Function at 0x590b17
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x7db9fa
call fcn.007a83c4
sub esp, 0x118
push ebx
push esi
xor ebx, ebx
push edi
mov dword [ebp - 0x70], ebx
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x3c], esp
push 0x375
mov esi, 0x885138
push eax
mov ecx, esi
mov dword [ebp - 4], ebx
call fcn.006145b0
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], bl
call fcn.004025dd
mov ecx, eax
call fcn.00404855
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.004037d0
cmp eax, ebx
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x10], ebx
je 0x590b94
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x10]
call fcn.00404545
cmp eax, ebx
jge 0x590b94
cmp eax, 0x80004002
je 0x590b94
push eax
call fcn.007a760b
lea eax, [ebp - 0x80]
push eax
mov byte [ebp - 4], 4
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x590bac
push eax
call fcn.007a760b
mov eax, dword [ebp + 0xc]
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x38], eax
call fcn.004119d5
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 5
mov dword [ebp - 0x14], ebx
call fcn.005941c4
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp + 8]
lea edx, [eax + 0xc]
mov byte [ebp - 4], 6
mov edi, eax
call fcn.004a6bc1
mov dword [edi + 0x14], eax
mov eax, dword [ebp - 0x14]
lea edx, [eax + 0x18]
xor ecx, ecx
mov edi, eax
call fcn.004a6bc1
push ecx
mov dword [edi + 0x20], eax
mov eax, esp
mov dword [ebp - 0x3c], esp
push 0x376
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 6
call fcn.004025dd
mov ecx, eax
call fcn.00404855
cmp word [ebp - 0x90], 8
mov byte [ebp - 4], 8
jne 0x590dc9
mov dword [ebp - 0x34], ebx
push 0x5c6
lea eax, [ebp - 0x30]
push eax
mov ecx, esi
mov byte [ebp - 4], 9
call fcn.006144e8
push dword [ebp - 0x88]
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x34]
push eax
mov byte [ebp - 4], 0xa
call fcn.00412b65
mov eax, dword [ebp - 0x30]
add esp, 0xc
cmp eax, ebx
mov byte [ebp - 4], 9
je 0x590c76
add eax, 0xfffffff4
push eax
call fcn.00403211
pop ecx
push dword [ebp - 0x88]
mov edi, dword [ebp - 0x14]
call fcn.007a8918
pop ecx
lea edx, [edi + 0x18]
mov ecx, eax
call fcn.004a6bc1
mov dword [edi + 0x20], eax
mov edi, 0x889398
push edi
lea ecx, [ebp - 0xa0]
call fcn.00403131
push edi
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0xb
call fcn.00403131
push ebx
push ebx
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0xc4]
push eax
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0xc
call fcn.00410b4b
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.004038a0
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0xc
call fcn.004056d0
mov ecx, eax
call fcn.00402600
mov ecx, eax
call fcn.00404a04
mov ecx, eax
mov byte [ebp - 4], 0xe
call fcn.004037d0
cmp eax, ebx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x1c], ebx
je 0x590d28
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00404545
cmp eax, ebx
jge 0x590d28
cmp eax, 0x80004002
je 0x590d28
push eax
call fcn.007a760b
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x12
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x590d40
push eax
call fcn.007a760b
lea eax, [ebp - 0xc4]
push eax
mov byte [ebp - 4], 0x11
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x590d5b
push eax
call fcn.007a760b
lea eax, [ebp - 0xa0]
push eax
mov byte [ebp - 4], 0x10
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x590d76
push eax
call fcn.007a760b
cmp dword [ebp - 0x1c], ebx
jne 0x590da1
lea ecx, [ebp - 0x1c]
call fcn.0040278b
mov eax, dword [ebp - 0x34]
cmp eax, ebx
mov byte [ebp - 4], 8
je 0x5929b6
add eax, 0xfffffff4
push eax
call fcn.00403211
pop ecx
jmp 0x5929b6
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x38]
call fcn.00402760
lea ecx, [ebp - 0x1c]
call fcn.0040278b
mov eax, dword [ebp - 0x34]
cmp eax, ebx
mov byte [ebp - 4], 8
je 0x590dc9
add eax, 0xfffffff4
push eax
call fcn.00403211
pop ecx
mov eax, dword [ebp + 8]
mov dword [ebp - 0x30], eax
push ebx
lea eax, [ebp - 0x30]
mov edi, 0x883510
push eax
mov ecx, edi
call fcn.005942f0
test eax, eax
jne 0x5929b6
mov eax, dword [ebp + 8]
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x30]
push eax
mov ecx, edi
call fcn.00594344
push ecx
mov eax, esp
mov dword [ebp - 0x3c], esp
push 0xc13
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x104]
push eax
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 8
call fcn.004025dd
mov ecx, eax
call fcn.00404855
mov ecx, dword [ebp - 0x14]
xor eax, eax
cmp word [ebp - 0x104], bx
push ecx
setne al
mov dword [ebp - 0x3c], esp
mov byte [ebp - 4], 0x14
mov dword [ecx + 0x1d0], eax
mov eax, esp
push 0x3d1
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0xe4]
push eax
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x14
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push ecx
