Function at 0x82486f
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, 0xc3f9e4
call fcn.00be12c8
sub esp, 0x19c
push ebx
push esi
xor ebx, ebx
push edi
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 4], 1
lea eax, [ebp - 0xd8]
push eax
call dword [sym.imp.oleaut32.dll_VariantInit]
mov dword [ebp - 0x2c], ebx
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 4
mov dword [ebp - 0x1c], ebx
call fcn.0083187a
mov dword [ebp - 0x80], ebx
mov esi, dword [ebp + 0xc]
push esi
lea eax, [ebp - 0x80]
push str._07d
push eax
mov byte [ebp - 4], 6
call fcn.0044e655
mov eax, dword [ebp - 0x1c]
add esp, 8
mov dword [eax], esi
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x5b5
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
push ecx
lea eax, [ebp - 0x80]
mov ecx, esp
mov dword [ebp - 0x8c], esp
push eax
mov byte [ebp - 4], 7
call fcn.0042d265
push ecx
lea eax, [ebp + 0x14]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.0042d1cc
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 4], 6
call fcn.00ae266d
add esp, 0x10
push eax
mov eax, dword [ebp - 0x1c]
lea ecx, [eax + 4]
mov byte [ebp - 4], 8
call fcn.0041b94d
mov eax, dword [ebp - 0x10]
cmp eax, ebx
mov byte [ebp - 4], 6
je 0x824942
add eax, 0xfffffff4
push eax
call fcn.0042db7e
pop ecx
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x520
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
push ecx
lea eax, [ebp - 0x80]
mov ecx, esp
mov dword [ebp - 0x8c], esp
push eax
mov byte [ebp - 4], 9
call fcn.0042d265
push ecx
lea eax, [ebp + 0x14]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.0042d1cc
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 4], 6
call fcn.00ae266d
add esp, 0x10
push eax
mov eax, dword [ebp - 0x1c]
lea ecx, [eax + 8]
mov byte [ebp - 4], 0xa
call fcn.0041b94d
mov eax, dword [ebp - 0x10]
cmp eax, ebx
mov byte [ebp - 4], 6
je 0x8249b4
add eax, 0xfffffff4
push eax
call fcn.0042db7e
pop ecx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x882
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 6
call fcn.00402691
mov ecx, eax
call fcn.00403881
push eax
mov byte [ebp - 4], 0xc
call fcn.004175f4
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov esi, eax
call fcn.0083172f
mov dword [eax + 0xc], esi
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], 6
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x824a15
push eax
call fcn.00be0541
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x883
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 6
call fcn.00402691
mov ecx, eax
call fcn.00403881
push eax
mov byte [ebp - 4], 0xe
call fcn.004175f4
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov esi, eax
call fcn.0083172f
mov dword [eax + 0x14], esi
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], 6
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x824a76
push eax
call fcn.00be0541
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x164f
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 6
call fcn.00402691
mov ecx, eax
call fcn.00403881
push eax
mov byte [ebp - 4], 0x10
call fcn.004175f4
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov esi, eax
call fcn.0083172f
mov dword [eax + 0x18], esi
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], 6
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x824ad7
push eax
call fcn.00be0541
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0xdab
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 6
call fcn.00402691
mov ecx, eax
call fcn.00403881
push eax
mov byte [ebp - 4], 0x12
call fcn.004175f4
mov esi, eax
pop ecx
neg esi
pop ecx
sbb esi, esi
lea ecx, [ebp - 0x20]
neg esi
call fcn.0083172f
mov dword [eax + 0x30], esi
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], 6
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x824b3e
push eax
call fcn.00be0541
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x1879
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 6
call fcn.00402691
mov ecx, eax
call fcn.00403881
push eax
mov byte [ebp - 4], 0x14
call fcn.004175f4
mov esi, eax
pop ecx
neg esi
pop ecx
sbb esi, esi
lea ecx, [ebp - 0x20]
neg esi
call fcn.0083172f
mov dword [eax + 0x34], esi
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], 6
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x824ba5
push eax
call fcn.00be0541
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x1891
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 6
call fcn.00402691
mov ecx, eax
call fcn.00403881
push eax
mov byte [ebp - 4], 0x16
call fcn.004175f4
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov esi, eax
call fcn.0083172f
mov dword [eax + 0x38], esi
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], 6
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x824c06
push eax
call fcn.00be0541
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0xa91
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 6
call fcn.00402691
mov ecx, eax
call fcn.00403881
push eax
mov byte [ebp - 4], 0x18
call fcn.004175f4
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov esi, eax
call fcn.0083172f
mov dword [eax + 0x3c], esi
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], 6
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x824c67
push eax
call fcn.00be0541
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x14ff
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 6
call fcn.00402691
mov ecx, eax
call fcn.00403881
push eax
mov byte [ebp - 4], 0x1a
call fcn.004175f4
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov esi, eax
call fcn.0083172f
mov dword [eax + 0x40], esi
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], 6
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x824cc8
push eax
call fcn.00be0541
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x1868
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 6
call fcn.00402691
mov ecx, eax
call fcn.00403881
mov ecx, eax
mov byte [ebp - 4], 0x1c
call fcn.00403308
cmp eax, ebx
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x64], ebx
