]
add esp, 0x1c
mov dword [ebp - 4], 0xffffffff
cmp eax, 0xf
jbe 0x42b0ce
push eax
push dword [ebp - 0x1ec]
lea eax, [ebp - 0x1ec]
push eax
call fcn.0047d060
add esp, 0xc
push 0
push 0
lea eax, [ebp - 0x44]
mov ecx, esi
push eax
lea eax, [edi + 0xf0]
push eax
push dword [ebp - 0x220]
call fcn.0045d450
mov eax, dword [ebp - 0x208]
lea ecx, [esi + 0x18d77a]
mov eax, dword [esi + eax*4 + 0x139d64]
add eax, 4
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x42b120
test dl, dl
je 0x42b11c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x42b120
add eax, 2
add ecx, 2
test dl, dl
jne 0x42b100
xor eax, eax
jmp 0x42b125
sbb eax, eax
or eax, 1
test eax, eax
je 0x42b1ff
cmp byte [esi + 0x189666], 0
jne 0x42b1ff
mov ax, word [ebp + 8]
cwde
cmp eax, dword [ebp - 0x220]
jl 0x42b1b9
cmp eax, dword [ebp - 0x20c]
jg 0x42b1b9
movsx ecx, word [ebp + 0xc]
lea edx, [edi + 0x109]
mov dword [ebp - 0x218], edx
cmp ecx, edx
jl 0x42b1b9
lea eax, [edi + 0x117]
cmp ecx, eax
jg 0x42b1b9
push str.DRAW_DIALOGBOX_GUILDLIST18
lea ecx, [ebp - 0x1ec]
call fcn.0040f9f0
push 0
push 0xff
push 0xff
push 0xff
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x2e
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x218]
jmp 0x42b26b
push str.DRAW_DIALOGBOX_GUILDLIST18
lea ecx, [ebp - 0x1ec]
call fcn.0040f9f0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x2f
push eax
lea eax, [ebp - 0x234]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x42b1f5
mov eax, dword [eax]
push 0
push 0x32
push 0
push 4
jmp 0x42b263
push 0x1a
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push str.DRAW_DIALOGBOX_GUILDLIST18
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0x1d8], 0
movups xmmword [ebp - 0x1ec], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x30
push eax
lea eax, [ebp - 0x234]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x42b25b
mov eax, dword [eax]
push 0
push 0x41
push 0x41
push 0x41
push eax
lea eax, [edi + 0x109]
push eax
push dword [ebp - 0x20c]
mov ecx, esi
push dword [ebp - 0x220]
call fcn.0045d060
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov eax, dword [ebp - 0x208]
lea ecx, [esi + 0x18d77a]
mov eax, dword [esi + eax*4 + 0x139d64]
add eax, 4
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x42b2c6
test dl, dl
je 0x42b2c2
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x42b2c6
add eax, 2
add ecx, 2
test dl, dl
jne 0x42b2a6
xor eax, eax
jmp 0x42b2cb
sbb eax, eax
or eax, 1
test eax, eax
je 0x42b44b
cmp byte [esi + 0x189666], 0
jne 0x42b44b
mov edi, dword [ebp - 0x214]
movsx ecx, word [ebp + 8]
movsx eax, di
add eax, 0x19
mov dword [ebp - 0x208], ecx
cmp ecx, eax
jl 0x42b3c5
movsx eax, di
add eax, 0xf0
cmp ecx, eax
jg 0x42b3c5
mov ecx, dword [ebp - 0x210]
movsx edx, word [ebp + 0xc]
movsx eax, cx
add eax, 0x11d
mov dword [ebp - 0x218], edx
mov dword [ebp - 0x20c], eax
cmp edx, eax
jl 0x42b3c5
movsx eax, cx
add eax, 0x12b
cmp edx, eax
jg 0x42b3c5
push str.DRAW_DIALOGBOX_GUILDLIST19
lea ecx, [ebp - 0x1ec]
call fcn.0040f9f0
push 0
push 0xff
push 0xff
push 0xff
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x31
push eax
mov ecx, 0x5fd3c4
call fcn.00411e80
mov ecx, eax
call fcn.00494bc0
push eax
push dword [ebp - 0x20c]
movsx eax, di
mov ecx, esi
add eax, 0xf0
push eax
movsx eax, di
add eax, 0x19
push eax
call fcn.0045d060
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x208]