mov eax, esp
mov dword [ebp - 0x3c], esp
push 0x3af
push eax
mov ecx, esi
mov byte [ebp - 4], 0x16
call fcn.006145b0
lea eax, [ebp - 0x114]
push eax
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x16
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push ecx
mov eax, esp
mov dword [ebp - 0x3c], esp
push 0x3d2
push eax
mov ecx, esi
mov byte [ebp - 4], 0x18
call fcn.006145b0
lea eax, [ebp - 0xf4]
push eax
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x18
call fcn.004025dd
mov ecx, eax
call fcn.00404855
mov byte [ebp - 4], 0x1a
xor ecx, ecx
cmp word [ebp - 0xe4], bx
setne cl
xor eax, eax
cmp word [ebp - 0x114], bx
setne al
mov edi, eax
xor eax, eax
cmp word [ebp - 0xf4], bx
setne al
cmp eax, ebx
je 0x590f0c
mov eax, dword [ebp - 0x14]
mov edi, eax
lea edx, [eax + 0x34]
push 3
jmp 0x590f32
cmp ecx, ebx
je 0x590f24
cmp edi, ebx
je 0x59294a
mov eax, dword [ebp - 0x14]
mov edi, eax
lea edx, [eax + 0x34]
push 2
jmp 0x590f32
mov eax, dword [ebp - 0x14]
cmp edi, ebx
mov edi, eax
lea edx, [eax + 0x34]
je 0x590f35
push 1
pop ecx
jmp 0x590f37
xor ecx, ecx
call fcn.00412a43
push ecx
mov dword [edi + 0x3c], eax
mov eax, esp
mov dword [ebp - 0x3c], esp
push 0x3dc
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x124]
push eax
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x1a
call fcn.004025dd
mov ecx, eax
call fcn.00404855
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp word [ebp - 0x124], bx
lea edx, [eax + 0x40]
setne cl
mov byte [ebp - 4], 0x1c
mov edi, eax
call fcn.0052a3ef
mov dword [edi + 0x48], eax
lea eax, [ebp - 0xb4]
push eax
call dword [sym.imp.oleaut32.dll_VariantInit]
push 0x882840
push ecx
mov eax, esp
mov dword [ebp - 0x3c], esp
push 0x5ca
push eax
mov ecx, esi
mov byte [ebp - 4], 0x1d
call fcn.006145b0
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1d
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x1f
call fcn.004313c9
add esp, 4
mov dword [ebp - 0x3c], esp
mov ecx, esp
push eax
call fcn.00402e2e
call fcn.00476758
mov edx, dword [ebp - 0x14]
pop ecx
mov edi, edx
add edx, 0x28
mov ecx, eax
call fcn.00412a43
mov dword [edi + 0x30], eax
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x591014
push eax
call fcn.007a760b
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x3c], esp
push 0x5cb
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1d
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x21
call fcn.00412986
mov edi, eax
pop ecx
neg edi
pop ecx
sbb edi, edi
lea ecx, [ebp - 0x18]
neg edi
call fcn.0059415c
lea edx, [eax + 0x4c]
mov ecx, edi
mov dword [ebp - 0x30], eax
call fcn.0052a3ef
mov ecx, dword [ebp - 0x30]
mov dword [ecx + 0x54], eax
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x591086
push eax
call fcn.007a760b
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x3c], esp
push 0x5cc
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1d
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x23
call fcn.00412986
mov edi, eax
pop ecx
neg edi
pop ecx
sbb edi, edi
lea ecx, [ebp - 0x18]
neg edi
call fcn.0059415c
lea edx, [eax + 0x58]
mov ecx, edi
mov dword [ebp - 0x30], eax
call fcn.0052a3ef
mov ecx, dword [ebp - 0x30]
mov dword [ecx + 0x60], eax
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x5910f8
push eax
call fcn.007a760b
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x3c], esp
push 0xf04
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1d
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x25
call fcn.00412986
mov edi, eax
pop ecx
neg edi
pop ecx
sbb edi, edi
lea ecx, [ebp - 0x18]
neg edi
call fcn.0059415c
mov dword [eax + 0x1f4], edi
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x59115d
push eax
call fcn.007a760b
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x3c], esp
push 0xaf4
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1d
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x27
call fcn.00412986
mov edi, eax
pop ecx
neg edi
pop ecx
sbb edi, edi
lea ecx, [ebp - 0x18]
neg edi
call fcn.0059415c
mov dword [eax + 0x1f8], edi
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x5911c2
push eax
call fcn.007a760b
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x1f8], ebx
jne 0x591373
mov dword [ebp - 0x1c], ebx
push 0x7ef
lea eax, [ebp - 0x30]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x28
call fcn.006144e8
push dword [ebp + 8]
mov byte [ebp - 4], 0x29
push dword [eax]
lea eax, [ebp - 0x1c]
push str._s__d
push eax
call fcn.00412b65
mov eax, dword [ebp - 0x30]
add esp, 0x10
cmp eax, ebx
mov byte [ebp - 4], 0x28
je 0x591217
add eax, 0xfffffff4
push eax
call fcn.00403211
pop ecx
mov edi, 0x889398
push edi
lea ecx, [ebp - 0xc4]
call fcn.00403131
push edi
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x2a
call fcn.00403131
push ebx
push ebx
lea eax, [ebp - 0xc4]
push eax