je 0x824d2b
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x64]
call fcn.00405935
cmp eax, ebx
jge 0x824d2b
cmp eax, 0x80004002
je 0x824d2b
push eax
call fcn.00be0541
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], 0x1e
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x824d43
push eax
call fcn.00be0541
push ebx
lea ecx, [ebp - 0x64]
call fcn.00417238
test al, al
jne 0x824dee
xor edi, edi
cmp dword [ebp - 0x64], ebx
jne 0x824d65
push 0x80004003
call fcn.00be0541
mov ecx, dword [ebp - 0x64]
call fcn.00407dd3
cmp edi, eax
jae 0x824dee
push 0x20
pop eax
call fcn.00be1990
mov eax, esp
push eax
push edi
call fcn.004173e6
pop ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.004033d8
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x1e
call fcn.00402691
mov ecx, eax
call fcn.00403881
push ecx
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
mov byte [ebp - 4], 0x20
call fcn.00407d0b
call fcn.004cd0dc
mov esi, eax
lea eax, [ebp - 0x60]
push eax
mov byte [ebp - 4], 0x1e
call fcn.00402973
cmp eax, ebx
pop ecx
pop ecx
jge 0x824dd5
push eax
call fcn.00be0541
cmp esi, ebx
jl 0x824de8
mov eax, dword [ebp - 0x1c]
push 0xffffffffffffffff
lea ecx, [eax + 0x1c]
call fcn.00487929
mov dword [eax], esi
inc edi
jmp 0x824d56
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x15da
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x1e
call fcn.00402691
mov ecx, eax
call fcn.00403881
mov ecx, eax
mov byte [ebp - 4], 0x22
call fcn.00403308
cmp eax, ebx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x7c], ebx
je 0x824e51
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x7c]
call fcn.00405935
cmp eax, ebx
jge 0x824e51
cmp eax, 0x80004002
je 0x824e51
push eax
call fcn.00be0541
lea eax, [ebp - 0x60]
push eax
mov byte [ebp - 4], 0x24
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x824e69
push eax
call fcn.00be0541
push ebx
lea ecx, [ebp - 0x7c]
call fcn.00417238
test al, al
jne 0x824ec9
push 0x20
pop eax
call fcn.00be1990
mov eax, esp
push eax
push ebx
call fcn.004173e6
pop ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.004033d8
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x24
call fcn.00402691
mov ecx, eax
call fcn.00403881
mov dword [ebp - 0x50], 1
push ecx
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
mov byte [ebp - 4], 0x26
call fcn.00407d0b
call fcn.004cd0dc
pop ecx
jmp 0x824ecb
xor eax, eax
test byte [ebp - 0x50], 1
mov ecx, dword [ebp - 0x1c]
mov dword [ecx + 0x20], eax
mov dword [ebp - 4], 0x24
je 0x824ef6
and dword [ebp - 0x50], 0xfffffffe
lea eax, [ebp - 0x3c]
push eax
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x824ef6
push eax
call fcn.00be0541
mov eax, dword [ebp - 0x1c]
push ebx
or esi, 0xffffffff
mov dword [eax + 0x48], esi
mov eax, dword [ebp - 0x1c]
push ebx
push ecx
mov dword [eax + 0x4c], esi
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x1609
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x24
call fcn.00402691
mov ecx, eax
call fcn.00403881
mov ecx, eax
mov byte [ebp - 4], 0x28
call fcn.00403308
cmp eax, ebx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x78], ebx
je 0x824f68
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x78]
call fcn.00405935
cmp eax, ebx
jge 0x824f68
cmp eax, 0x80004002
je 0x824f68
push eax
call fcn.00be0541
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], 0x2a
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x824f80
push eax
call fcn.00be0541
push ebx
lea ecx, [ebp - 0x78]
call fcn.00417238
test al, al
jne 0x825043
push esi
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.delay
call fcn.004033d8
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x2a
call fcn.00402691
mov ecx, eax
call fcn.00403881
push eax
mov byte [ebp - 4], 0x2c
call fcn.004175f4
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov edi, eax
call fcn.0083172f
mov dword [eax + 0x48], edi
lea eax, [ebp - 0x60]
push eax
mov byte [ebp - 4], 0x2a
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x824fea
push eax
call fcn.00be0541
push esi
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.hold
call fcn.004033d8
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x2a
call fcn.00402691
mov ecx, eax
call fcn.00403881
push eax
mov byte [ebp - 4], 0x2e
call fcn.004175f4
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov esi, eax
call fcn.0083172f
mov dword [eax + 0x4c], esi
lea eax, [ebp - 0x60]
push eax
mov byte [ebp - 4], 0x2a
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x825043
push eax
call fcn.00be0541
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x5c9
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x2a
call fcn.00402691
mov ecx, eax
call fcn.00403881
push eax
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x30
call fcn.005694d3
lea eax, [ebp - 0x60]
push eax
mov byte [ebp - 4], 0x2a
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x82509a
push eax
call fcn.00be0541
cmp word [ebp - 0xd8], 8
mov eax, dword [ebp - 0xd0]
je 0x8250af
mov eax, 0xd808dc
mov ecx, dword [ebp - 0x1c]
add ecx, 0x10
push ecx
push eax
call fcn.00826d48
test eax, eax
pop ecx
pop ecx
jne 0x8250d7
push 0xc99538
lea eax, [ebp + 0xc]
push eax
mov dword [ebp + 0xc], 0x80004005
call fcn.00be12e7
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x885
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x2a
call fcn.00402691
mov ecx, eax
call fcn.00403881
push eax
mov byte [ebp - 4], 0x32
call fcn.004175f4
mov esi, eax
pop ecx
neg esi
pop ecx
sbb esi, esi
lea ecx, [ebp - 0x20]
neg esi
call fcn.0083172f
mov dword [eax + 0x7c], esi
lea eax, [ebp - 0x60]
push eax
mov byte [ebp - 4], 0x2a
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x82513e
push eax
call fcn.00be0541
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x5db
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x2a
call fcn.00402691
mov ecx, eax
call fcn.00403881
mov di, word [eax]
lea eax, [ebp - 0x60]
push eax
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x825184
push eax
call fcn.00be0541
cmp di, bx
mov esi, 0x2710
je 0x8251f9