mov edx, dword [ebp - 0x218]
jmp 0x42b50a
push str.DRAW_DIALOGBOX_GUILDLIST19
lea ecx, [ebp - 0x1ec]
call fcn.0040f9f0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x32
push eax
lea eax, [ebp - 0x234]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x42b401
mov eax, dword [eax]
push 0
push 0x32
push 0
push 4
push eax
mov eax, dword [ebp - 0x210]
mov ecx, esi
cwde
add eax, 0x11d
push eax
movsx eax, di
add eax, 0xf0
push eax
movsx eax, di
add eax, 0x19
push eax
call fcn.0045d060
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
mov ecx, dword [ebp - 0x208]
jmp 0x42b506
push 0x1a
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push str.DRAW_DIALOGBOX_GUILDLIST19
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0x1d8], 0
movups xmmword [ebp - 0x1ec], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x33
push eax
lea eax, [ebp - 0x234]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x42b4a7
mov eax, dword [eax]
mov edi, dword [ebp - 0x214]
mov ecx, esi
push 0
push 0x41
push 0x41
push 0x41
push eax
mov eax, dword [ebp - 0x210]
cwde
add eax, 0x11d
push eax
movsx eax, di
add eax, 0xf0
push eax
movsx eax, di
add eax, 0x19
push eax
call fcn.0045d060
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 4], 0xffffffff
cmp eax, 0xf
jbe 0x42b502
push eax
push dword [ebp - 0x1ec]
lea eax, [ebp - 0x1ec]
push eax
call fcn.0047d060
add esp, 0xc
movsx ecx, word [ebp + 8]
movsx edx, word [ebp + 0xc]
movsx eax, di
add eax, 0x20
cmp ecx, eax
jl 0x42b555
movsx eax, di
add eax, 0x5f
cmp ecx, eax
jg 0x42b555
mov ecx, dword [ebp - 0x210]
movsx eax, cx
add eax, 0x12c
mov dword [ebp - 0x20c], eax
cmp edx, eax
jl 0x42b555
movsx eax, cx
add eax, 0x140
cmp edx, eax
jg 0x42b555
push 0x14
push 6
push 6
push str.Back
push dword [ebp - 0x20c]
jmp 0x42b56d
mov eax, dword [ebp - 0x210]
push 7
push 0
push 0
cwde
push str.Back
add eax, 0x12c
push eax
movsx eax, di
mov ecx, esi
add eax, 0x19
push eax
call fcn.0045dd00
mov ecx, dword [ebp - 0x228]
mov eax, ecx
sub eax, dword [0x5fd348]
cmp eax, 0x64
jbe 0x42b59a
inc byte [esi + 0x18dab6]
mov dword [0x5fd348], ecx
cmp byte [esi + 0x18dab6], 8
jl 0x42b5c9
mov al, byte [esi + 0x18dab5]
inc al
mov byte [esi + 0x18dab5], al
cmp al, 8
jle 0x42b5c2
inc byte [esi + 0x18dab4]
mov byte [esi + 0x18dab5], 1
mov byte [esi + 0x18dab6], 0
cmp byte [esi + 0x18dab4], 8
jle case.default.0x429191
mov byte [esi + 0x18dab4], 1
jmp case.default.0x429191
mov esi, dword [edi + 0x14431c]
lea eax, [ebp - 0x44]
push 0x32
push 0
push eax
mov dword [ebp - 0x228], esi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x1dc], 0
xorps xmm0, xmm0
mov dword [ebp - 0x1d8], 0
lea ecx, [ebp - 0x1ec]
movups xmmword [ebp - 0x1ec], xmm0
push 0x1a
push str.DRAW_DIALOGBOX_GUILDLIST21
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x34
push eax
lea eax, [ebp - 0x234]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x42b65a
mov ecx, dword [ecx]
mov eax, dword [edi + esi*4 + 0x139d64]
add eax, 4
push eax
push ecx
lea eax, [ebp - 0x44]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1ec]
call fcn.00411640
mov ecx, dword [ebp - 0x210]
push 0
push 0xc8
movsx esi, cx
mov ecx, dword [ebp - 0x214]
add esi, 0x2d
push 0xc8
movsx edx, cx
movsx eax, cx
add edx, 0xf0
push 0xdc
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x20c], edx
push ecx
push esi
add eax, 0x19
mov ecx, edi