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x2b
call fcn.00410b4b
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.004038a0
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x2b
call fcn.004056d0
mov ecx, eax
call fcn.00402600
mov ecx, eax
call fcn.00404a04
mov ecx, eax
mov byte [ebp - 4], 0x2d
call fcn.004037d0
cmp eax, ebx
mov dword [ebp + 8], eax
mov dword [ebp - 0x34], ebx
je 0x5912ad
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x34]
call fcn.00404545
cmp eax, ebx
jge 0x5912ad
cmp eax, 0x80004002
je 0x5912ad
push eax
call fcn.007a760b
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x31
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x5912c5
push eax
call fcn.007a760b
lea eax, [ebp - 0xa0]
push eax
mov byte [ebp - 4], 0x30
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x5912e0
push eax
call fcn.007a760b
lea eax, [ebp - 0xc4]
push eax
mov byte [ebp - 4], 0x2f
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x5912fb
push eax
call fcn.007a760b
push ecx
mov eax, esp
mov dword [ebp - 0x3c], esp
push 0x5c8
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x2f
call fcn.004025dd
mov ecx, eax
call fcn.00404855
cmp word [eax], 8
mov byte [ebp - 4], 0x33
jne 0x591334
mov eax, dword [eax + 8]
jmp 0x591339
mov eax, 0x882840
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
add ecx, 0x24
push eax
call fcn.0044c288
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x2f
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x59135f
push eax
call fcn.007a760b
lea ecx, [ebp - 0x34]
call fcn.0040278b
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x1d
call fcn.00402616
push 1
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x5cd
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1d
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x35
call fcn.00412986
pop ecx
pop ecx
lea ecx, [ebp - 0x18]
mov dword [ebp + 8], eax
call fcn.0059415c
mov ecx, dword [ebp + 8]
mov edi, eax
lea edx, [edi + 0x64]
call fcn.00412a43
mov dword [edi + 0x6c], eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x5913de
push eax
call fcn.007a760b
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x5ce
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1d
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x37
call fcn.00412986
pop ecx
pop ecx
lea ecx, [ebp - 0x18]
mov dword [ebp + 8], eax
call fcn.0059415c
mov ecx, dword [ebp + 8]
mov edi, eax
lea edx, [edi + 0x70]
call fcn.00412a43
mov dword [edi + 0x78], eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x591448
push eax
call fcn.007a760b
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x5cf
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1d
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x39
call fcn.00412986
pop ecx
pop ecx
lea ecx, [ebp - 0x18]
mov dword [ebp + 8], eax
call fcn.0059415c
mov ecx, dword [ebp + 8]
mov edi, eax
lea edx, [edi + 0x7c]
call fcn.00412a43
mov dword [edi + 0x84], eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x5914b5
push eax
call fcn.007a760b
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x5d0
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1d
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x3b
call fcn.00412986
add eax, 0x64
push eax
push ebx
call fcn.005944a3
mov edi, 0x8c
add esp, 0x10
cmp eax, edi
mov ecx, eax
jl 0x591504
mov ecx, edi
mov eax, dword [ebp - 0x14]
lea edx, [eax + 0x88]
mov dword [ebp + 8], eax
call fcn.00412a43
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x90], eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x591536
push eax
call fcn.007a760b
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x5d1
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1d
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x3d
call fcn.00412986
add eax, 0x64
push eax
push ebx
call fcn.005944a3
add esp, 0x10
cmp eax, edi
mov ecx, eax
jl 0x591580
mov ecx, edi
mov eax, dword [ebp - 0x14]
lea edx, [eax + 0x94]
mov dword [ebp + 8], eax
call fcn.00412a43
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x9c], eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x5915b2
push eax
call fcn.007a760b
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x5d2
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1d
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x3f
call fcn.00412986
add eax, 0x64
push eax
push ebx
call fcn.005944a3
add esp, 0x10
cmp eax, edi
mov ecx, eax
jl 0x5915fc
mov ecx, edi
mov eax, dword [ebp - 0x14]
lea edx, [eax + 0xa0]
mov edi, eax
call fcn.00412a43
mov dword [edi + 0xa8], eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x59162a
push eax
call fcn.007a760b
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x5d3
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1d
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x41