lea eax, [ebp - 0x24]
push 0x886
push eax
call fcn.00877d11
mov ecx, eax
call fcn.004069e7
mov ecx, dword [eax]
mov eax, dword [ebp + 0xc]
push eax
cdq
mov edi, esi
idiv edi
mov byte [ebp - 4], 0x34
push eax
push ecx
lea eax, [ebp - 0x2c]
push eax
call fcn.00419a49
add esp, 0x10
push dword [eax]
lea ecx, [ebp - 0x10]
call fcn.00402c3e
mov eax, dword [ebp - 0x1c]
lea ecx, [eax + 0x80]
lea eax, [ebp - 0x10]
push eax
call fcn.00402cf1
lea ecx, [ebp - 0x10]
call fcn.00402dc1
mov eax, dword [ebp - 0x24]
cmp eax, ebx
mov byte [ebp - 4], 0x2a
je 0x8251f9
add eax, 0xfffffff4
push eax
call fcn.004033fd
pop ecx
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x13d2
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x2a
call fcn.00402691
mov ecx, eax
call fcn.00403881
mov di, word [eax]
lea eax, [ebp - 0x60]
push eax
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x82523f
push eax
call fcn.00be0541
cmp di, bx
je 0x8252af
lea eax, [ebp - 0x24]
push 0x13e8
push eax
call fcn.00877d11
mov ecx, eax
call fcn.004069e7
mov ecx, dword [eax]
mov eax, dword [ebp + 0xc]
push eax
cdq
mov edi, esi
idiv edi
mov byte [ebp - 4], 0x36
push eax
push ecx
lea eax, [ebp - 0x2c]
push eax
call fcn.00419a49
add esp, 0x10
push dword [eax]
lea ecx, [ebp - 0x10]
call fcn.00402c3e
mov eax, dword [ebp - 0x1c]
lea ecx, [eax + 0x84]
lea eax, [ebp - 0x10]
push eax
call fcn.00402cf1
lea ecx, [ebp - 0x10]
call fcn.00402dc1
mov eax, dword [ebp - 0x24]
cmp eax, ebx
mov byte [ebp - 4], 0x2a
je 0x8252af
add eax, 0xfffffff4
push eax
call fcn.004033fd
pop ecx
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x884
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x2a
call fcn.00402691
mov ecx, eax
call fcn.00403881
mov di, word [eax]
lea eax, [ebp - 0x60]
push eax
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x8252f5
push eax
call fcn.00be0541
cmp di, bx
je 0x825365
lea eax, [ebp - 0x24]
push 0x889
push eax
call fcn.00877d11
mov ecx, eax
call fcn.004069e7
mov ecx, dword [eax]
mov eax, dword [ebp + 0xc]
push eax
cdq
mov edi, esi
idiv edi
mov byte [ebp - 4], 0x38
push eax
push ecx
lea eax, [ebp - 0x2c]
push eax
call fcn.00419a49
add esp, 0x10
push dword [eax]
lea ecx, [ebp - 0x10]
call fcn.00402c3e
mov eax, dword [ebp - 0x1c]
lea ecx, [eax + 0x88]
lea eax, [ebp - 0x10]
push eax
call fcn.00402cf1
lea ecx, [ebp - 0x10]
call fcn.00402dc1
mov eax, dword [ebp - 0x24]
cmp eax, ebx
mov byte [ebp - 4], 0x2a
je 0x825365
add eax, 0xfffffff4
push eax
call fcn.004033fd
pop ecx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x1895
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x2a
call fcn.00402691
mov ecx, eax
call fcn.00403881
mov ecx, eax
mov byte [ebp - 4], 0x3a
call fcn.00403308
cmp eax, ebx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x74], ebx
je 0x8253c8
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x74]
call fcn.00405935
cmp eax, ebx
jge 0x8253c8
cmp eax, 0x80004002
je 0x8253c8
push eax
call fcn.00be0541
lea eax, [ebp - 0x60]
push eax
mov byte [ebp - 4], 0x3c
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x8253e0
push eax
call fcn.00be0541
push ebx
lea ecx, [ebp - 0x74]
call fcn.00417238
test al, al
jne 0x825520
lea eax, [ebp - 0x28]
push 0x8f5
push eax
call fcn.00877d11
mov ecx, eax
call fcn.004069e7
mov ecx, dword [eax]
mov eax, dword [ebp + 0xc]
push eax
cdq
mov edi, esi
idiv edi
mov byte [ebp - 4], 0x3d
push eax
push ecx
lea eax, [ebp - 0x2c]
push eax
call fcn.00419a49
add esp, 0x10
push dword [eax]
lea ecx, [ebp - 0x10]
call fcn.00402c3e
mov eax, dword [ebp - 0x1c]
lea ecx, [eax + 0xa8]
lea eax, [ebp - 0x10]
push eax
call fcn.00402cf1
lea ecx, [ebp - 0x10]
call fcn.00402dc1
mov eax, dword [ebp - 0x28]
cmp eax, ebx
mov byte [ebp - 4], 0x3c
je 0x82545c
add eax, 0xfffffff4
push eax
call fcn.004033fd
pop ecx
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x1868
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x3c
call fcn.00402691
mov ecx, eax
call fcn.00403881
push ecx
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
mov byte [ebp - 4], 0x3f
call fcn.00407d0b
call fcn.004cd0dc
mov ecx, dword [ebp - 0x1c]
mov dword [ecx + 0x24], eax
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], 0x3c
call fcn.00402973
cmp eax, ebx
pop ecx
pop ecx
jge 0x8254bf
push eax
call fcn.00be0541
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x87a
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x3c
call fcn.00402691
mov ecx, eax
call fcn.00403881
push eax
mov byte [ebp - 4], 0x41
call fcn.004175f4
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov edi, eax
call fcn.0083172f
mov dword [eax + 0x28], edi
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], 0x3c
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x825520
push eax
call fcn.00be0541
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0xd96
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x3c
call fcn.00402691
mov ecx, eax
call fcn.00403881
mov ecx, eax
mov byte [ebp - 4], 0x43
call fcn.00403308
cmp eax, ebx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x90], ebx
je 0x825589
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x90]
call fcn.00405935
cmp eax, ebx
jge 0x825589
cmp eax, 0x80004002
je 0x825589
push eax
call fcn.00be0541
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], 0x45
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x8255a1
push eax
call fcn.00be0541
push ebx
lea ecx, [ebp - 0x90]
call fcn.00417238
test al, al
jne 0x82561c
lea eax, [ebp - 0x24]
push 0xd95
push eax
call fcn.00877d11
mov ecx, eax
call fcn.004069e7
mov ecx, dword [eax]
mov eax, dword [ebp + 0xc]
push eax
cdq
mov edi, esi
idiv edi
mov byte [ebp - 4], 0x46
push eax
push ecx
lea eax, [ebp - 0x2c]
push eax
call fcn.00419a49
add esp, 0x10
push dword [eax]
lea ecx, [ebp - 0x10]
call fcn.00402c3e
mov eax, dword [ebp - 0x1c]
lea ecx, [eax + 0xac]
lea eax, [ebp - 0x10]
push eax
call fcn.00402cf1
lea ecx, [ebp - 0x10]
call fcn.00402dc1
mov eax, dword [ebp - 0x24]
cmp eax, ebx
mov byte [ebp - 4], 0x45
je 0x82561c
add eax, 0xfffffff4
push eax
call fcn.004033fd