push edx
push eax
mov dword [ebp - 0x21c], eax
call fcn.0045d060
mov ecx, dword [ebp - 0x214]
lea eax, [ebp - 0x44]
push 0
push 0xc8
push 0xc8
push 0xdc
push eax
movsx eax, cx
add eax, 0xf1
push esi
push eax
movsx eax, cx
mov ecx, edi
add eax, 0x1a
push eax
call fcn.0045d060
mov ecx, dword [ebp - 0x210]
xor eax, eax
movsx esi, cx
mov dword [ebp - 0x208], eax
add esi, 0x55
nop dword [eax + eax]
cmp eax, 9
ja case.0x42b729.9
jmp dword [eax*4 + 0x42c2d4]
push 0x12
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push str.DEF_MSG_GUILDRANK0
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0x1d8], 0
movups xmmword [ebp - 0x1ec], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x35
push eax
lea eax, [ebp - 0x234]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x42b78c
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x150]
push 0xff
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1ec]
call fcn.00411640
jmp 0x42bd23
push 0x12
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push str.DEF_MSG_GUILDRANK1
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0x1d8], 0
movups xmmword [ebp - 0x1ec], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x36
push eax
lea eax, [ebp - 0x23c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x42b814
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x150]
push 0xff
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1ec]
call fcn.00411640
jmp 0x42bd23
push 0x12
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push str.DEF_MSG_GUILDRANK2
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0x1d8], 0
movups xmmword [ebp - 0x1ec], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x37
push eax
lea eax, [ebp - 0x274]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x42b89c
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x150]
push 0xff
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1ec]
call fcn.00411640
jmp 0x42bd23
push 0x12
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push str.DEF_MSG_GUILDRANK3
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0x1d8], 0
movups xmmword [ebp - 0x1ec], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x38
push eax
lea eax, [ebp - 0x26c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x42b924
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x150]
push 0xff
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
mov eax, dword [ebp - 0x1d8]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
cmp eax, 0xf
jbe 0x42bd23
push eax
push dword [ebp - 0x1ec]
lea eax, [ebp - 0x1ec]
push eax
call fcn.0047d060
add esp, 0xc
jmp 0x42bd23
push 0x12
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push str.DEF_MSG_GUILDRANK4
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0x1d8], 0
movups xmmword [ebp - 0x1ec], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x39
push eax
lea eax, [ebp - 0x264]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x42b9c6
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x150]
push 0xff
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1ec]
call fcn.00411640
jmp 0x42bd23
push 0x12
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push str.DEF_MSG_GUILDRANK5
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0x1d8], 0
movups xmmword [ebp - 0x1ec], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x3a
push eax