call fcn.00412986
push eax
push ebx
call fcn.005944a3
mov edi, 0x7cf
add esp, 0x10
cmp eax, edi
mov ecx, eax
jl 0x591676
mov ecx, edi
mov eax, dword [ebp - 0x14]
lea edx, [eax + 0xac]
mov dword [ebp + 8], eax
call fcn.00412a43
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xb4], eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x5916a8
push eax
call fcn.007a760b
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x5d4
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1d
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x43
call fcn.00412986
push eax
push ebx
call fcn.005944a3
add esp, 0x10
cmp eax, edi
mov ecx, eax
jl 0x5916ef
mov ecx, edi
mov eax, dword [ebp - 0x14]
lea edx, [eax + 0xb8]
mov dword [ebp + 8], eax
call fcn.00412a43
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc0], eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x591721
push eax
call fcn.007a760b
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x5d5
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1d
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x45
call fcn.00412986
push eax
push ebx
call fcn.005944a3
add esp, 0x10
cmp eax, edi
mov ecx, eax
jl 0x591768
mov ecx, edi
mov eax, dword [ebp - 0x14]
lea edx, [eax + 0xc4]
mov dword [ebp + 8], eax
call fcn.00412a43
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xcc], eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x59179a
push eax
call fcn.007a760b
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x5d6
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1d
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x47
call fcn.00412986
push eax
push ebx
call fcn.005944a3
add esp, 0x10
cmp eax, edi
mov ecx, eax
jl 0x5917e1
mov ecx, edi
mov eax, dword [ebp - 0x14]
lea edx, [eax + 0xd0]
mov edi, eax
call fcn.00412a43
mov dword [edi + 0xd8], eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x59180f
push eax
call fcn.007a760b
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x5d7
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1d
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x49
call fcn.00412986
pop ecx
pop ecx
lea ecx, [ebp - 0x18]
mov dword [ebp + 8], eax
call fcn.0059415c
mov ecx, dword [ebp + 8]
mov edi, eax
lea edx, [edi + 0xdc]
call fcn.00412a43
mov dword [edi + 0xe4], eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x59187f
push eax
call fcn.007a760b
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x5d8
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1d
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x4b
call fcn.00412986
pop ecx
pop ecx
lea ecx, [ebp - 0x18]
mov dword [ebp + 8], eax
call fcn.0059415c
mov ecx, dword [ebp + 8]
mov edi, eax
lea edx, [edi + 0xe8]
call fcn.00412a43
mov dword [edi + 0xf0], eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x5918ef
push eax
call fcn.007a760b
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x5d9
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1d
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x4d
call fcn.00412986
pop ecx
pop ecx
lea ecx, [ebp - 0x18]
mov dword [ebp + 8], eax
call fcn.0059415c
mov ecx, dword [ebp + 8]
mov edi, eax
lea edx, [edi + 0xf4]
call fcn.00412a43
mov dword [edi + 0xfc], eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x59195f
push eax
call fcn.007a760b
push 1
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x5da
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1d
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x4f
call fcn.00412986
pop ecx
pop ecx
lea ecx, [ebp - 0x18]
mov dword [ebp + 8], eax
call fcn.0059415c
mov ecx, dword [ebp + 8]
mov edi, eax
lea edx, [edi + 0x100]
call fcn.00412a43
mov dword [edi + 0x108], eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x5919d0
push eax
call fcn.007a760b
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x5db
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1d
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
lea eax, [ebp - 0xb4]
push eax
mov byte [ebp - 4], 0x51
call fcn.00402dd2
cmp eax, ebx
pop ecx
pop ecx
jge 0x591a17
push eax
call fcn.007a760b
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x591a2f
push eax
call fcn.007a760b
cmp word [ebp - 0xb4], 8
mov eax, dword [ebp - 0xac]
je 0x591a44
mov eax, 0x882840
mov ecx, dword [ebp - 0x14]
add ecx, 0x10c
push ecx
push eax
call fcn.00592a0c
test eax, eax
pop ecx
pop ecx
jne 0x591b6b
lea eax, [ebp - 0xb4]
push eax
mov byte [ebp - 4], 0x1c
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x591a79
push eax
call fcn.007a760b
lea eax, [ebp - 0x124]
push eax
mov byte [ebp - 4], 0x1a
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x591a94
push eax
call fcn.007a760b
lea eax, [ebp - 0xf4]
push eax
mov byte [ebp - 4], 0x18
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x591aaf
push eax
call fcn.007a760b