pop ecx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0xdd8
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x45
call fcn.00402691
mov ecx, eax
call fcn.00403881
mov ecx, eax
mov byte [ebp - 4], 0x48
call fcn.00403308
cmp eax, ebx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x94], ebx
je 0x825685
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x94]
call fcn.00405935
cmp eax, ebx
jge 0x825685
cmp eax, 0x80004002
je 0x825685
push eax
call fcn.00be0541
lea eax, [ebp - 0x60]
push eax
mov byte [ebp - 4], 0x4a
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x82569d
push eax
call fcn.00be0541
push ebx
lea ecx, [ebp - 0x94]
call fcn.00417238
test al, al
jne 0x82570f
lea eax, [ebp - 0x28]
push 0xdd9
push eax
call fcn.00877d11
mov ecx, eax
call fcn.004069e7
mov ecx, dword [eax]
mov eax, dword [ebp + 0xc]
push eax
cdq
mov edi, esi
idiv edi
mov byte [ebp - 4], 0x4b
push eax
push ecx
lea eax, [ebp - 0x2c]
push eax
call fcn.00419a49
add esp, 0x10
push dword [eax]
lea ecx, [ebp - 0x10]
call fcn.00402c3e
mov eax, dword [ebp - 0x1c]
lea ecx, [eax + 0xb0]
lea eax, [ebp - 0x10]
push eax
call fcn.00402cf1
lea ecx, [ebp - 0x10]
call fcn.00402dc1
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x4a
call fcn.004026b4
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x1887
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x4a
call fcn.00402691
mov ecx, eax
call fcn.00403881
mov ecx, eax
mov byte [ebp - 4], 0x4d
call fcn.00403308
cmp eax, ebx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x48], ebx
je 0x825772
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x48]
call fcn.00405935
cmp eax, ebx
jge 0x825772
cmp eax, 0x80004002
je 0x825772
push eax
call fcn.00be0541
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], 0x4f
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x82578a
push eax
call fcn.00be0541
push ebx
lea ecx, [ebp - 0x48]
call fcn.00417238
test al, al
jne 0x8258b0
cmp dword [ebp - 0x48], ebx
jne 0x8257aa
push 0x80004003
call fcn.00be0541
mov ecx, dword [ebp - 0x48]
call fcn.00407dd3
test eax, eax
je 0x8258b0
lea eax, [ebp - 0x24]
push 0x888
push eax
call fcn.00877d11
mov ecx, eax
call fcn.004069e7
mov ecx, dword [eax]
mov eax, dword [ebp + 0xc]
cdq
mov edi, esi
idiv edi
push dword [ebp + 0xc]
mov byte [ebp - 4], 0x50
push eax
mov dword [ebp - 0x18], eax
push ecx
lea eax, [ebp - 0x2c]
push eax
call fcn.00419a49
add esp, 0x10
push dword [eax]
lea ecx, [ebp - 0x10]
call fcn.00402c3e
mov eax, dword [ebp - 0x1c]
lea ecx, [eax + 0x8c]
lea eax, [ebp - 0x10]
push eax
call fcn.00402cf1
lea ecx, [ebp - 0x10]
call fcn.00402dc1
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x4f
call fcn.004026b4
xor edi, edi
cmp dword [ebp - 0x48], ebx
jne 0x825832
push 0x80004003
call fcn.00be0541
mov ecx, dword [ebp - 0x48]
call fcn.00407dd3
cmp edi, eax
jae 0x8258b0
lea eax, [ebp - 0x24]
push 0x88b
push eax
call fcn.00877d11
mov ecx, eax
call fcn.004069e7
mov eax, dword [eax]
push edi
push dword [ebp + 0xc]
mov byte [ebp - 4], 0x51
push dword [ebp - 0x18]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00419a49
add esp, 0x14
push dword [eax]
lea ecx, [ebp - 0x10]
call fcn.00402c3e
mov eax, dword [ebp - 0x1c]
push 0xffffffffffffffff
lea ecx, [eax + 0x90]
mov byte [ebp - 4], 0x52
call fcn.005571a1
lea ecx, [ebp - 0x10]
push ecx
mov ecx, eax
call fcn.00402cf1
lea ecx, [ebp - 0x10]
call fcn.00402dc1
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x4f
call fcn.004026b4
inc edi
jmp 0x825823
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x389
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x4f
call fcn.00402691
mov ecx, eax
call fcn.00403881
mov ecx, eax
mov byte [ebp - 4], 0x54
call fcn.00403308
cmp eax, ebx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x88], ebx
je 0x825919
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x88]
call fcn.00405935
cmp eax, ebx
jge 0x825919
cmp eax, 0x80004002
je 0x825919
push eax
call fcn.00be0541
lea eax, [ebp - 0x60]
push eax
mov byte [ebp - 4], 0x56
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x825931
push eax
call fcn.00be0541
cmp dword [ebp - 0x88], ebx
je 0x825a03
lea eax, [ebp - 0x28]
push 0x88d
push eax
call fcn.00877d11
mov ecx, eax
call fcn.004069e7
mov ecx, dword [eax]
mov eax, dword [ebp + 0xc]
push eax
cdq
mov edi, esi
idiv edi
mov byte [ebp - 4], 0x57
push eax
push ecx
lea eax, [ebp - 0x2c]
push eax
call fcn.00419a49
add esp, 0x10
push dword [eax]
lea ecx, [ebp - 0x10]
call fcn.00402c3e
mov eax, dword [ebp - 0x1c]
lea ecx, [eax + 0x94]
lea eax, [ebp - 0x10]
push eax
call fcn.00402cf1
lea ecx, [ebp - 0x10]
call fcn.00402dc1
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x56
call fcn.004026b4
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x1878
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x56
call fcn.00402691
mov ecx, eax
call fcn.00403881
push eax
mov byte [ebp - 4], 0x59
call fcn.004175f4
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov edi, eax
call fcn.0083172f
mov dword [eax + 0x2c], edi
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], 0x56
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x825a03
push eax
call fcn.00be0541
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x15d9
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x158]
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x56
call fcn.00402691
mov ecx, eax
call fcn.00403881
mov ecx, eax
mov byte [ebp - 4], 0x5b
call fcn.00403308
cmp eax, ebx
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0x84], ebx
je 0x825a75
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x84]
call fcn.00405935
cmp eax, ebx
jge 0x825a75
cmp eax, 0x80004002
je 0x825a75
push eax
call fcn.00be0541
lea eax, [ebp - 0x158]
push eax
mov byte [ebp - 4], 0x5d
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x825a90
push eax
call fcn.00be0541
cmp dword [ebp - 0x84], ebx
je 0x825b62
lea eax, [ebp - 0x24]
push 0x1650
push eax
call fcn.00877d11
mov ecx, eax
call fcn.004069e7
mov ecx, dword [eax]
mov eax, dword [ebp + 0xc]
push eax
cdq