lea eax, [ebp - 0x25c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x42ba4e
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x150]
push 0xff
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1ec]
call fcn.00411640
jmp 0x42bd23
push 0x12
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push str.DEF_MSG_GUILDRANK6
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0x1d8], 0
movups xmmword [ebp - 0x1ec], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x3b
push eax
lea eax, [ebp - 0x254]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x42bad6
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x150]
push 0xff
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1ec]
call fcn.00411640
jmp 0x42bd23
push 0x12
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push str.DEF_MSG_GUILDRANK7
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0x1d8], 0
movups xmmword [ebp - 0x1ec], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x3c
push eax
lea eax, [ebp - 0x24c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x42bb5e
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x150]
push 0xff
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
mov eax, dword [ebp - 0x1d8]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
cmp eax, 0xf
jbe 0x42bd23
push eax
push dword [ebp - 0x1ec]
lea eax, [ebp - 0x1ec]
push eax
call fcn.0047d060
add esp, 0xc
jmp 0x42bd23
push 0x12
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push str.DEF_MSG_GUILDRANK8
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0x1d8], 0
movups xmmword [ebp - 0x1ec], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x3d
push eax
lea eax, [ebp - 0x27c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x42bc00
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x150]
push 0xff
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
mov eax, dword [ebp - 0x1d8]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
cmp eax, 0xf
jbe 0x42bd23
push eax
push dword [ebp - 0x1ec]
lea eax, [ebp - 0x1ec]
push eax
call fcn.0047d060
add esp, 0xc
jmp 0x42bd23
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push 0x20
movups xmmword [ebp - 0x1ec], xmm0
mov dword [ebp - 0x1d8], 0
call fcn.005aa520
movups xmm0, xmmword [str.DEF_MSG_GUILDRANK9]
mov dword [ebp - 0x1ec], eax
add esp, 4
mov dword [ebp - 0x1dc], 0x12
mov dword [ebp - 0x1d8], 0x1f
movups xmmword [eax], xmm0
mov cx, word [0x5c7f00]
mov word [eax + 0x10], cx
mov byte [eax + 0x12], 0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x3e
push eax
lea eax, [ebp - 0x244]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x42bccd
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x150]
push 0xff
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
mov ecx, dword [ebp - 0x1d8]
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x42bd23
mov edx, dword [ebp - 0x1ec]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42bd19
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42c252
push ecx
push edx
call fcn.005aa4e8
add esp, 8
mov eax, dword [ebp - 0x228]
mov ecx, dword [ebp - 0x208]
mov eax, dword [edi + eax*4 + 0x139d64]
cmp byte [eax + ecx + 0x19], 0
je 0x42bdaa
cmp byte [edi + 0x189666], 0
jne 0x42bdaa
mov ax, word [ebp + 8]
mov edx, dword [ebp - 0x21c]
mov ecx, dword [ebp - 0x20c]
cwde
cmp eax, edx
jl 0x42bd96
cmp eax, ecx
jg 0x42bd96
mov ax, word [ebp + 0xc]
cwde