lea eax, [ebp - 0x114]
push eax
mov byte [ebp - 4], 0x16
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x591aca
push eax
call fcn.007a760b
lea eax, [ebp - 0xe4]
push eax
mov byte [ebp - 4], 0x14
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x591ae5
push eax
call fcn.007a760b
lea eax, [ebp - 0x104]
push eax
mov byte [ebp - 4], 8
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x591b00
push eax
call fcn.007a760b
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 4], 6
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x591b1b
push eax
call fcn.007a760b
cmp dword [ebp - 0x14], ebx
mov byte [ebp - 4], 5
je 0x591b30
push ebx
lea ecx, [ebp - 0x18]
call fcn.00594202
mov dword [ebp - 0x14], ebx
mov eax, dword [ebp - 0x38]
cmp eax, ebx
mov byte [ebp - 4], 4
je 0x591b41
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10]
cmp eax, ebx
mov byte [ebp - 4], bl
je 0x591b51
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp + 0xc]
or dword [ebp - 4], 0xffffffff
cmp eax, ebx
je 0x5929f5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x5929f5
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x5dc
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1d
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x53
call fcn.00412986
pop ecx
pop ecx
lea ecx, [ebp - 0x18]
mov edi, eax
call fcn.0059415c
mov dword [eax + 0x12c], edi
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x591bca
push eax
call fcn.007a760b
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x5dd
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1d
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x55
call fcn.00412986
pop ecx
pop ecx
lea ecx, [ebp - 0x18]
mov edi, eax
call fcn.0059415c
mov dword [eax + 0x130], edi
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x591c29
push eax
call fcn.007a760b
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x41b
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1d
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x57
call fcn.00412986
mov edi, eax
pop ecx
neg edi
pop ecx
sbb edi, edi
lea ecx, [ebp - 0x18]
neg edi
call fcn.0059415c
lea edx, [eax + 0x134]
mov ecx, edi
mov dword [ebp + 8], eax
call fcn.0052a3ef
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x13c], eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x591ca1
push eax
call fcn.007a760b
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x5df
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1d
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x59
call fcn.00412986
mov edi, eax
pop ecx
neg edi
pop ecx
sbb edi, edi
lea ecx, [ebp - 0x18]
neg edi
call fcn.0059415c
lea edx, [eax + 0x160]
mov ecx, edi
mov dword [ebp + 8], eax
call fcn.0052a3ef
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x168], eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x591d19
push eax
call fcn.007a760b
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x5e0
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1d
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x5b
call fcn.00412986
mov edi, eax
pop ecx
neg edi
pop ecx
sbb edi, edi
lea ecx, [ebp - 0x18]
neg edi
call fcn.0059415c
lea edx, [eax + 0x16c]
mov ecx, edi
mov dword [ebp + 8], eax
call fcn.0052a3ef
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x174], eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x591d91
push eax
call fcn.007a760b
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0xa25
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1d
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x5d
call fcn.00412986
mov edi, eax
pop ecx
neg edi
pop ecx
sbb edi, edi
lea ecx, [ebp - 0x18]
neg edi
call fcn.0059415c
lea edx, [eax + 0x148]
mov ecx, edi
mov dword [ebp + 8], eax
call fcn.0052a3ef
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x150], eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x591e09
push eax
call fcn.007a760b
push ecx
fld1
push ecx
fstp qword [esp]
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x5e1
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1d
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x5f
call fcn.00431356
fstp qword [ebp - 0x40]
add esp, 0xc
lea ecx, [ebp - 0x18]
call fcn.0059415c
fld qword [ebp - 0x40]
fstp qword [eax + 0x140]
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x591e73
push eax
call fcn.007a760b
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0xa26
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1d
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x61
call fcn.00412986
mov edi, eax
pop ecx
neg edi
pop ecx
sbb edi, edi
lea ecx, [ebp - 0x18]
neg edi
call fcn.0059415c
lea edx, [eax + 0x178]
mov ecx, edi
mov dword [ebp + 8], eax
call fcn.0052a3ef
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x180], eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x591eeb