mov edi, esi
idiv edi
mov byte [ebp - 4], 0x5e
push eax
push ecx
lea eax, [ebp - 0x2c]
push eax
call fcn.00419a49
add esp, 0x10
push dword [eax]
lea ecx, [ebp - 0x10]
call fcn.00402c3e
mov eax, dword [ebp - 0x1c]
lea ecx, [eax + 0x98]
lea eax, [ebp - 0x10]
push eax
call fcn.00402cf1
lea ecx, [ebp - 0x10]
call fcn.00402dc1
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x5d
call fcn.004026b4
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x1878
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x5d
call fcn.00402691
mov ecx, eax
call fcn.00403881
push eax
mov byte [ebp - 4], 0x60
call fcn.004175f4
pop ecx
pop ecx
lea ecx, [ebp - 0x20]
mov edi, eax
call fcn.0083172f
mov dword [eax + 0x2c], edi
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], 0x5d
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x825b62
push eax
call fcn.00be0541
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x5aa
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x5d
call fcn.00402691
mov ecx, eax
call fcn.00403881
mov di, word [eax]
lea eax, [ebp - 0x3c]
push eax
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x825ba8
push eax
call fcn.00be0541
cmp di, bx
je 0x825c1a
lea eax, [ebp - 0x10]
push 0x88f
push eax
call fcn.00877d11
mov ecx, eax
call fcn.004069e7
mov ecx, dword [eax]
mov eax, dword [ebp + 0xc]
push eax
cdq
mov edi, esi
idiv edi
mov byte [ebp - 4], 0x62
push eax
push ecx
lea eax, [ebp - 0x2c]
push eax
call fcn.00419a49
add esp, 0x10
push dword [eax]
lea ecx, [ebp - 0x28]
call fcn.00402c3e
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x28]
lea edi, [eax + 0x9c]
call fcn.0041647e
mov ecx, edi
call fcn.00402dc1
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x28]
mov dword [edi], eax
call fcn.00402dc1
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x5d
call fcn.004026b4
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x53f
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x5d
call fcn.00402691
mov ecx, eax
call fcn.00403881
mov di, word [eax]
lea eax, [ebp - 0x3c]
push eax
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x825c60
push eax
call fcn.00be0541
cmp di, bx
je 0x825cd9
lea eax, [ebp - 0x10]
push 0x891
push eax
call fcn.00877d11
mov ecx, eax
call fcn.004069e7
mov ecx, dword [eax]
mov eax, dword [ebp + 0xc]
push eax
cdq
mov edi, esi
idiv edi
mov byte [ebp - 4], 0x64
push eax
push ecx
lea eax, [ebp - 0x2c]
push eax
call fcn.00419a49
add esp, 0x10
push dword [eax]
lea ecx, [ebp - 0x18]
call fcn.00402c3e
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x18]
lea edi, [eax + 0xa0]
call fcn.0041647e
mov ecx, edi
call fcn.00402dc1
mov eax, dword [ebp - 0x18]
mov dword [edi], eax
mov ecx, dword [ebp - 0x18]
cmp ecx, ebx
je 0x825ccd
call fcn.00402efb
mov dword [ebp - 0x18], ebx
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x5d
call fcn.004026b4
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x899
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x5d
call fcn.00402691
mov ecx, eax
call fcn.00403881
mov di, word [eax]
lea eax, [ebp - 0x3c]
push eax
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x825d1f
push eax
call fcn.00be0541
cmp di, bx
je 0x825d98
lea eax, [ebp - 0x10]
push 0x893
push eax
call fcn.00877d11
mov ecx, eax
call fcn.004069e7
mov ecx, dword [eax]
mov eax, dword [ebp + 0xc]
push eax
cdq
mov edi, esi
idiv edi
mov byte [ebp - 4], 0x66
push eax
push ecx
lea eax, [ebp - 0x2c]
push eax
call fcn.00419a49
add esp, 0x10
push dword [eax]
lea ecx, [ebp - 0x18]
call fcn.00402c3e
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x18]
lea edi, [eax + 0xa4]
call fcn.0041647e
mov ecx, edi
call fcn.00402dc1
mov eax, dword [ebp - 0x18]
mov dword [edi], eax
mov ecx, dword [ebp - 0x18]
cmp ecx, ebx
je 0x825d8c
call fcn.00402efb
mov dword [ebp - 0x18], ebx
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x5d
call fcn.004026b4
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x8f6
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x5d
call fcn.00402691
mov ecx, eax
call fcn.00403881
mov di, word [eax]
lea eax, [ebp - 0x3c]
push eax
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x825dde
push eax
call fcn.00be0541
cmp di, bx
je 0x825e57
lea eax, [ebp - 0x10]
push 0x8f7
push eax
call fcn.00877d11
mov ecx, eax
call fcn.004069e7
mov ecx, dword [eax]
mov eax, dword [ebp + 0xc]
push eax
cdq
mov edi, esi
idiv edi
mov byte [ebp - 4], 0x68
push eax
push ecx
lea eax, [ebp - 0x2c]
push eax
call fcn.00419a49
add esp, 0x10
push dword [eax]
lea ecx, [ebp - 0x18]
call fcn.00402c3e
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x18]
lea edi, [eax + 0xb4]
call fcn.0041647e
mov ecx, edi
call fcn.00402dc1
mov eax, dword [ebp - 0x18]
mov dword [edi], eax
mov ecx, dword [ebp - 0x18]
cmp ecx, ebx
je 0x825e4b
call fcn.00402efb
mov dword [ebp - 0x18], ebx
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x5d
call fcn.004026b4
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x18a3
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x5d
call fcn.00402691
mov ecx, eax
call fcn.00403881
mov di, word [eax]
lea eax, [ebp - 0x3c]
push eax
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x825e9d
push eax
call fcn.00be0541
cmp di, bx
je 0x825f16
lea eax, [ebp - 0x10]
push 0x895
push eax
call fcn.00877d11
mov ecx, eax
call fcn.004069e7
mov ecx, dword [eax]
mov eax, dword [ebp + 0xc]
push eax
cdq
mov edi, esi
idiv edi
mov byte [ebp - 4], 0x6a
push eax
push ecx
lea eax, [ebp - 0x2c]
push eax
call fcn.00419a49
add esp, 0x10
push dword [eax]
lea ecx, [ebp - 0x18]
call fcn.00402c3e
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x18]
lea edi, [eax + 0xb8]
call fcn.0041647e
mov ecx, edi
call fcn.00402dc1
mov eax, dword [ebp - 0x18]
mov dword [edi], eax
mov ecx, dword [ebp - 0x18]
cmp ecx, ebx
je 0x825f0a
call fcn.00402efb
mov dword [ebp - 0x18], ebx
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x5d
call fcn.004026b4
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0xed5
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x5d
call fcn.00402691
mov ecx, eax