mov dword [ebp - 0x220], eax
cmp eax, esi
jl 0x42bd96
lea eax, [esi + 0xe]
cmp dword [ebp - 0x220], eax
jg 0x42bd96
push 0
push 0xff
push 0xff
push 0xff
lea eax, [ebp - 0x150]
push eax
push esi
push ecx
push edx
jmp 0x42bdc6
push 0
push 0x32
push 0
push 4
lea eax, [ebp - 0x150]
push eax
push esi
push ecx
push edx
jmp 0x42bdc6
push 0
push 0x41
push 0x41
push 0x41
lea eax, [ebp - 0x150]
push eax
push esi
push dword [ebp - 0x20c]
push dword [ebp - 0x21c]
mov ecx, edi
call fcn.0045d060
mov eax, dword [ebp - 0x208]
add esi, 0x14
inc eax
mov dword [ebp - 0x208], eax
cmp eax, 0xa
jl 0x42b720
mov ecx, dword [ebp - 0x214]
movsx edx, word [ebp + 8]
movsx eax, cx
add eax, 0x20
cmp edx, eax
jl 0x42be51
movsx eax, cx
add eax, 0x5f
cmp edx, eax
jg 0x42be51
mov edx, dword [ebp - 0x210]
mov ax, word [ebp + 0xc]
movsx esi, dx
add esi, 0x12c
cwde
cmp eax, esi
jl 0x42be51
mov edi, dword [ebp - 0x218]
movsx eax, dx
movsx edx, word [ebp + 0xc]
add eax, 0x140
cmp edx, eax
jg 0x42be51
push 0x14
push 6
push 6
push str.Back
movsx eax, cx
mov ecx, edi
push esi
add eax, 0x19
push eax
call fcn.0045dd00
jmp case.default.0x429191
mov eax, dword [ebp - 0x210]
push 7
push 0
push 0
cwde
add eax, 0x12c
push str.Back
push eax
movsx eax, cx
mov ecx, edi
add eax, 0x19
push eax
call fcn.0045dd00
jmp case.default.0x429191
push 0x1a
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push str.DRAW_DIALOGBOX_GUILDLIST15
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0x1d8], 0
movups xmmword [ebp - 0x1ec], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x3f
push eax
lea eax, [ebp - 0x244]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov ecx, dword [eax]
add ecx, 0x20
cmp dword [ecx + 0x14], 0xf
jbe 0x42bed8
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x210]
mov esi, dword [ebp - 0x214]
push 0
push 0xc8
push 0xc8
cwde
push 0xdc
add eax, 0x2d
movsx edx, si
push ecx
mov dword [ebp - 0x20c], eax
add edx, 0xf0
push dword [ebp - 0x20c]
movsx eax, si
mov ecx, edi
add eax, 0x19
mov dword [ebp - 0x208], edx
push edx
push eax
mov dword [ebp - 0x218], eax
call fcn.0045d060
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0x1a
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push str.DRAW_DIALOGBOX_GUILDLIST15
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0x1d8], 0
movups xmmword [ebp - 0x1ec], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x40
push eax
lea eax, [ebp - 0x27c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x42bf98
mov eax, dword [eax]
push 0
push 0xc8
push 0xc8
push 0xdc
push eax
push dword [ebp - 0x20c]
movsx eax, si
mov ecx, edi
add eax, 0xf1
push eax
movsx eax, si
add eax, 0x1a
push eax
call fcn.0045d060
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0x1a
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push str.DRAW_DIALOGBOX_GUILDLIST26
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0x1d8], 0
movups xmmword [ebp - 0x1ec], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x1ec]
mov dword [ebp - 4], 0x41
push eax
lea eax, [ebp - 0x244]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x42c035
mov eax, dword [eax]
push 0
push 0
push 0
push 0
push eax
mov eax, dword [ebp - 0x210]
mov ecx, edi
cwde
add eax, 0x5f
push eax
push dword [ebp - 0x208]
push dword [ebp - 0x218]
call fcn.0045d060
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 4], 0xffffffff