push eax
call fcn.007a760b
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0xa79
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1d
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x63
call fcn.00412986
mov edi, eax
pop ecx
neg edi
pop ecx
sbb edi, edi
lea ecx, [ebp - 0x18]
neg edi
call fcn.0059415c
mov dword [eax + 0x184], edi
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x591f50
push eax
call fcn.007a760b
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0xb86
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1d
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x65
call fcn.00412986
mov edi, eax
pop ecx
neg edi
pop ecx
sbb edi, edi
lea ecx, [ebp - 0x18]
neg edi
call fcn.0059415c
lea edx, [eax + 0x188]
mov ecx, edi
mov dword [ebp + 8], eax
call fcn.0052a3ef
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x190], eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x591fc8
push eax
call fcn.007a760b
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0xe79
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1d
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x67
call fcn.00412986
mov edi, eax
pop ecx
neg edi
pop ecx
sbb edi, edi
lea ecx, [ebp - 0x18]
neg edi
call fcn.0059415c
lea edx, [eax + 0x194]
mov ecx, edi
mov dword [ebp + 8], eax
call fcn.0052a3ef
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x19c], eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x592040
push eax
call fcn.007a760b
push ebx
push ecx
mov ecx, esp
mov dword [ebp + 8], esp
push str.hpTagColor
call fcn.004038a0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1d
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x69
call fcn.00412986
pop ecx
pop ecx
lea ecx, [ebp - 0x18]
mov dword [ebp + 8], eax
call fcn.0059415c
mov ecx, dword [ebp + 8]
mov edi, eax
lea edx, [edi + 0x1a0]
call fcn.00412a43
mov dword [edi + 0x1a8], eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x5920ad
push eax
call fcn.007a760b
push ebx
push ecx
mov ecx, esp
mov dword [ebp + 8], esp
push str.hpTagBgcolor
call fcn.004038a0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1d
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x6b
call fcn.00412986
pop ecx
pop ecx
lea ecx, [ebp - 0x18]
mov dword [ebp + 8], eax
call fcn.0059415c
mov ecx, dword [ebp + 8]
mov edi, eax
lea edx, [edi + 0x1ac]
call fcn.00412a43
mov dword [edi + 0x1b4], eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x59211a
push eax
call fcn.007a760b
push ebx
push ecx
mov ecx, esp
mov dword [ebp + 8], esp
push str.fixedDamage
call fcn.004038a0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1d
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x6d
call fcn.00412986
pop ecx
pop ecx
lea ecx, [ebp - 0x18]
mov dword [ebp + 8], eax
call fcn.0059415c
mov ecx, dword [ebp + 8]
mov edi, eax
lea edx, [edi + 0x1b8]
call fcn.00412a43
mov dword [edi + 0x1c0], eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x592187
push eax
call fcn.007a760b
push ebx
push ecx
mov ecx, esp
mov dword [ebp + 8], esp
push 0x871c58
call fcn.004038a0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1d
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x6f
call fcn.00412986
mov edi, eax
pop ecx
neg edi
pop ecx
sbb edi, edi
lea ecx, [ebp - 0x18]
neg edi
call fcn.0059415c
lea edx, [eax + 0x1c4]
mov ecx, edi
mov dword [ebp + 8], eax
call fcn.0052a3ef
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x1cc], eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x5921fc
push eax
call fcn.007a760b
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0xa25
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1d
call fcn.004025dd
mov ecx, eax
call fcn.00404855
mov ecx, eax
mov byte [ebp - 4], 0x71
call fcn.004037d0
cmp eax, ebx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x5c], ebx
je 0x59225a
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x5c]
call fcn.00404545
cmp eax, ebx
jge 0x59225a
cmp eax, 0x80004002
je 0x59225a
push eax
call fcn.007a760b
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x73
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x592272
push eax
call fcn.007a760b
cmp dword [ebp - 0x5c], ebx
je 0x592310
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0x3fd
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x73
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x75
call fcn.00412986
mov edi, eax
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x73
call fcn.00402b63
add esp, 0xc
cmp eax, ebx
jge 0x5922cc
push eax
call fcn.007a760b
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edi, ebx
setne cl
lea edx, [eax + 0x148]
mov dword [ebp + 8], eax
call fcn.0052a3ef
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x150], eax
mov eax, dword [ebp - 0x14]
shr edi, 1
and edi, 1