call fcn.00403881
mov di, word [eax]
lea eax, [ebp - 0x3c]
push eax
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x825f5c
push eax
call fcn.00be0541
cmp di, bx
je 0x825fd3
lea eax, [ebp - 0x10]
push 0x8bb
push eax
call fcn.00877d11
mov ecx, eax
call fcn.004069e7
mov ecx, dword [eax]
mov eax, dword [ebp + 0xc]
push eax
cdq
idiv esi
mov byte [ebp - 4], 0x6c
push eax
push ecx
lea eax, [ebp - 0x2c]
push eax
call fcn.00419a49
add esp, 0x10
push dword [eax]
lea ecx, [ebp - 0x18]
call fcn.00402c3e
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x18]
lea esi, [eax + 0xbc]
call fcn.0041647e
mov ecx, esi
call fcn.00402dc1
mov eax, dword [ebp - 0x18]
mov dword [esi], eax
mov ecx, dword [ebp - 0x18]
cmp ecx, ebx
je 0x825fc7
call fcn.00402efb
mov dword [ebp - 0x18], ebx
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x5d
call fcn.004026b4
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x89a
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x5d
call fcn.00402691
mov ecx, eax
call fcn.00403881
mov ecx, eax
mov byte [ebp - 4], 0x6e
call fcn.00403308
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x1c]
lea ecx, [eax + 0xc0]
lea eax, [ebp - 0x10]
push eax
call fcn.0042258b
cmp eax, ebx
mov edi, 0x80004002
jge 0x826037
cmp eax, edi
je 0x826037
push eax
call fcn.00be0541
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], 0x5d
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x82604f
push eax
call fcn.00be0541
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x873
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x5d
call fcn.00402691
mov ecx, eax
call fcn.00403881
mov ecx, eax
mov byte [ebp - 4], 0x70
call fcn.00403308
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x1c]
lea ecx, [eax + 0xc4]
lea eax, [ebp - 0x10]
push eax
call fcn.0042258b
cmp eax, ebx
jge 0x8260ae
cmp eax, edi
je 0x8260ae
push eax
call fcn.00be0541
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], 0x5d
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x8260c6
push eax
call fcn.00be0541
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x89b
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x5d
call fcn.00402691
mov ecx, eax
call fcn.00403881
mov ecx, eax
mov byte [ebp - 4], 0x72
call fcn.00403308
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x1c]
lea ecx, [eax + 0xc8]
lea eax, [ebp - 0x10]
push eax
call fcn.0042258b
cmp eax, ebx
jge 0x826125
cmp eax, edi
je 0x826125
push eax
call fcn.00be0541
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], 0x5d
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x82613d
push eax
call fcn.00be0541
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x89c
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x5d
call fcn.00402691
mov ecx, eax
call fcn.00403881
mov ecx, eax
mov byte [ebp - 4], 0x74
call fcn.00403308
push ecx
mov dword [ebp - 0x10], eax
mov ecx, esp
mov dword [ecx], ebx
cmp dword [ebp - 0x10], ebx
mov dword [ebp - 0x14], esp
je 0x8261a0
lea eax, [ebp - 0x10]
push eax
call fcn.00405935
cmp eax, ebx
jge 0x8261a0
cmp eax, edi
je 0x8261a0
push eax
call fcn.00be0541
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x74
call fcn.0083172f
mov ecx, dword [ebp - 0x44]
add eax, 0x50
push eax
call fcn.00826e0b
cmp eax, ebx
lea eax, [ebp - 0x3c]
push eax
sete byte [ebp - 0x3d]
mov byte [ebp - 4], 0x5d
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x8261d6
push eax
call fcn.00be0541
cmp byte [ebp - 0x3d], bl
je 0x8261f0
push 0xc99538
lea eax, [ebp + 0xc]
push eax
mov dword [ebp + 0xc], 0x80004005
call fcn.00be12e7
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x6d3
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x5d
call fcn.00402691
mov ecx, eax
call fcn.00403881
mov ecx, eax
mov byte [ebp - 4], 0x77
call fcn.00403308
push ecx
mov dword [ebp - 0x10], eax
mov ecx, esp
mov dword [ecx], ebx
cmp dword [ebp - 0x10], ebx
mov dword [ebp - 0x14], esp
je 0x826253
lea eax, [ebp - 0x10]
push eax
call fcn.00405935
cmp eax, ebx
jge 0x826253
cmp eax, edi
je 0x826253
push eax
call fcn.00be0541
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x77
call fcn.0083172f
mov ecx, dword [ebp - 0x44]
add eax, 0x54
push eax
call fcn.008270a4
cmp eax, ebx
lea eax, [ebp - 0x3c]
push eax
sete byte [ebp - 0x3d]
mov byte [ebp - 4], 0x5d
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x826289
push eax
call fcn.00be0541
cmp byte [ebp - 0x3d], bl
je 0x8262a3
push 0xc99538
lea eax, [ebp + 0xc]
push eax
mov dword [ebp + 0xc], 0x80004005
call fcn.00be12e7
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x5ba
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x5d
call fcn.00402691
mov ecx, eax
call fcn.00403881
mov ecx, eax
mov byte [ebp - 4], 0x7a
call fcn.00403308
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x1c]
lea ecx, [eax + 0x6c]
lea eax, [ebp - 0x10]
push eax
call fcn.00405935
cmp eax, ebx
jge 0x8262ff
cmp eax, edi
je 0x8262ff
push eax
call fcn.00be0541
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], 0x5d
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x826317
push eax
call fcn.00be0541
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
mov esi, 0x5bb
push esi
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x5d
call fcn.00402691
mov ecx, eax
call fcn.00403881
mov ecx, eax
mov byte [ebp - 4], 0x7c
call fcn.00403308
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x1c]
lea ecx, [eax + 0x74]
lea eax, [ebp - 0x10]
push eax
call fcn.00405935
cmp eax, ebx
jge 0x826374
cmp eax, edi
je 0x826374
push eax
call fcn.00be0541
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], 0x5d
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x82638c
push eax
call fcn.00be0541
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x74], ebx
je 0x82640a
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x1608
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x5d
call fcn.0083172f
mov ecx, eax
add ecx, 0x74
call fcn.00402691
mov ecx, eax
call fcn.00403881
push eax
mov byte [ebp - 4], 0x7e
call fcn.004175f4
mov edi, eax
pop ecx
neg edi
pop ecx