call fcn.00411640
push 0x1a
xorps xmm0, xmm0
mov dword [ebp - 0x1f4], 0
push str.DRAW_DIALOGBOX_GUILDLIST27
lea ecx, [ebp - 0x204]
mov dword [ebp - 0x1f0], 0
movups xmmword [ebp - 0x204], xmm0
call fcn.0040b5c0
lea eax, [ebp - 0x204]
mov dword [ebp - 4], 0x42
push eax
lea eax, [ebp - 0x23c]
mov ecx, 0x5fd3c4
push eax
call fcn.0040e380
mov eax, dword [eax]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x42c0ca
mov eax, dword [eax]
push 0
push 0
push 0
push 0
push eax
mov eax, dword [ebp - 0x210]
mov ecx, edi
cwde
add eax, 0x6e
push eax
push dword [ebp - 0x208]
push dword [ebp - 0x218]
call fcn.0045d060
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 4], 0xffffffff
cmp eax, 0xf
jbe 0x42c119
push eax
push dword [ebp - 0x204]
lea eax, [ebp - 0x204]
push eax
call fcn.0047d060
add esp, 0xc
movsx ecx, word [ebp + 8]
movsx eax, si
add eax, 0x1e
mov dword [ebp - 0x1f4], 0
mov dword [ebp - 0x1f0], 0xf
mov byte [ebp - 0x204], 0
mov dword [ebp - 0x218], eax
cmp ecx, eax
jl 0x42c1a4
movsx eax, si
add eax, 0x68
cmp ecx, eax
jg 0x42c1a4
mov ecx, dword [ebp - 0x210]
mov ax, word [ebp + 0xc]
movsx edx, cx
add edx, 0x124
cwde
mov dword [ebp - 0x20c], edx
mov dword [ebp - 0x208], eax
cmp eax, edx
jl 0x42c1a4
movsx eax, cx
add eax, 0x138
cmp dword [ebp - 0x208], eax
jg 0x42c1a4
push 0
push 0
push 0x13
push edx
push dword [ebp - 0x218]
mov ecx, edi
push 0x47
call fcn.0043d1d0
mov edx, dword [ebp - 0x208]
jmp 0x42c1d0
mov eax, dword [ebp - 0x210]
mov ecx, edi
push 0
push 0
cwde
push 0x12
add eax, 0x124
push eax
push dword [ebp - 0x218]
mov dword [ebp - 0x20c], eax
push 0x47
call fcn.0043d1d0
movsx edx, word [ebp + 0xc]
movsx ecx, si
add ecx, 0x9a
mov dword [ebp - 0x208], ecx
movsx ecx, word [ebp + 8]
cmp ecx, dword [ebp - 0x208]
jl 0x42c219
movsx eax, si
add eax, 0xe4
cmp ecx, eax
mov ecx, dword [ebp - 0x20c]
jg 0x42c21f
cmp edx, ecx
jl 0x42c21f
mov eax, dword [ebp - 0x210]
cwde
add eax, 0x138
cmp edx, eax
jg 0x42c21f
push 0
push 0
push 3
jmp 0x42c225
mov ecx, dword [ebp - 0x20c]
push 0
push 0
push 2
push ecx
push dword [ebp - 0x208]
mov ecx, edi
push 0x47
call fcn.0043d1d0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005aa550
mov esp, ebp
pop ebp
ret 0x10
call fcn.005ac169
nop
cwde
xchg ecx, eax
inc edx
add byte [edi + 0x32004292], dl
xchg ebx, eax
inc edx
add ch, cl
xchg ebx, eax
inc edx
add byte [esi - 0x6c], ah
inc edx
add byte [ecx], al
xchg ebp, eax
inc edx
add byte [ebp + edx*4 - 0x61a5ffbe], bl
inc edx
add byte [ebx - 0x58], dl
inc edx
add dl, ah
mov ch, 0x42
add byte [esi + edi*4 + 0x42], bh
add byte [ebx - 0xbffbd5d], ch
mov dword [0xa43d0042], eax
inc edx
add byte [esi + 0x280042a4], al
movsd dword es:[edi], dword [esi]
inc edx
add byte [ecx - 0x5b], dh
inc edx
add byte [edx + 0x30042a5], bh
cmpsb byte [esi], byte es:[edi]
inc edx
add byte [esi + 0x42], cl
add byte [edx - 0x5cffbd5a], dl
test al, 0x42
add cl, bh
test al, 0x42
add byte [edx], dl
test eax, 0xa92b0042
inc edx
add byte [edi - 0x57], al
inc edx
add byte [ebx - 0x57], ah
inc edx
add byte [edi - 0x57], bh
inc edx
add byte [ebx - 0x48ffbd57], bl
test eax, 0xa9d30042
inc edx
add byte [eax], dh
mov bh, 0x42
add byte [eax + 0x400042b7], bh
mov eax, 0xb8c80042
inc edx
add byte [edx - 0x47], ch
inc edx
add dl, dh
mov ecx, 0xba7a0042
inc edx
add byte [edx], al
mov ebx, 0xbba40042
inc edx
add byte [esi - 0x44], al
inc edx
add ah, cl
int3