lea edx, [eax + 0x154]
mov ecx, edi
mov dword [ebp + 8], eax
call fcn.0052a3ef
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x15c], eax
jmp 0x592328
mov eax, dword [ebp - 0x14]
lea edx, [eax + 0x148]
xor ecx, ecx
mov edi, eax
call fcn.0052a3ef
mov dword [edi + 0x150], eax
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x1f0], ebx
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x1ec], ebx
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x1e8], ebx
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x1e4], ebx
lea eax, [ebp - 0xd4]
push eax
call dword [sym.imp.oleaut32.dll_VariantInit]
cmp dword [ebp - 0x38], ebx
mov byte [ebp - 4], 0x76
jne 0x59236c
push 0x80004003
call fcn.007a760b
mov ecx, dword [ebp - 0x38]
lea eax, [ebp - 0x6c]
push eax
call fcn.00404962
push eax
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x77
call fcn.004034b3
mov eax, dword [ebp - 0x6c]
cmp eax, ebx
mov byte [ebp - 4], 0x79
je 0x592396
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0xa4], ebx
mov edi, 0x7aa
cmp dword [ebp - 0x68], ebx
jne 0x5923b0
push 0x80004003
call fcn.007a760b
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax]
lea edx, [ebp - 0xa4]
push edx
lea edx, [ebp - 0xd4]
push edx
push 1
push eax
call dword [ecx + 0xc]
test eax, eax
jne 0x592545
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.004056d6
pop ecx
pop ecx
push 0x413
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x7a
call fcn.006144e8
mov ecx, dword [ebp - 0x1c]
cmp ecx, ebx
mov eax, dword [eax]
je 0x592404
mov ecx, dword [ecx]
jmp 0x592406
xor ecx, ecx
push 6
push eax
push ecx
call fcn.007aaa06
add esp, 0xc
neg eax
sbb al, al
inc al
lea ecx, [ebp - 0x34]
mov byte [ebp + 0xb], al
call fcn.00402616
cmp byte [ebp + 0xb], bl
je 0x592431
mov eax, dword [ebp - 0x14]
inc dword [eax + 0x1e4]
push edi
lea eax, [ebp - 0x64]
push eax
mov ecx, esi
call fcn.006144e8
mov ecx, dword [ebp - 0x1c]
cmp ecx, ebx
mov eax, dword [eax]
je 0x59244a
mov ecx, dword [ecx]
jmp 0x59244c
xor ecx, ecx
push 5
push eax
push ecx
call fcn.007aaa06
add esp, 0xc
neg eax
sbb al, al
inc al
lea ecx, [ebp - 0x64]
mov byte [ebp + 0xb], al
call fcn.00402616
cmp byte [ebp + 0xb], bl
je 0x59247c
mov eax, dword [ebp - 0x14]
inc dword [eax + 0x1e8]
jmp 0x592512
push 0x3f0
lea eax, [ebp - 0x48]
push eax
mov ecx, esi
call fcn.006144e8
mov ecx, dword [ebp - 0x1c]
cmp ecx, ebx
mov eax, dword [eax]
je 0x592499
mov ecx, dword [ecx]
jmp 0x59249b
xor ecx, ecx
push 3
push eax
push ecx
call fcn.007aaa06
add esp, 0xc
neg eax
sbb al, al
inc al
lea ecx, [ebp - 0x48]
mov byte [ebp + 0xb], al
call fcn.00402616
cmp byte [ebp + 0xb], bl
je 0x5924c8
mov eax, dword [ebp - 0x14]
inc dword [eax + 0x1f0]
jmp 0x592512
push 0x399
lea eax, [ebp - 0x3c]
push eax
mov ecx, esi
call fcn.006144e8
mov ecx, dword [ebp - 0x1c]
cmp ecx, ebx
mov eax, dword [eax]
je 0x5924e5
mov ecx, dword [ecx]
jmp 0x5924e7
xor ecx, ecx
push 3
push eax
push ecx
call fcn.007aaa06
add esp, 0xc
neg eax
sbb al, al
inc al
lea ecx, [ebp - 0x3c]
mov byte [ebp + 0xb], al
call fcn.00402616
cmp byte [ebp + 0xb], bl
je 0x592512
mov eax, dword [ebp - 0x14]
inc dword [eax + 0x1ec]
mov ecx, dword [ebp - 0x1c]
cmp ecx, ebx
mov byte [ebp - 4], 0x79
je 0x592525
call fcn.00403051
mov dword [ebp - 0x1c], ebx
lea eax, [ebp - 0xd4]
push eax
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x5923a1
push eax
call fcn.007a760b
jmp 0x5923a1
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push edi
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x79
call fcn.004025dd
mov ecx, eax
call fcn.00404855
mov ecx, eax
mov byte [ebp - 4], 0x7c
call fcn.004037d0
cmp eax, ebx
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x44], ebx
je 0x59259f
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x44]
call fcn.00404545
cmp eax, ebx
jge 0x59259f
cmp eax, 0x80004002
je 0x59259f
push eax
call fcn.007a760b
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x7e
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x5925b7
push eax
call fcn.007a760b
mov ecx, dword [ebp - 0x44]
cmp ecx, ebx
je 0x5925e6
push ecx
mov eax, esp
mov dword [eax], ecx
mov eax, dword [ebp - 0x44]
cmp eax, ebx
mov dword [ebp + 8], esp
je 0x5925d3
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x7e
call fcn.0059415c
mov ecx, eax
call fcn.00593ebf
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0xda6
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x7e
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x81
call fcn.00412986
mov edi, eax
pop ecx
neg edi
pop ecx
sbb edi, edi
lea ecx, [ebp - 0x18]
neg edi
call fcn.0059415c
mov dword [eax + 0x1d4], edi
lea eax, [ebp - 0x80]
push eax
mov byte [ebp - 4], 0x7e
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x59264b
push eax
call fcn.007a760b
push ebx
push ecx
mov eax, esp
mov dword [ebp + 8], esp