sbb edi, edi
lea ecx, [ebp - 0x20]
neg edi
call fcn.0083172f
mov dword [eax + 0x78], edi
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], 0x5d
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x826405
push eax
call fcn.00be0541
mov edi, 0x80004002
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push esi
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0x5d
call fcn.00402691
mov ecx, eax
call fcn.00403881
mov ecx, eax
mov byte [ebp - 4], 0x80
call fcn.00403308
push ecx
mov dword [ebp - 0x10], eax
mov ecx, esp
mov dword [ecx], ebx
cmp dword [ebp - 0x10], ebx
mov dword [ebp - 0x14], esp
je 0x826469
lea eax, [ebp - 0x10]
push eax
call fcn.00405935
cmp eax, ebx
jge 0x826469
cmp eax, edi
je 0x826469
push eax
call fcn.00be0541
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x80
call fcn.0083172f
mov ecx, dword [ebp - 0x44]
add eax, 0x70
push eax
push dword [ebp + 0xc]
call fcn.00829d4f
cmp eax, ebx
lea eax, [ebp - 0x3c]
push eax
sete byte [ebp + 0xf]
mov byte [ebp - 4], 0x5d
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x8264a2
push eax
call fcn.00be0541
cmp byte [ebp + 0xf], bl
je 0x8264bc
push 0xc99538
lea eax, [ebp + 0xc]
push eax
mov dword [ebp + 0xc], 0x80004005
call fcn.00be12e7
mov ecx, dword [ebp - 0x1c]
call fcn.00823b08
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0xb8]
cmp eax, ebx
je 0x8264de
mov eax, dword [eax]
cmp eax, ebx
je 0x8264de
mov eax, dword [eax - 4]
shr eax, 1
jmp 0x8264e0
xor eax, eax
cmp eax, ebx
je 0x826c87
mov esi, dword [sym.imp.oleaut32.dll_VariantInit]
lea eax, [ebp - 0x60]
push eax
call esi
mov edi, 0xd8d000
lea eax, [ebp - 0x60]
push edi
push eax
call fcn.00402be2
cmp eax, ebx
pop ecx
pop ecx
jge 0x82650f
push eax
call fcn.00be0541
lea eax, [ebp - 0x108]
push eax
mov byte [ebp - 4], 0x82
call esi
lea eax, [ebp - 0x108]
push edi
push eax
call fcn.00402be2
cmp eax, ebx
pop ecx
pop ecx
jge 0x826535
push eax
call fcn.00be0541
push ebx
push ebx
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x83
call fcn.0083172f
push ecx
add eax, 0xb8
mov ecx, esp
mov dword [ebp + 0xc], esp
push eax
call fcn.00404f9f
lea eax, [ebp - 0x138]
push eax
mov byte [ebp - 4], 0x83
call fcn.00406be3
mov ecx, eax
call fcn.004026d6
mov ecx, eax
call fcn.00403ae9
mov ecx, eax
mov byte [ebp - 4], 0x85
call fcn.00403308
cmp eax, ebx
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x68], ebx
je 0x8265b5
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0x68]
call fcn.00405935
cmp eax, ebx
jge 0x8265b5
cmp eax, 0x80004002
je 0x8265b5
push eax
call fcn.00be0541
lea eax, [ebp - 0x138]
push eax
mov byte [ebp - 4], 0x89
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x8265d0
push eax
call fcn.00be0541
lea eax, [ebp - 0x108]
push eax
mov byte [ebp - 4], 0x88
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x8265eb
push eax
call fcn.00be0541
lea eax, [ebp - 0x60]
push eax
mov byte [ebp - 4], 0x87
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x826603
push eax
call fcn.00be0541
cmp dword [ebp - 0x68], ebx
je 0x826c7b
lea eax, [ebp - 0xe8]
push eax
call esi
cmp dword [ebp - 0x68], ebx
mov byte [ebp - 4], 0x8a
jne 0x826628
push 0x80004003
call fcn.00be0541
mov ecx, dword [ebp - 0x68]
lea eax, [ebp - 0xb0]
push eax
call fcn.0040393d
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x8b
call fcn.0040365c
mov eax, dword [ebp - 0xb0]
cmp eax, ebx
mov byte [ebp - 4], 0x8d
je 0x826658
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xb8], ebx
cmp dword [ebp - 0x10], ebx
jne 0x82666d
push 0x80004003
call fcn.00be0541
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
lea edx, [ebp - 0xb8]
push edx
lea edx, [ebp - 0xe8]
push edx
push 1
push eax
call dword [ecx + 0xc]
test eax, eax
jne 0x826c64
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.00406be9
pop ecx
pop ecx
lea eax, [ebp - 0x98]
push 0x3de
push eax
mov byte [ebp - 4], 0x8e
call fcn.00877d11
mov ecx, eax
call fcn.004069e7
mov ecx, dword [ebp - 0x4c]
cmp ecx, ebx
mov eax, dword [eax]
je 0x8266c9
mov ecx, dword [ecx]
jmp 0x8266cb
xor ecx, ecx
push 6
push eax
push ecx
call fcn.00be3d2d
add esp, 0xc
neg eax
sbb al, al
inc al
lea ecx, [ebp - 0x98]
mov byte [ebp + 0xf], al
call fcn.004026b4
cmp byte [ebp + 0xf], bl
je 0x826c38
push ebx
push ebx
push ecx
lea eax, [ebp - 0x4c]
mov ecx, esp
mov dword [ebp + 0xc], esp
push eax
call fcn.00404f9f
lea eax, [ebp - 0x178]
push eax
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x8e
call fcn.00402691
mov ecx, eax
call fcn.00403881
mov ecx, eax
mov byte [ebp - 4], 0x90
call fcn.00403308
cmp eax, ebx
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0x18], ebx
je 0x82675b
lea eax, [ebp - 0xb4]
push eax
lea ecx, [ebp - 0x18]
call fcn.00405935
cmp eax, ebx
jge 0x82675b
mov esi, 0x80004002
cmp eax, esi
je 0x826760
push eax
call fcn.00be0541
jmp 0x826760
mov esi, 0x80004002
lea eax, [ebp - 0x178]
push eax
mov byte [ebp - 4], 0x92
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x82677b
push eax
call fcn.00be0541
cmp dword [ebp - 0x18], ebx
je 0x82681e
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
push 0x32b
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x92
call fcn.00402691
mov ecx, eax
call fcn.00403881
mov ecx, eax
mov byte [ebp - 4], 0x94
call fcn.00403308
cmp eax, ebx
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x70], ebx
je 0x8267ed
lea eax, [ebp - 0xc0]
push eax
lea ecx, [ebp - 0x70]
call fcn.00405935
cmp eax, ebx
jge 0x8267ed
cmp eax, esi
je 0x8267ed
push eax
call fcn.00be0541
lea eax, [ebp - 0x118]
push eax
mov byte [ebp - 4], 0x96
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x826808
push eax
call fcn.00be0541
cmp dword [ebp - 0x70], ebx
jne 0x82683a
mov eax, dword [ebp - 0x18]
cmp eax, ebx
mov byte [ebp - 4], 0x8e
je 0x82681e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [ebp - 0x4c]
cmp ecx, ebx
mov byte [ebp - 4], 0x8d
je 0x826c44
call fcn.00402efb
mov dword [ebp - 0x4c], ebx
jmp 0x826c44
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
push 0x5d4
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x198]
push eax
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x96
call fcn.00402691
mov ecx, eax
call fcn.00403881
mov ecx, eax
mov byte [ebp - 4], 0x98
call fcn.00403308
cmp eax, ebx
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0x6c], ebx
je 0x8268a3
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0x6c]
call fcn.00405935
cmp eax, ebx
jge 0x8268a3
cmp eax, esi
je 0x8268a3
push eax
call fcn.00be0541
lea eax, [ebp - 0x198]
push eax
mov byte [ebp - 4], 0x9a
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x8268be
push eax
call fcn.00be0541
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
push 0x18a0
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x128]
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x9a
call fcn.00402691
mov ecx, eax
call fcn.00403881
mov ecx, eax
mov byte [ebp - 4], 0x9c
call fcn.00403308
mov dword [ebp - 0xc4], eax
lea eax, [ebp - 0xc4]
push eax
lea ecx, [ebp - 0x24]
call fcn.006332f1
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0x9e
call fcn.00403688
lea ecx, [ebp - 0x24]
call fcn.008315db
test al, al
je 0x826a1c
push edi
lea ecx, [ebp - 0x3c]
call fcn.0040b655
lea eax, [ebp - 0x3c]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x9f
call fcn.00417283
mov ecx, eax
call fcn.0045ba18
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x9e
call fcn.00403688
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
push 0x5da
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x9e
call fcn.00402691
mov ecx, eax
call fcn.00403881
push eax
mov byte [ebp - 4], 0xa1
call fcn.004175f4
pop ecx
pop ecx
lea ecx, [ebp - 0x148]
mov dword [ebp - 0x9c], eax
mov byte [ebp - 4], 0x9e
call fcn.00403688
lea eax, [ebp - 0xac]
push eax
call fcn.0068d81c
pop ecx
push eax
lea ecx, [ebp - 0x20]
call fcn.0083172f
mov ecx, eax
call fcn.00823b45
lea eax, [ebp - 0xbc]
push eax
call fcn.0068d81c
pop ecx
push eax
lea ecx, [ebp - 0x20]
call fcn.0083172f
mov ecx, eax
call fcn.00823b45
lea eax, [ebp - 0x9c]
push eax
call fcn.0068d81c
pop ecx
push eax
lea ecx, [ebp - 0x20]
call fcn.0083172f
mov ecx, eax
call fcn.00823b45
push 1
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
push 0x5d5
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x168]
push eax
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x9e
call fcn.00402691
mov ecx, eax
call fcn.00403881
push eax
mov byte [ebp - 4], 0xa3
call fcn.004175f4
pop ecx
pop ecx
lea ecx, [ebp - 0x168]
mov dword [ebp - 0xa0], eax
mov byte [ebp - 4], 0x9e
call fcn.00403688
lea eax, [ebp - 0xa0]
push eax
call fcn.0068d81c
pop ecx
push eax
lea ecx, [ebp - 0x20]
call fcn.0083172f
mov ecx, eax
call fcn.00823b45
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
push 0x188f
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
lea eax, [ebp - 0x188]
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x9e
call fcn.00402691
mov ecx, eax
call fcn.00403881
mov ecx, eax
mov byte [ebp - 4], 0xa5
call fcn.00403308
mov dword [ebp - 0x8c], eax
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x28]
call fcn.006332f1
lea ecx, [ebp - 0x188]
mov byte [ebp - 4], 0xa7
call fcn.00403688
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
push 0x1897
push eax
call fcn.00877d11
mov ecx, eax
call fcn.00406a03
mov byte [ebp - 4], 0xa7
lea eax, [ebp - 0x1a8]
push eax
lea ecx, [ebp - 0x6c]
call fcn.00402691
mov ecx, eax
call fcn.00403881
mov ecx, eax
mov byte [ebp - 4], 0xa9
call fcn.00403308
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x44]
call fcn.006332f1
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 0xab
call fcn.00403688
push ebx
lea ecx, [ebp - 0x28]
call fcn.004172b8
test al, al
je 0x826c08
push ebx
lea ecx, [ebp - 0x44]
call fcn.004172b8
test al, al
je 0x826c08
lea ecx, [ebp - 0x44]
call fcn.00417283
mov ecx, eax
call fcn.00403ba2
push eax
lea ecx, [ebp - 0x44]
call fcn.00417283
mov ecx, eax
call fcn.00403b7b
push eax
lea ecx, [ebp - 0x28]
call fcn.00417283
mov ecx, eax
call fcn.00403ba2
push eax
lea ecx, [ebp - 0x28]
call fcn.00417283
mov ecx, eax
call fcn.00403b7b
push eax
lea eax, [ebp - 0xf8]
push eax
call dword [sym.imp.user32.dll_SetRect]
lea eax, [ebp - 0xec]
push eax
call fcn.0068d81c
mov esi, eax
lea eax, [ebp - 0xf0]
push eax
call fcn.0068d81c
or esi, eax
lea eax, [ebp - 0xf4]
push eax
call fcn.0068d81c
or esi, eax
lea eax, [ebp - 0xf8]
push eax
call fcn.0068d81c
add esp, 0x10
or esi, eax
push esi
lea ecx, [ebp - 0x20]
call fcn.0083172f
mov ecx, eax
call fcn.00823b45
lea ecx, [ebp - 0x44]
call fcn.00417276
lea ecx, [ebp - 0x28]
call fcn.00417276
lea ecx, [ebp - 0x24]
call fcn.00417276
lea ecx, [ebp - 0x6c]
call fcn.00402684
lea ecx, [ebp - 0x70]
call fcn.00402684
lea ecx, [ebp - 0x18]
call fcn.00402684
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x8d
call fcn.004033ea
lea eax, [ebp - 0xe8]
push eax
call fcn.00402973
cmp eax, ebx
pop ecx
jge 0x82665e
push eax
call fcn.00be0541
jmp 0x82665e
lea ecx, [ebp - 0x10]
call fcn.004026a7
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x87
call fcn.00403688
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x5d
call fcn.00402684
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x20]
push eax
call fcn.00831717
or dword [ebp - 0x50], 2
lea ecx, [ebp - 0x84]
call fcn.00402684
lea ecx, [ebp - 0x88]
call fcn.00402684
lea ecx, [ebp - 0x48]
call fcn.00402684
lea ecx, [ebp - 0x94]
call fcn.00402684
lea ecx, [ebp - 0x90]
call fcn.00402684
lea ecx, [ebp - 0x74]
call fcn.00402684
lea ecx, [ebp - 0x78]
call fcn.00402684
lea ecx, [ebp - 0x7c]
call fcn.00402684
lea ecx, [ebp - 0x64]
call fcn.00402684
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 5
call fcn.00406a50
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 4
call fcn.00831701
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.004026b4
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 2
call fcn.00403688
lea ecx, [ebp + 0x10]
call fcn.00402684
lea ecx, [ebp + 0x14]
call fcn.00402684
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
lea esp, [ebp - 0x1b4]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 0x10