push 0xda7
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x7e
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x83
call fcn.00412986
pop ecx
pop ecx
lea ecx, [ebp - 0x18]
mov edi, eax
call fcn.0059415c
mov dword [eax + 0x1d8], edi
lea eax, [ebp - 0x80]
push eax
mov byte [ebp - 4], 0x7e
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x5926aa
push eax
call fcn.007a760b
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x1d4], ebx
je 0x5927c4
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x64], esp
push 0xe58
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x7e
call fcn.004025dd
mov ecx, eax
call fcn.00404855
mov ecx, eax
mov byte [ebp - 4], 0x85
call fcn.004037d0
cmp eax, ebx
mov dword [ebp - 0x48], eax
mov dword [ebp + 8], ebx
je 0x592717
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp + 8]
call fcn.00404545
cmp eax, ebx
jge 0x592717
cmp eax, 0x80004002
je 0x592717
push eax
call fcn.007a760b
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x87
call fcn.004047f1
lea ecx, [ebp + 8]
call fcn.00594107
test al, al
je 0x5927b8
mov dword [ebp - 0x34], ebx
mov edi, 0x7fffffff
push 0x20
pop eax
call fcn.007a88c0
mov eax, esp
push edi
push eax
push dword [ebp - 0x34]
call fcn.0041273f
pop ecx
mov ecx, esp
mov dword [ebp - 0x64], esp
push eax
call fcn.004038a0
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x87
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x89
call fcn.00412986
pop ecx
pop ecx
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 0x87
call fcn.004047f1
cmp dword [ebp - 0x1c], edi
je 0x5927b8
push 0xffffffffffffffff
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x18]
call fcn.0059415c
mov ecx, eax
add ecx, 0x1dc
call fcn.0059412e
inc dword [ebp - 0x34]
jmp 0x59273b
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x7e
call fcn.004025d0
push ebx
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x48], esp
push 0xf06
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x7e
call fcn.004025dd
mov ecx, eax
call fcn.00404855
mov ecx, eax
mov byte [ebp - 4], 0x8b
call fcn.004037d0
mov dword [ebp + 8], eax
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x60]
call fcn.00422bf8
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x8d
call fcn.004047f1
push ebx
lea ecx, [ebp - 0x60]
call fcn.0059410f
test al, al
je 0x592863
push ebx
push ecx
mov eax, esp
mov dword [ebp - 0x3c], esp
push 0xf07
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x8d
call fcn.004025dd
mov ecx, eax
call fcn.00404855
mov dword [ebp - 0x70], 1
push eax
mov byte [ebp - 4], 0x8f
call fcn.00412986
pop ecx
pop ecx
mov ebx, eax
lea ecx, [ebp - 0x18]
call fcn.0059415c
test byte [ebp - 0x70], 1
mov dword [eax + 0x1e0], ebx
mov dword [ebp - 4], 0x8d
je 0x592886
lea ecx, [ebp - 0x58]
call fcn.004047f1
lea ecx, [ebp - 0x60]
call fcn.004025d0
lea ecx, [ebp - 0x44]
call fcn.004025d0
lea ecx, [ebp - 0x68]
call fcn.004025f3
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x73
call fcn.004047f1
lea ecx, [ebp - 0x5c]
call fcn.004025d0
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 0x1c
call fcn.004047f1
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0x1a
call fcn.004047f1
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 0x18
call fcn.004047f1
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x16
call fcn.004047f1
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 0x14
call fcn.004047f1
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 8
call fcn.004047f1
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 6
call fcn.004047f1
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 5
call fcn.00594146
lea ecx, [ebp - 0x38]
call fcn.004025d0
lea ecx, [ebp - 0x10]
call fcn.004025d0
lea ecx, [ebp + 0xc]
call fcn.004025d0
push 1
pop eax
jmp 0x5929f7
lea eax, [ebp - 0xf4]
push eax
mov byte [ebp - 4], 0x18
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x592965
push eax
call fcn.007a760b
lea eax, [ebp - 0x114]
push eax
mov byte [ebp - 4], 0x16
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x592980
push eax
call fcn.007a760b
lea eax, [ebp - 0xe4]
push eax
mov byte [ebp - 4], 0x14
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x59299b
push eax
call fcn.007a760b
lea eax, [ebp - 0x104]
push eax
mov byte [ebp - 4], 8
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x5929b6
push eax
call fcn.007a760b
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 4], 6
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x5929d1
push eax
call fcn.007a760b
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 5
call fcn.005941ec
lea ecx, [ebp - 0x38]
call fcn.0040278b
lea ecx, [ebp - 0x10]
call fcn.0040278b
lea ecx, [ebp + 0xc]
call fcn.0040278b
xor eax, eax
mov ecx, dword [ebp - 0xc]
lea esp, [ebp - 0x130]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret