Function at 0xb66180
Capabilities:
Link many functions at runtime
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x284
mov eax, dword [0xd08954]
xor eax, esp
mov dword [esp + 0x280], eax
push ebx
push esi
mov esi, ecx
mov dword [esp + 0x44], 0
push edi
lea eax, [esp + 0x11c]
mov dword [esp + 0x10], esi
push eax
push dword [esi + 4]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_GetClientRect]
test eax, eax
je 0xb66efd
lea eax, [esp + 0x11c]
push eax
call dword [sym.imp.api_ms_win_ntuser_rectangle_l1_1_0.dll_IsRectEmpty]
test eax, eax
jne 0xb66efd
mov eax, dword [esi + 0x88]
test eax, eax
je 0xb66eea
mov eax, dword [eax]
mov dword [esp + 0x18], eax
test eax, eax
jle 0xb66eea
mov ecx, dword [esi + 0x30]
mov eax, dword [esi + 0xf8]
mov dword [esp + 0xd0], eax
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], 0
test ecx, ecx
je 0xb66248
mov eax, dword [ecx]
mov edi, dword [eax + 0x58]
cmp edi, fcn.00b71260
jne 0xbe7f72
test byte [ecx + 0x30], 0x10
jne 0xbe7f6b
xor cl, cl
lea eax, [esp + 0x6c]
mov edx, 4
push eax
call fcn.00b70e40
mov eax, dword [esi + 0x14c]
mov ebx, 1
mov edi, dword [0xd08c24]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x14], eax
cmp edi, 0xffffffff
je 0xbe7f89
test edi, edi
je 0xb6627e
mov ecx, edi
call dword [0xd0cffc]
call edi
mov ebx, eax
mov eax, dword [0xd08c28]
cmp eax, 0xffffffff
je 0xbe7fbc
cmp dword [0xd0a234], ebx
jne 0xbe7fbc
push eax
push 0x60
push dword [esp + 0x1c]
call dword [sym.imp.api_ms_win_core_largeinteger_l1_1_0.dll_MulDiv]
push 0x60
push dword [esp + 0x58]
push eax
call dword [sym.imp.api_ms_win_core_largeinteger_l1_1_0.dll_MulDiv]
mov edi, dword [0xd08c24]
mov ebx, 1
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0x14], eax
cmp edi, 0xffffffff
je 0xbe8009
test edi, edi
je 0xb662e2
mov ecx, edi
call dword [0xd0cffc]
call edi
mov ebx, eax
mov eax, dword [0xd08c28]
cmp eax, 0xffffffff
je 0xbe803c
cmp dword [0xd0a234], ebx
jne 0xbe803c
push eax
push 0x60
push dword [esp + 0x1c]
call dword [sym.imp.api_ms_win_core_largeinteger_l1_1_0.dll_MulDiv]
push 0x60
push dword [esp + 0x58]
push eax
call dword [sym.imp.api_ms_win_core_largeinteger_l1_1_0.dll_MulDiv]
mov ecx, eax
mov eax, dword [esi + 0x70]
add eax, dword [esi + 0x6c]
add eax, ecx
mov dword [esp + 0x70], ecx
mov dword [esp + 0x54], eax
mov eax, dword [esi + 0x54]
add dword [esp + 0x11c], eax
mov eax, dword [esi + 0x5c]
add dword [esp + 0x120], eax
mov eax, dword [esi + 0x58]
sub dword [esp + 0x124], eax
mov eax, dword [esi + 0x60]
sub dword [esp + 0x128], eax
lea eax, [esp + 0x12c]
push eax
push dword [esi + 4]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_GetParent]
push eax
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_GetWindowRect]
test eax, eax
je 0xb66eea
mov eax, dword [esp + 0x130]
neg eax
push eax
mov eax, dword [esp + 0x130]
neg eax
push eax
lea eax, [esp + 0x134]
push eax
call dword [sym.imp.api_ms_win_ntuser_rectangle_l1_1_0.dll_OffsetRect]
mov ecx, dword [esi + 0x34]
test ecx, ecx
je 0xb663b4
mov eax, dword [ecx]
mov edi, dword [eax + 0x30]
cmp edi, fcn.00b76080
jne 0xbe8089
test byte [ecx + 0x44], 1
jne 0xbe809c
mov eax, dword [esp + 0x134]
sub eax, dword [esi + 0x58]
sub eax, dword [esi + 0x54]
sub eax, dword [esp + 0x12c]
mov ecx, dword [esi + 0x30]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x138]
sub eax, dword [esp + 0x130]
mov dword [esp + 0x4c], eax
mov eax, dword [esi + 0x60]
add eax, dword [esi + 0x5c]
mov dword [esp + 0x50], eax
mov eax, dword [esi + 0xf8]
mov dword [esp + 0x20], 1
mov dword [esp + 0x44], eax
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
test ecx, ecx
je 0xb6643d
mov eax, dword [ecx]
mov edi, dword [eax + 0x58]
cmp edi, fcn.00b71260
jne 0xbe8513
test byte [ecx + 0x30], 0x10
jne 0xbe850c
xor cl, cl
lea eax, [esp + 0x74]
mov edx, 4
push eax
call fcn.00b70e40
mov edi, dword [0xd08c24]
mov ebx, 1
mov eax, dword [esi + 0x14c]
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x14], ecx
cmp edi, 0xffffffff
je 0xbe852a
test edi, edi
je 0xb66473
mov ecx, edi
call dword [0xd0cffc]
call edi
mov ebx, eax
mov ecx, dword [0xd08c28]
cmp ecx, 0xffffffff
je 0xbe855d
cmp dword [0xd0a234], ebx
jne 0xbe855d
push ecx
push 0x60
push dword [esp + 0x1c]
call dword [sym.imp.api_ms_win_core_largeinteger_l1_1_0.dll_MulDiv]
push 0x60
push dword [esp + 0x20]
push eax
call dword [sym.imp.api_ms_win_core_largeinteger_l1_1_0.dll_MulDiv]
mov edi, dword [0xd08c24]
mov ebx, 1
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x74], eax
mov dword [esp + 0x14], ecx
cmp edi, 0xffffffff
je 0xbe85ac
test edi, edi
je 0xb664d8
mov ecx, edi
call dword [0xd0cffc]
call edi
mov ebx, eax
mov ecx, dword [0xd08c28]
cmp ecx, 0xffffffff
je 0xbe85df
cmp dword [0xd0a234], ebx
jne 0xbe85df
push ecx
push 0x60
push dword [esp + 0x1c]
call dword [sym.imp.api_ms_win_core_largeinteger_l1_1_0.dll_MulDiv]
push 0x60
push dword [esp + 0x20]
push eax
call dword [sym.imp.api_ms_win_core_largeinteger_l1_1_0.dll_MulDiv]
mov ecx, dword [esi + 0x70]
add ecx, dword [esi + 0x6c]
add eax, ecx
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x78], eax
lea edi, [eax + ecx]
sub ecx, dword [esp + 0x50]
add ecx, dword [esp + 0x4c]
cmp edi, 0x29
jne 0xb673c3
mov eax, 0x63e7063f
imul ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov dword [esp + 0x34], ecx
mov eax, dword [esi + 0x88]
mov ebx, dword [esp + 0x28]
test eax, eax
je 0xbe862e
mov eax, dword [eax]
xor edi, edi
mov dword [esp + 0x40], eax
test eax, eax
jle 0xb665d4
dec eax
mov dword [esp + 0x30], eax
lea esp, [esp]
mov eax, dword [esi + 0x88]
mov eax, dword [eax + 4]
mov ecx, dword [eax + edi*4]
mov dword [esp + 0x1c], ecx
mov eax, dword [ecx]
mov eax, dword [eax + 0x34]
mov dword [esp + 0x14], eax
cmp eax, fcn.00b6e5d0
jne 0xbe8635
lea eax, [esp + 0x94]
push eax
push 1
push 1
push 0xffffffffffffffff
push 0xffffffffffffffff
push ecx
call fcn.00b6e5d0
mov ecx, eax
sub ecx, dword [esp + 0x94]
sub ebx, ecx
mov dword [esp + 0x3c], ecx
cmp edi, dword [esp + 0x30]
jge 0xb665c5
sub ebx, dword [esi + 0xf4]
test ebx, ebx
js 0xbe8657
inc edi
cmp edi, dword [esp + 0x40]
jl 0xb66570
mov eax, dword [esp + 0x34]
cmp eax, dword [esp + 0x20]
jg 0xbe87b3
mov eax, dword [esp + 0x138]
sub eax, dword [esp + 0x130]
mov ecx, dword [esi + 0x30]
mov dword [esp + 0x4c], eax
mov eax, dword [esi + 0x60]
add eax, dword [esi + 0x5c]
mov dword [esp + 0x50], eax
mov eax, dword [esi + 0xf8]
mov dword [esp + 0x44], eax
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
test ecx, ecx
je 0xb6664e
mov eax, dword [ecx]
mov edi, dword [eax + 0x58]
cmp edi, fcn.00b71260
jne 0xbe87c3
test byte [ecx + 0x30], 0x10
jne 0xbe87bc
xor cl, cl
lea eax, [esp + 0x7c]
mov edx, 4
push eax
call fcn.00b70e40
mov edi, dword [0xd08c24]
mov ebx, 1
mov eax, dword [esi + 0x14c]
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x14], ecx
cmp edi, 0xffffffff
je 0xbe87da
test edi, edi
je 0xb66684
mov ecx, edi
call dword [0xd0cffc]
call edi
mov ebx, eax
mov ecx, dword [0xd08c28]
cmp ecx, 0xffffffff
je 0xbe880d
cmp dword [0xd0a234], ebx
jne 0xbe880d
push ecx
push 0x60
push dword [esp + 0x1c]
call dword [sym.imp.api_ms_win_core_largeinteger_l1_1_0.dll_MulDiv]
push 0x60
push dword [esp + 0x20]
push eax
call dword [sym.imp.api_ms_win_core_largeinteger_l1_1_0.dll_MulDiv]
mov edi, dword [0xd08c24]
mov ebx, 1
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x7c], eax
mov dword [esp + 0x14], ecx
cmp edi, 0xffffffff
je 0xbe885c
test edi, edi
je 0xb666ec
mov ecx, edi
call dword [0xd0cffc]
call edi
mov ebx, eax
mov ecx, dword [0xd08c28]
cmp ecx, 0xffffffff
je 0xbe888f
cmp dword [0xd0a234], ebx
jne 0xbe888f
push ecx
push 0x60
push dword [esp + 0x1c]
call dword [sym.imp.api_ms_win_core_largeinteger_l1_1_0.dll_MulDiv]
push 0x60
push dword [esp + 0x20]
push eax
call dword [sym.imp.api_ms_win_core_largeinteger_l1_1_0.dll_MulDiv]
mov ecx, dword [esi + 0x70]
add ecx, dword [esi + 0x6c]
add eax, ecx
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x80], eax
lea edi, [eax + ecx]
sub ecx, dword [esp + 0x50]
add ecx, dword [esp + 0x4c]
cmp edi, 0x29
jne 0xb673d1
mov eax, 0x63e7063f
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [esp + 0x20], eax
jg 0xbe88de
mov byte [esp + 0x3b], 0
mov ecx, dword [esi + 0x34]
mov dword [esp + 0x24], 1
test ecx, ecx
je 0xb6679a
mov eax, dword [ecx]
mov edi, dword [eax + 0x30]
cmp edi, fcn.00b76080
jne 0xbe891a
test byte [ecx + 0x44], 1
jne 0xbe890d
mov dword [esp + 0x24], 1
mov eax, dword [esi + 0x60]
add eax, dword [esi + 0x5c]
mov ecx, dword [esi + 0x30]
mov dword [esp + 0x60], eax
mov eax, dword [esi + 0xf8]
mov dword [esp + 0x64], eax
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 0
test ecx, ecx
je 0xb667fa
mov eax, dword [ecx]
mov edi, dword [eax + 0x58]
cmp edi, fcn.00b71260
jne 0xbe8935
test byte [ecx + 0x30], 0x10
jne 0xbe892e
xor cl, cl
lea eax, [esp + 0x84]
mov edx, 4
push eax
call fcn.00b70e40
mov edi, dword [0xd08c24]
mov ebx, 1
mov eax, dword [esi + 0x14c]
mov ecx, dword [esp + 0x84]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x14], ecx
cmp edi, 0xffffffff
je 0xbe894f
test edi, edi
je 0xb66833
mov ecx, edi
call dword [0xd0cffc]
call edi
mov ebx, eax
mov ecx, dword [0xd08c28]
cmp ecx, 0xffffffff
je 0xbe8982
cmp dword [0xd0a234], ebx
jne 0xbe8982
push ecx
push 0x60
push dword [esp + 0x1c]
call dword [sym.imp.api_ms_win_core_largeinteger_l1_1_0.dll_MulDiv]
push 0x60
push dword [esp + 0x20]
push eax
call dword [sym.imp.api_ms_win_core_largeinteger_l1_1_0.dll_MulDiv]
mov edi, dword [0xd08c24]
mov ebx, 1
mov ecx, dword [esp + 0x88]
mov dword [esp + 0x84], eax
mov dword [esp + 0x14], ecx
cmp edi, 0xffffffff
je 0xbe89d1
test edi, edi
je 0xb6689e
mov ecx, edi
call dword [0xd0cffc]
call edi
mov ebx, eax
mov ecx, dword [0xd08c28]
cmp ecx, 0xffffffff
je 0xbe8a04
cmp dword [0xd0a234], ebx
jne 0xbe8a04
push ecx
push 0x60
push dword [esp + 0x1c]
call dword [sym.imp.api_ms_win_core_largeinteger_l1_1_0.dll_MulDiv]
push 0x60
push dword [esp + 0x20]
push eax
call dword [sym.imp.api_ms_win_core_largeinteger_l1_1_0.dll_MulDiv]
mov ecx, dword [esi + 0x70]
add ecx, dword [esi + 0x6c]
mov edx, dword [esp + 0x24]
add eax, ecx
mov dword [esp + 0x68], eax
mov dword [esp + 0x88], eax
test edx, edx
je 0xbe8b78
mov eax, dword [esp + 0x138]
sub eax, dword [esp + 0x130]
mov ecx, dword [esi + 0x30]
mov dword [esp + 0x4c], eax
mov eax, dword [esi + 0x60]
add eax, dword [esi + 0x5c]
mov dword [esp + 0x50], eax
mov eax, dword [esi + 0xf8]
mov dword [esp + 0x44], eax
mov dword [esp + 0x8c], 0
mov dword [esp + 0x90], 0
test ecx, ecx
je 0xb66964
mov eax, dword [ecx]
mov edi, dword [eax + 0x58]
cmp edi, fcn.00b71260
jne 0xbe8a5a
test byte [ecx + 0x30], 0x10
jne 0xbe8a53
xor cl, cl
lea eax, [esp + 0x8c]
mov edx, 4
push eax
call fcn.00b70e40
mov edi, dword [0xd08c24]
mov ebx, 1
mov eax, dword [esi + 0x14c]
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x14], ecx
cmp edi, 0xffffffff
je 0xbe8a74
test edi, edi
je 0xb6699d
mov ecx, edi
call dword [0xd0cffc]
call edi
mov ebx, eax
mov ecx, dword [0xd08c28]
cmp ecx, 0xffffffff
je 0xbe8aa7
cmp dword [0xd0a234], ebx
jne 0xbe8aa7
push ecx
push 0x60
push dword [esp + 0x1c]
call dword [sym.imp.api_ms_win_core_largeinteger_l1_1_0.dll_MulDiv]
push 0x60
push dword [esp + 0x20]
push eax
call dword [sym.imp.api_ms_win_core_largeinteger_l1_1_0.dll_MulDiv]
mov edi, dword [0xd08c24]
mov ebx, 1
mov ecx, dword [esp + 0x90]
mov dword [esp + 0x8c], eax
mov dword [esp + 0x14], ecx
cmp edi, 0xffffffff
je 0xbe8af6
test edi, edi
je 0xb66a08
mov ecx, edi
call dword [0xd0cffc]
call edi
mov ebx, eax
mov ecx, dword [0xd08c28]
cmp ecx, 0xffffffff
je 0xbe8b29
cmp dword [0xd0a234], ebx
jne 0xbe8b29
push ecx
push 0x60
push dword [esp + 0x1c]
call dword [sym.imp.api_ms_win_core_largeinteger_l1_1_0.dll_MulDiv]
push 0x60
push dword [esp + 0x20]
push eax
call dword [sym.imp.api_ms_win_core_largeinteger_l1_1_0.dll_MulDiv]
mov ecx, dword [esi + 0x70]
add ecx, dword [esi + 0x6c]
add eax, ecx
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x90], eax
lea edi, [eax + ecx]
sub ecx, dword [esp + 0x50]
add ecx, dword [esp + 0x4c]
cmp edi, 0x29
jne 0xb673db
mov eax, 0x63e7063f
imul ecx
sar edx, 4
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
mov dword [esp + 0x2c], ebx
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
cmp ebx, ecx
jl 0xbe8b86
xor eax, eax
mov dword [esp + 0x1c], eax
cmp eax, dword [esi + 0xc4]
jne 0xbe8b90
test eax, eax
jne 0xbe8b96
test byte [0xd0a5c0], 1
jne 0xbe8d7a
mov ecx, dword [esi + 0x34]
xor eax, eax
mov dword [esp + 0x98], eax
test ecx, ecx
je 0xb66ae3
mov eax, dword [ecx]
lea edx, [esp + 0x98]
push edx
push ecx
mov esi, dword [eax + 0x18]
mov ecx, esi
call dword [0xd0cffc]
call esi
mov eax, dword [esp + 0x98]
mov esi, dword [esp + 0x10]
test al, 1
je 0xb66b6b
mov ecx, dword [esi + 0x34]
xor eax, eax
mov dword [esp + 0x9c], eax
test ecx, ecx
je 0xb66b1e
mov eax, dword [ecx]
lea edx, [esp + 0x9c]
push edx
push ecx
mov esi, dword [eax + 0x18]
mov ecx, esi
call dword [0xd0cffc]
call esi
mov eax, dword [esp + 0x9c]
mov esi, dword [esp + 0x10]
test al, 2
je 0xbe8d8b
mov eax, dword [esp + 0x18]
xor ebx, ebx
test eax, eax
jle 0xb66b6f
mov eax, dword [esi + 0x88]
mov eax, dword [eax + 4]
mov edi, dword [eax + ebx*4]
mov eax, dword [edi]
mov eax, dword [eax + 0x5c]
mov dword [esp + 0x5c], eax
cmp eax, 0xb67ca0
jne 0xbe8ead
cmp dword [edi + 0x20], 0
je 0xbe8e24
cmp dword [edi + 0x20], 1
je 0xb66c64
inc ebx
cmp ebx, dword [esp + 0x18]
jl 0xb66b30
mov eax, dword [esp + 0x18]
xor ebx, ebx
xor ecx, ecx
xor edi, edi
mov dword [esp + 0x64], ebx
mov dword [esp + 0x30], ecx
test eax, eax
jle 0xb66be2
mov eax, dword [esi + 0x88]
mov eax, dword [eax + 4]
mov ecx, dword [eax + edi*4]
mov eax, dword [ecx]
mov eax, dword [eax + 0x34]
mov dword [esp + 0x14], eax
cmp eax, fcn.00b6e5d0
jne 0xbe8ed8
lea eax, [esp + 0x60]
push eax
push 1
push 1
push 0xffffffffffffffff
push 0xffffffffffffffff
push ecx
call fcn.00b6e5d0
add ebx, eax
mov eax, dword [esp + 0x18]
dec eax
cmp edi, eax
jge 0xb66f17
mov eax, dword [esi + 0xf4]
mov ecx, dword [esp + 0x30]
inc edi
add ecx, dword [esp + 0x60]
add ebx, eax
mov dword [esp + 0x30], ecx
cmp edi, dword [esp + 0x18]
jl 0xb66b81
mov dword [esp + 0x64], ebx
cmp dword [esi + 0xc4], 0
fld1
mov edi, dword [esp + 0x11c]
fstp dword [esp + 0x1c]
jne 0xbe8f22
mov edx, dword [esp + 0x124]
sub edx, edi
imul edx, dword [esp + 0x20]
cmp edx, ebx
jl 0xbe8ef7
mov eax, dword [esp + 0x124]
xor edx, edx
sub eax, edi
mov dword [esp + 0x13c], edi
add eax, edi
mov dword [esp + 0x28], edx
mov dword [esp + 0x3c], eax
or ecx, 0xffffffff
mov eax, dword [esp + 0x120]
xor ebx, ebx
mov dword [esp + 0x140], eax
add eax, dword [esp + 0x54]
mov dword [esp + 0x148], eax
mov dword [esp + 0x20], ecx
mov dword [esp + 0x34], edx
mov dword [esp + 0x40], ebx
cmp dword [esp + 0x18], edx
jle 0xb66e1a
jmp 0xb66ca4
mov eax, dword [edi + 0x1c]
test eax, eax
je 0xb66b64
cmp dword [eax], 1
jle 0xb66b64
mov eax, dword [edi]
push 1
push edi
mov eax, dword [eax + 0x64]
mov dword [esp + 0x64], eax
cmp eax, fcn.00b67d20
jne 0xbe8ec7
call fcn.00b67d20
jmp 0xb66b64
mov ecx, dword [esp + 0x20]
cmp dword [esp + 0x48], 0
jl 0xb66e1a
mov eax, dword [esi + 0x88]
mov eax, dword [eax + 4]
mov edi, dword [eax + ebx*4]
cmp ebx, edx
je 0xb66cc2
or ecx, 0xffffffff
mov eax, dword [edi]
mov ebx, dword [eax + 0x34]
lea eax, [esp + 0x24]
push eax
push 1
push 1
push 0xffffffffffffffff
push ecx
push edi
cmp ebx, fcn.00b6e5d0
jne 0xbe8f2d
call fcn.00b6e5d0
fld dword [esp + 0x1c]
mov ebx, eax
sub ebx, dword [esp + 0x24]
fst qword [esp + 0x110]
fild dword [esp + 0x24]
fstp dword [esp + 0x2c]
fmul dword [esp + 0x2c]
call fcn.00bc6351
mov edx, dword [esp + 0x13c]
mov dword [esp + 0x24], eax
add eax, ebx
mov dword [esp + 0xd4], eax
lea ecx, [eax + edx]
cmp ecx, dword [esp + 0x3c]
jg 0xbe8f3c
mov eax, dword [esp + 0x28]
xor ebx, ebx
cmp dword [esp + 0x40], eax
mov dword [esp + 0x144], ecx
mov eax, dword [edi]
setne bl
dec ebx
and ebx, dword [esp + 0x34]
mov eax, dword [eax + 0x44]
mov dword [esp + 0x58], eax
cmp eax, 0xb6d710
jne 0xbe9262
cmp dword [edi + 0x18], 0
mov dword [esp + 0x48], 0
je 0xb671a5
mov eax, dword [edi + 0x18]
test eax, eax
je 0xbe916e
mov eax, dword [eax]
cmp ebx, eax
jge 0xb671ed
mov eax, dword [0xd08c60]
mov ecx, dword [edi + 0x18]
mov dword [esp + 0x58], ecx
mov dword [esp + 0x2c], eax
cmp eax, 0xffffffff
je 0xbe9175
test eax, eax
je 0xbe9196
push ebx
push ecx
mov ecx, eax
call dword [0xd0cffc]
call dword [esp + 0x34]
lea ecx, [esp + 0x13c]
mov dword [eax + 0x10], 0xffffffff
push ecx
push eax
call dword [sym.imp.api_ms_win_ntuser_rectangle_l1_1_0.dll_CopyRect]
cmp dword [edi + 0x20], 0
je 0xbe919d
inc ebx
lea esp, [esp]
mov eax, dword [edi + 0x18]
test eax, eax
je 0xbe9226
mov eax, dword [eax]
cmp ebx, eax
jl 0xbe922d
mov eax, dword [esi + 0xf4]
add eax, dword [esp + 0xd4]
push 0
push eax
lea eax, [esp + 0x144]
push eax
call dword [sym.imp.api_ms_win_ntuser_rectangle_l1_1_0.dll_OffsetRect]
mov ebx, dword [esp + 0x40]
mov edx, dword [esp + 0x28]
inc ebx
mov dword [esp + 0x40], ebx
cmp ebx, dword [esp + 0x18]
jl 0xb66ca0
mov edi, dword [esp + 0x64]
lea eax, [esp + 0x68]
sub edi, dword [esp + 0x30]
mov ebx, dword [esi + 0x144]
push eax
lea eax, [esp + 0xdc]
push eax
push 0
push 0xd0a218
call dword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_InitOnceBeginInitialize]
cmp dword [esp + 0xd8], 0
jne 0xb673eb
mov eax, dword [esp + 0x68]
mov eax, dword [eax + 4]
test eax, eax
je 0xb66ea3
cmp dword [eax], 0
jbe 0xb66ea3
test ebx, ebx
je 0xbe9283
mov bl, 1
lea eax, [esp + 0x4c]
push eax
lea eax, [esp + 0xe0]
push eax
push 0
push 0xd0a218
call dword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_InitOnceBeginInitialize]
cmp dword [esp + 0xdc], 0
jne 0xbe928a
test bl, bl
je 0xb66ea3
mov ebx, dword [esp + 0x4c]
mov eax, dword [esp + 0x18]
cmp dword [ebx + 0x10], eax
jne 0xb66f1e
mov eax, dword [esp + 0x11c]
mov ecx, esi
mov dword [esp + 0x13c], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x144], eax
lea eax, [esp + 0x13c]
push eax
mov eax, dword [esp + 0x1c]
push 0xffffffffffffffff
dec eax
push eax
push dword [esp + 0x2c]
push dword [esp + 0x38]
push dword [esp + 0x48]
call fcn.00b64d60
cmp dword [esp + 0x48], 0
jl 0xbe937b
cmp dword [esi + 0x50], 0
jne 0xb66efd
push 0
push 0
push dword [esi + 4]
call dword [sym.imp.ext_ms_win_ntuser_draw_l1_1_0.dll_InvalidateRect]
mov eax, 1
mov ecx, dword [esp + 0x28c]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00bc0ea0
mov esp, ebp
pop ebp
ret
xor eax, eax
jmp 0xb66bc9
lea eax, [esp + 0x50]
push eax
lea eax, [esp + 0xa4]
push eax
push 0
push 0xd0ac68
call dword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_InitOnceBeginInitialize]
cmp dword [esp + 0xa0], 0
jne 0xbe92d0
mov esi, dword [esp + 0x50]
xor dl, dl
add esi, 0x10
mov al, byte [esi]
mov cl, al
or cl, dl
lock cmpxchg byte [esi], cl
jne 0xb66f51
push 0xc21420
test al, al
je 0xb67262
call fcn.00b63419
mov edx, dword [eax + 4]
cmp dword [edx], 5
jbe 0xbe932c
mov ecx, dword [edx + 0xc]
xor eax, eax
and ecx, 0x4000
or eax, ecx
je 0xbe932c
mov ecx, dword [edx + 0x14]
xor esi, esi
mov eax, ecx
and eax, 0x4000
cmp esi, dword [edx + 0x10]
jne 0xbe932c
cmp eax, ecx
jne 0xbe932c
movzx eax, byte [esp + 0x3b]
mov dword [esp + 0xa4], eax
lea eax, [esp + 0xa4]
mov dword [esp + 0x1c8], eax
lea eax, [esp + 0xa8]
mov dword [esp + 0x1d8], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0xac], eax
lea eax, [esp + 0xac]
mov dword [esp + 0x1e8], eax
lea eax, [esp + 0xb0]
mov dword [esp + 0x1f8], eax
xor eax, eax
mov dword [esp + 0x1cc], esi
mov dword [esp + 0x1d4], esi
mov dword [esp + 0x1dc], esi
mov dword [esp + 0x1e4], esi
mov dword [esp + 0x1ec], esi
mov dword [esp + 0x1f4], esi
mov esi, dword [esp + 0x18]
cmp dword [ebx + 0x10], esi
mov dword [esp + 0x1d0], 4
setl al
mov dword [esp + 0xa8], edi
mov dword [esp + 0xb4], eax
lea eax, [esp + 0xb4]
mov dword [esp + 0x1e0], 4
mov dword [esp + 0x1f0], 4
mov dword [esp + 0xb0], esi
mov dword [esp + 0x1fc], 0
mov dword [esp + 0x200], 4
mov dword [esp + 0x204], 0
mov dword [esp + 0x208], eax
mov dword [esp + 0x20c], 0
mov dword [esp + 0x210], 4
mov dword [esp + 0x214], 0
mov al, byte [0xb3d32c]
mov ecx, 0xb39888
movzx eax, word [0xb39889]
sub ecx, 0xb345b0
mov dword [esp + 0x104], eax
or ecx, 0xb000000
mov eax, dword [edx + 4]
mov dword [esp + 0x1a8], eax
mov dword [esp + 0x100], ecx
mov dword [esp + 0x108], 0
mov dword [esp + 0x10c], 0x4000
mov dword [esp + 0x1ac], 0
movzx eax, word [eax]
mov dword [esp + 0x1b0], eax
lea eax, [esp + 0x1a8]
push eax
push 7
push 0
push 0
lea eax, [esp + 0x110]
mov dword [esp + 0x1c4], 2
push eax
push dword [edx + 0x1c]
mov dword [esp + 0x1d0], 0xb39893
push dword [edx + 0x18]
mov dword [esp + 0x1d8], 0
mov dword [esp + 0x1dc], 0x50
mov dword [esp + 0x1e0], 1
call dword [sym.imp.api_ms_win_eventing_provider_l1_1_0.dll_EventWriteTransfer]
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0xcc]
push eax
push 0
push 0xd0a218
call dword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_InitOnceBeginInitialize]
cmp dword [esp + 0xc8], 0
jne 0xbe9335
mov eax, dword [esp + 0x14]
mov dword [eax + 0x10], esi
mov esi, dword [esp + 0x10]
jmp 0xb66ea3
mov eax, dword [0xd08c68]
mov dword [esp + 0x2c], eax
cmp eax, 0xffffffff
je 0xbe913d
test eax, eax
je 0xbe915a
push 1
push 0x14
mov ecx, eax
call dword [0xd0cffc]
call dword [esp + 0x34]
mov dword [edi + 0x18], eax
test eax, eax
je 0xbe9161
mov ecx, dword [esp + 0x144]
mov edx, dword [esp + 0x13c]
jmp 0xb66d67
mov eax, dword [esp + 0x140]
mov ebx, dword [edi + 0x18]
mov edi, dword [0xd08c54]
mov dword [esp + 0x17c], eax
mov eax, dword [esp + 0x148]
mov dword [esp + 0x178], edx
mov dword [esp + 0x180], ecx
mov dword [esp + 0x184], eax
mov dword [esp + 0x188], 0xffffffff
cmp edi, 0xffffffff
je 0xbe923b
test edi, edi
je 0xbe9255
lea eax, [esp + 0x178]
mov ecx, edi
push eax
push SysReAllocString
push ebx
call dword [0xd0cffc]
call edi
cmp eax, 0xffffffff
jne 0xb66de5
jmp 0xbe9255
call fcn.00b63419
mov ecx, dword [eax + 4]
cmp dword [ecx], 5
jbe 0xbe932c
push 0
push 0
call fcn.00b54cc0
mov esi, dword [esp + 0x18]
test al, al
je 0xb6716d
movzx eax, byte [esp + 0x3b]
mov dword [esp + 0xb8], eax
lea eax, [esp + 0xb8]
mov dword [esp + 0x238], eax
lea eax, [esp + 0xbc]
mov dword [esp + 0x248], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0xc0], eax
lea eax, [esp + 0xc0]
mov dword [esp + 0x258], eax
lea eax, [esp + 0xc4]
mov dword [esp + 0x23c], 0
mov dword [esp + 0x240], 4
mov dword [esp + 0x244], 0
mov dword [esp + 0xbc], edi
mov dword [esp + 0x24c], 0
mov dword [esp + 0x250], 4
mov dword [esp + 0x254], 0
mov dword [esp + 0x25c], 0
mov dword [esp + 0x260], 4
mov dword [esp + 0x264], 0
mov dword [esp + 0xc4], esi
mov dword [esp + 0x268], eax
mov dword [esp + 0x26c], 0
mov dword [esp + 0x270], 4
mov dword [esp + 0x274], 0
cmp dword [ebx + 0x10], esi
jge 0xbe931f
mov dword [esp + 0x44], 1
lea eax, [esp + 0x44]
mov dword [esp + 0x27c], 0
mov dword [esp + 0x278], eax
mov dword [esp + 0x280], 4
mov dword [esp + 0x284], 0
lea eax, [esp + 0x218]
mov edx, 0xb3982d
push eax
push 7
push 0
push 0
call fcn.00b809fe
jmp 0xb6716d
mov eax, ecx
cdq
idiv edi
mov dword [esp + 0x34], eax
jmp 0xb66546
mov eax, ecx
cdq
idiv edi
jmp 0xb66759
mov eax, ecx
cdq
idiv edi
mov ebx, eax
mov dword [esp + 0x2c], eax
jmp 0xb66a79
push 0xc98390
mov dword [esp + 0xe4], 0xd0a218
mov dword [esp + 0x6c], 0xd0a21c
mov dword [0xd0a21c], 0xb11080
call fcn.00bc122d
add esp, 4
mov dword [esp + 0xe4], 0
lea ecx, [esp + 0xe0]
call fcn.00baaeb2
jmp 0xb66e50
mov cl, 1
jmp 0xb66239
lea eax, [esp + 0x6c]
push eax
push 4
push ecx
mov ecx, edi
call dword [0xd0cffc]
call edi
jmp 0xb66248
push 0xb2b82c
call dword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleW]
test eax, eax
je 0xbe7fb1
push 0xb2b818
push eax
call dword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
mov edi, eax
mov dword [0xd08c24], edi
jmp 0xb6626e
mov edi, dword [0xd08c24]
jmp 0xb6626e
push 0
mov dword [0xd0a234], ebx
call dword [sym.imp.USER32.dll_GetDC]
mov edi, eax
test edi, edi
je 0xbe7ffa
push 0x58
push edi
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 0x5a
push edi
mov dword [0xd08c28], eax
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push edi
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
mov eax, dword [0xd08c28]
jmp 0xb66298
mov eax, 0x60
mov dword [0xd08c28], eax
jmp 0xb66298
push 0xb2b82c
call dword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleW]
test eax, eax
je 0xbe8031
push 0xb2b818
push eax
call dword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
mov edi, eax
mov dword [0xd08c24], edi
jmp 0xb662d2
mov edi, dword [0xd08c24]
jmp 0xb662d2
push 0
mov dword [0xd0a234], ebx
call dword [sym.imp.USER32.dll_GetDC]
mov edi, eax
test edi, edi
je 0xbe807a
push 0x58
push edi
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 0x5a
push edi
mov dword [0xd08c28], eax
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push edi
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
mov eax, dword [0xd08c28]
jmp 0xb662fc
mov eax, 0x60
mov dword [0xd08c28], eax
jmp 0xb662fc
push ecx
mov ecx, edi
call dword [0xd0cffc]
call edi
test eax, eax
jne 0xb663b4
mov edi, dword [esp + 0x138]
mov ecx, esi
sub edi, dword [esi + 0x60]
sub edi, dword [esi + 0x5c]
sub edi, dword [esp + 0x130]
push edi
call fcn.00ca09c5
mov ebx, eax
cmp ebx, 1
jle 0xbe80cf
sub edi, dword [0xd0a1ec]
mov ecx, esi
push edi
call fcn.00ca09c5
mov ebx, eax
lea eax, [esp + 0x11c]
mov ecx, esi
push eax
lea eax, [esp + 0x130]
push eax
push ebx
call fcn.00c1c9af
test byte [0xd0a5c0], 1
je 0xbe80fd
push ebx
push 1
mov edx, 0xb3d950
call fcn.00c38dc1
mov ecx, esi
call fcn.00b6604f
test al, 1
je 0xbe81d6
mov ecx, esi
call fcn.00b6604f
xor edi, edi
test al, 2
mov eax, dword [esp + 0x18]
jne 0xbe8195
xor ebx, ebx
test eax, eax
jle 0xbe816b
mov eax, dword [esi + 0x88]
push 0
push 1
push 1
mov eax, dword [eax + 4]
push 0xffffffffffffffff
push 0xffffffffffffffff
mov eax, dword [eax + ebx*4]
push eax
mov esi, dword [eax]
mov esi, dword [esi + 0x34]
mov ecx, esi
call dword [0xd0cffc]
call esi
mov ecx, dword [esp + 0x18]
add edi, eax
mov esi, dword [esp + 0x10]
lea eax, [ecx - 1]
cmp ebx, eax
jge 0xbe8162
mov eax, dword [esi + 0xf8]
jmp 0xbe8164
xor eax, eax
inc ebx
add edi, eax
cmp ebx, ecx
jl 0xbe8123
push 0
push edi
push 1
lea eax, [esp + 0x128]
mov ecx, esi
push eax
call fcn.00ca3525
push 0
push edi
push 1
lea eax, [esp + 0x128]
mov ecx, esi
push eax
call fcn.00ca369c
jmp 0xbe81d6
test eax, eax
jle 0xbe81da
mov eax, dword [esi + 0x88]
mov eax, dword [eax + 4]
mov ebx, dword [eax + edi*4]
push ebx
mov eax, dword [ebx]
mov esi, dword [eax + 0x5c]
mov ecx, esi
call dword [0xd0cffc]
call esi
test eax, eax
je 0xbe81cb
mov eax, dword [ebx]
push 1
push ebx
mov esi, dword [eax + 0x64]
mov ecx, esi
call dword [0xd0cffc]
call esi
mov esi, dword [esp + 0x10]
inc edi
cmp edi, dword [esp + 0x18]
jl 0xbe8199
mov eax, dword [esp + 0x18]
xor edi, edi
test eax, eax
jle 0xbe8211
mov eax, dword [esi + 0x88]
push 0
push 0
push 1
mov eax, dword [eax + 4]
push 0xffffffffffffffff
push 0xffffffffffffffff
mov eax, dword [eax + edi*4]
push eax
mov esi, dword [eax]
mov esi, dword [esi + 0x34]
mov ecx, esi
call dword [0xd0cffc]
call esi
mov esi, dword [esp + 0x10]
inc edi
cmp edi, dword [esp + 0x18]
jl 0xbe81e0
mov eax, dword [esp + 0x128]
or edx, 0xffffffff
mov ecx, dword [esp + 0x11c]
xor edi, edi
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x134]
sub eax, dword [esi + 0x58]
sub eax, dword [esp + 0x12c]
add eax, ecx
mov dword [esp + 0x14c], ecx
xor ecx, ecx
mov dword [esp + 0x154], eax
mov eax, dword [esp + 0x120]
mov dword [esp + 0x150], eax
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], edx
mov dword [esp + 0x34], ecx
cmp dword [esp + 0x18], ecx
jle 0xb66eea
cmp dword [esp + 0x48], 0
jl 0xbe937b
mov eax, dword [esi + 0x88]
mov eax, dword [eax + 4]
mov ebx, dword [eax + edi*4]
mov dword [esp + 0x14], ebx
cmp edi, ecx
je 0xbe8291
or edx, 0xffffffff
mov esi, dword [ebx]
push 0
push 1
push 1
mov esi, dword [esi + 0x34]
mov ecx, esi
push 0xffffffffffffffff
push edx
push ebx
call dword [0xd0cffc]
call esi
mov ecx, eax
mov eax, dword [esp + 0x150]
add eax, ecx
mov dword [esp + 0x44], ecx
cmp eax, dword [esp + 0x30]
jle 0xbe84a1
mov eax, dword [ebx]
push ebx
mov dword [esp + 0x2c], 1
mov esi, dword [eax + 0x10]
mov ecx, esi
call dword [0xd0cffc]
call esi
cmp eax, 1
je 0xbe82f8
push 0
push 6
push ebx
mov ebx, dword [esp + 0x1c]
lea eax, [ebx + 0x1c]
push eax
call fcn.00b67440
test eax, eax
je 0xbe82fc
jmp 0xbe8317
mov ebx, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
push ecx
mov eax, dword [ecx]
mov esi, dword [eax + 0xb8]
mov ecx, esi
call dword [0xd0cffc]
call esi
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x30]
sub eax, dword [esp + 0x150]
cdq
idiv dword [esp + 0x54]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
mov esi, eax
cmp edi, ecx
jne 0xbe833c
cmp edx, 0xffffffff
je 0xbe833c
add esi, edx
mov eax, dword [esp + 0x28]
dec eax
cmp esi, eax
jl 0xbe8347
mov esi, eax
mov eax, dword [esp + 0x120]
mov dword [esp + 0x150], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x158], eax
lea eax, [esp + 0x14c]
push eax
push esi
push edi
push edx
push ecx
push dword [esp + 0x48]
mov ecx, ebx
call fcn.00ca2bf1
test eax, eax
jne 0xbe83f9
test esi, esi
jg 0xbe83d7
mov eax, dword [ebx + 0x88]
dec edi
mov dword [esp + 0x28], 1
mov eax, dword [eax + 4]
mov ecx, dword [eax + edi*4]
mov dword [esp + 0x1c], ecx
push ecx
mov eax, dword [ecx]
mov esi, dword [eax + 0x10]
mov ecx, esi
call dword [0xd0cffc]
call esi
cmp eax, 1
je 0xbe8423
lea eax, [ebx + 0x1c]
push 6
push eax
call fcn.00b674a0
test eax, eax
jne 0xbe83d1
mov esi, dword [esp + 0x1c]
push eax
push 6
push esi
lea eax, [ebx + 0x1c]
push eax
call fcn.00b67440
test eax, eax
je 0xbe8427
mov eax, dword [esp + 0x28]
mov esi, eax
lea eax, [esp + 0x14c]
dec esi
push eax
push esi
push edi
push dword [esp + 0x30]
mov ecx, ebx
push dword [esp + 0x30]
push dword [esp + 0x48]
call fcn.00ca2bf1
test eax, eax
je 0xbe837b
mov eax, dword [esp + 0x28]
dec eax
cmp esi, eax
jge 0xbe8440
lea eax, [esi + 1]
mov dword [esp + 0x24], eax
xor eax, eax
cmp dword [esp + 0x20], edi
mov dword [esp + 0x20], edi
setne al
dec edi
dec eax
and eax, dword [esp + 0x34]
inc eax
mov dword [esp + 0x34], eax
jmp 0xbe8457
mov esi, dword [esp + 0x1c]
mov eax, dword [esi]
push esi
mov esi, dword [eax + 0xb8]
mov ecx, esi
call dword [0xd0cffc]
call esi
mov dword [esp + 0x28], eax
jmp 0xbe83d5
lea eax, [edi + 1]
mov dword [esp + 0x24], 0xffffffff
mov dword [esp + 0x20], eax
mov dword [esp + 0x34], 0
mov eax, dword [esp + 0x120]
mov edx, dword [esp + 0x14c]
mov esi, dword [esp + 0x10]
mov dword [esp + 0x150], eax
mov eax, dword [esp + 0x134]
sub eax, dword [esp + 0x12c]
add edx, eax
mov dword [esp + 0x14c], edx
sub edx, dword [ebx + 0x58]
sub edx, dword [esp + 0x12c]
add edx, dword [esp + 0x134]
mov dword [esp + 0x154], edx
jmp 0xbe84f4
mov dword [esp + 0x158], eax
lea ecx, [esp + 0x14c]
mov esi, dword [ebx]
xor eax, eax
cmp edi, dword [esp + 0x20]
push ecx
setne al
mov esi, dword [esi + 0x44]
dec eax
and eax, dword [esp + 0x38]
mov ecx, esi
push 0xffffffffffffffff
push eax
push ebx
call dword [0xd0cffc]
call esi
mov esi, dword [esp + 0x10]
mov dword [esp + 0x48], eax
lea eax, [esp + 0x14c]
mov ecx, dword [esi + 0xf8]
add ecx, dword [esp + 0x44]
push ecx
push 0
push eax
call dword [sym.imp.api_ms_win_ntuser_rectangle_l1_1_0.dll_OffsetRect]
mov ecx, dword [esp + 0x20]
inc edi
mov edx, dword [esp + 0x24]
cmp edi, dword [esp + 0x18]
jl 0xbe826f
jmp 0xb66edf
mov cl, 1
jmp 0xb6642e
lea eax, [esp + 0x74]
push eax
push 4
push ecx
mov ecx, edi
call dword [0xd0cffc]
call edi
jmp 0xb6643d
push 0xb2b82c
call dword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleW]
test eax, eax
je 0xbe8552
push 0xb2b818
push eax
call dword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
mov edi, eax
mov dword [0xd08c24], edi
jmp 0xb66463
mov edi, dword [0xd08c24]
jmp 0xb66463
push 0
mov dword [0xd0a234], ebx
call dword [sym.imp.USER32.dll_GetDC]
mov edi, eax
test edi, edi
je 0xbe859c
push 0x58
push edi
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 0x5a
push edi
mov dword [0xd08c28], eax
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push edi
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
mov ecx, dword [0xd08c28]
jmp 0xb6648e
mov ecx, 0x60
mov dword [0xd08c28], ecx
jmp 0xb6648e
push 0xb2b82c
call dword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleW]
test eax, eax
je 0xbe85d4
push 0xb2b818
push eax
call dword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
mov edi, eax
mov dword [0xd08c24], edi
jmp 0xb664c8
mov edi, dword [0xd08c24]
jmp 0xb664c8
push 0
mov dword [0xd0a234], ebx
call dword [sym.imp.USER32.dll_GetDC]
mov edi, eax
test edi, edi
je 0xbe861e
push 0x58
push edi
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 0x5a
push edi
mov dword [0xd08c28], eax
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push edi
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
mov ecx, dword [0xd08c28]
jmp 0xb664f3
mov ecx, 0x60
mov dword [0xd08c28], ecx
jmp 0xb664f3
xor eax, eax
jmp 0xb6655a
lea edx, [esp + 0x94]
push edx
push 1
push 1
push 0xffffffffffffffff
push 0xffffffffffffffff
push ecx
mov ecx, eax
call dword [0xd0cffc]
call dword [esp + 0x2c]
jmp 0xb665aa
mov eax, dword [esi + 0xf4]
neg eax
cmp ebx, eax
jl 0xbe8670
inc dword [esp + 0x20]
mov ebx, dword [esp + 0x28]
jmp 0xb665cd
lea eax, [ecx + ebx]
mov dword [esp + 0x24], 0
mov dword [esp + 0x2c], eax
mov ebx, dword [esp + 0x1c]
inc dword [esp + 0x20]
push ebx
mov eax, dword [ebx]
mov esi, dword [eax + 0xb8]
mov ecx, esi
call dword [0xd0cffc]
call esi
mov esi, dword [esp + 0x10]
mov dword [esp + 0x14], eax
cmp eax, 1
jle 0xbe8794
cmp dword [esp + 0x24], eax
jge 0xbe8794
mov ecx, esi
call fcn.00b6604f
test al, 2
jne 0xbe8794
mov eax, dword [ebx]
push ebx
mov esi, dword [eax + 0x10]
mov ecx, esi
call dword [0xd0cffc]
call esi
cmp eax, 1
je 0xbe86f3
mov esi, dword [esp + 0x10]
push 0
push 6
push ebx
lea eax, [esi + 0x1c]
push eax
call fcn.00b67440
test eax, eax
jne 0xbe8794
mov ebx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x1c]
lea edx, [esp + 0xcc]
push edx
push 1
push 1
mov esi, dword [eax]
push ecx
push ecx
push eax
mov esi, dword [esi + 0x34]
mov ecx, esi
call dword [0xd0cffc]
call esi
sub eax, dword [esp + 0xcc]
mov edx, dword [esp + 0x2c]
mov esi, dword [esp + 0x10]
cmp edx, dword [esp + 0x28]
jne 0xbe876f
mov ecx, dword [esi + 0xf4]
add ecx, eax
cmp ecx, edx
jle 0xbe876f
inc dword [esp + 0x24]
sub ebx, eax
mov dword [esp + 0x3c], ebx
mov edx, dword [esp + 0x28]
mov ebx, edx
sub ebx, dword [esp + 0x3c]
cmp edi, dword [esp + 0x30]
jge 0xbe875e
sub ebx, dword [esi + 0xf4]
mov dword [esp + 0x2c], edx
test ebx, ebx
js 0xbe867f
jmp 0xb665cd
cmp edx, eax
jl 0xbe8748
mov ecx, dword [esp + 0x24]
sub edx, eax
inc ecx
mov dword [esp + 0x2c], edx
sub ebx, eax
mov dword [esp + 0x24], ecx
mov dword [esp + 0x3c], ebx
cmp ecx, dword [esp + 0x14]
jl 0xbe86fb
jmp 0xbe8748
mov edx, dword [esp + 0x28]
cmp dword [esp + 0x2c], edx
jne 0xbe874c
mov eax, dword [esi + 0xf4]
add eax, dword [esp + 0x3c]
cmp eax, edx
jle 0xbe874c
xor ebx, ebx
jmp 0xb665cd
mov dword [esp + 0x20], eax
jmp 0xb665e2
mov cl, 1
jmp 0xb6663f
lea eax, [esp + 0x7c]
push eax
push 4
push ecx
mov ecx, edi
call dword [0xd0cffc]
call edi
jmp 0xb6664e
push 0xb2b82c
call dword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleW]
test eax, eax
je 0xbe8802
push 0xb2b818
push eax
call dword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
mov edi, eax
mov dword [0xd08c24], edi
jmp 0xb66674
mov edi, dword [0xd08c24]
jmp 0xb66674
push 0
mov dword [0xd0a234], ebx
call dword [sym.imp.USER32.dll_GetDC]
mov edi, eax
test edi, edi
je 0xbe884c
push 0x58
push edi
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 0x5a
push edi
mov dword [0xd08c28], eax
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push edi
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
mov ecx, dword [0xd08c28]
jmp 0xb6669f
mov ecx, 0x60
mov dword [0xd08c28], ecx
jmp 0xb6669f
push 0xb2b82c
call dword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleW]
test eax, eax
je 0xbe8884
push 0xb2b818
push eax
call dword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
mov edi, eax
mov dword [0xd08c24], edi
jmp 0xb666dc
mov edi, dword [0xd08c24]
jmp 0xb666dc
push 0
mov dword [0xd0a234], ebx
call dword [sym.imp.USER32.dll_GetDC]
mov edi, eax
test edi, edi
je 0xbe88ce
push 0x58
push edi
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 0x5a
push edi
mov dword [0xd08c28], eax
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push edi
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
mov ecx, dword [0xd08c28]
jmp 0xb66707
mov ecx, 0x60
mov dword [0xd08c28], ecx
jmp 0xb66707
mov eax, dword [esp + 0x138]
sub eax, dword [esp + 0x130]
mov ecx, dword [esp + 0x28]
sub ecx, dword [0xd0a1f0]
push eax
push ecx
mov ecx, esi
mov byte [esp + 0x43], 1
call fcn.00c1cbae
mov dword [esp + 0x20], eax
jmp 0xb66768
mov dword [esp + 0x24], 0
jmp 0xb6679a
push ecx
mov ecx, edi
call dword [0xd0cffc]
call edi
mov dword [esp + 0x24], eax
jmp 0xb6679a
mov cl, 1
jmp 0xb667e8
lea eax, [esp + 0x84]
push eax
push 4
push ecx
mov ecx, edi
call dword [0xd0cffc]
call edi
jmp 0xb667fa
push 0xb2b82c
call dword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleW]
test eax, eax
je 0xbe8977
push 0xb2b818
push eax
call dword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
mov edi, eax
mov dword [0xd08c24], edi
jmp 0xb66823
mov edi, dword [0xd08c24]
jmp 0xb66823
push 0
mov dword [0xd0a234], ebx
call dword [sym.imp.USER32.dll_GetDC]
mov edi, eax
test edi, edi
je 0xbe89c1
push 0x58
push edi
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 0x5a
push edi
mov dword [0xd08c28], eax
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push edi
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
mov ecx, dword [0xd08c28]
jmp 0xb6684e
mov ecx, 0x60
mov dword [0xd08c28], ecx
jmp 0xb6684e
push 0xb2b82c
call dword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleW]
test eax, eax
je 0xbe89f9
push 0xb2b818
push eax
call dword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
mov edi, eax
mov dword [0xd08c24], edi
jmp 0xb6688e
mov edi, dword [0xd08c24]
jmp 0xb6688e
push 0
mov dword [0xd0a234], ebx
call dword [sym.imp.USER32.dll_GetDC]
mov edi, eax
test edi, edi
je 0xbe8a43
push 0x58
push edi
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 0x5a
push edi
mov dword [0xd08c28], eax
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push edi
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
mov ecx, dword [0xd08c28]
jmp 0xb668b9
mov ecx, 0x60
mov dword [0xd08c28], ecx
jmp 0xb668b9
mov cl, 1
jmp 0xb66952
lea eax, [esp + 0x8c]
push eax
push 4
push ecx
mov ecx, edi
call dword [0xd0cffc]
call edi
jmp 0xb66964
push 0xb2b82c
call dword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleW]
test eax, eax
je 0xbe8a9c
push 0xb2b818
push eax
call dword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
mov edi, eax
mov dword [0xd08c24], edi
jmp 0xb6698d
mov edi, dword [0xd08c24]
jmp 0xb6698d
push 0
mov dword [0xd0a234], ebx
call dword [sym.imp.USER32.dll_GetDC]
mov edi, eax
test edi, edi
je 0xbe8ae6
push 0x58
push edi
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 0x5a
push edi
mov dword [0xd08c28], eax
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push edi
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
mov ecx, dword [0xd08c28]
jmp 0xb669b8
mov ecx, 0x60
mov dword [0xd08c28], ecx
jmp 0xb669b8
push 0xb2b82c
call dword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleW]
test eax, eax
je 0xbe8b1e
push 0xb2b818
push eax
call dword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
mov edi, eax
mov dword [0xd08c24], edi
jmp 0xb669f8
mov edi, dword [0xd08c24]
jmp 0xb669f8
push 0
mov dword [0xd0a234], ebx
call dword [sym.imp.USER32.dll_GetDC]
mov edi, eax
test edi, edi
je 0xbe8b68
push 0x58
push edi
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 0x5a
push edi
mov dword [0xd08c28], eax
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push edi
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
mov ecx, dword [0xd08c28]
jmp 0xb66a23
mov ecx, 0x60
mov dword [0xd08c28], ecx
jmp 0xb66a23
mov ebx, 1
mov dword [esp + 0x2c], ebx
jmp 0xb66a7d
mov eax, 1
jmp 0xb66a8b
mov dword [esi + 0xc4], eax
xor eax, eax
mov dword [esp + 0x15c], 0x1c
mov ecx, 6
lea edi, [esp + 0x160]
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x20]
xor ecx, ecx
dec eax
mov dword [esp + 0x160], 3
test edx, edx
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], ebx
setne cl
xor eax, eax
test edx, edx
mov dword [esp + 0x14], ecx
lea edx, [esp + 0x15c]
sete al
mov dword [esp + 0x44], eax
mov eax, dword [esi + 0x34]
push edx
push ecx
push eax
mov esi, dword [eax]
mov esi, dword [esi + 0x24]
mov ecx, esi
call dword [0xd0cffc]
call esi
mov edi, dword [esp + 0x1c]
mov ebx, dword [esp + 0x10]
test edi, edi
je 0xbe8c40
mov eax, dword [ebx + 0x34]
lea ecx, [esp + 0x15c]
push ecx
push dword [esp + 0x18]
mov dword [esp + 0x168], 7
mov esi, dword [eax]
push eax
mov esi, dword [esi + 0x28]
mov ecx, esi
call dword [0xd0cffc]
call esi
mov ecx, dword [esp + 0x170]
jmp 0xbe8c49
xor ecx, ecx
mov dword [esp + 0x170], ecx
mov eax, dword [esp + 0x24]
test eax, eax
je 0xbe8cad
mov edx, dword [esp + 0x68]
mov esi, dword [esp + 0x64]
add edx, esi
mov eax, dword [esp + 0x134]
sub eax, dword [esp + 0x12c]
imul ecx, edx
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], eax
neg ecx
mov dword [esp + 0x1c], ecx
test edi, edi
je 0xbe8c8c
sub eax, dword [0xd0a1f0]
mov dword [esp + 0x40], eax
sub eax, dword [ebx + 0x58]
mov dword [esp + 0x124], eax
mov eax, dword [esp + 0x168]
inc eax
imul eax, edx
sub eax, esi
add eax, dword [esp + 0x60]
mov dword [esp + 0x30], eax
jmp 0xbe8d07
mov edx, dword [esp + 0x134]
sub edx, dword [esp + 0x12c]
mov eax, edx
mov dword [esp + 0x1c], 0
imul eax, ecx
neg eax
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x138]
sub eax, dword [esp + 0x130]
mov dword [esp + 0x30], eax
test edi, edi
je 0xbe8cee
sub eax, dword [0xd0a1ec]
mov dword [esp + 0x30], eax
sub eax, dword [ebx + 0x60]
mov dword [esp + 0x128], eax
mov eax, dword [esp + 0x168]
inc eax
imul eax, edx
mov dword [esp + 0x40], eax
xor eax, eax
mov dword [esp + 0x18c], 0x1c
mov ecx, 6
lea edi, [esp + 0x190]
rep stosd dword es:[edi], eax
mov eax, dword [ebx + 0x34]
lea ecx, [esp + 0x18c]
push ecx
push dword [esp + 0x48]
mov dword [esp + 0x198], 7
mov esi, dword [eax]
push eax
mov esi, dword [esi + 0x24]
mov ecx, esi
call dword [0xd0cffc]
call esi
mov esi, dword [esp + 0x10]
push 0x14
push dword [esp + 0x34]
push dword [esp + 0x48]
push dword [esp + 0x28]
push dword [esp + 0x4c]
push 0
push dword [esi + 4]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_SetWindowPos]
mov ebx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x20]
jmp 0xb66aa3
push ecx
push ebx
mov edx, 0xb3d950
call fcn.00c38dc1
jmp 0xb66ab0
mov ecx, dword [esp + 0x18]
xor eax, eax
xor edi, edi
mov dword [esp + 0x30], eax
test ecx, ecx
jle 0xbe8df8
xor ebx, ebx
mov eax, dword [esi + 0x88]
lea ecx, [esp + 0x5c]
push ecx
push 1
push 1
mov eax, dword [eax + 4]
push 0xffffffffffffffff
push 0xffffffffffffffff
mov eax, dword [eax + ebx*4]
push eax
mov esi, dword [eax]
mov esi, dword [esi + 0x34]
mov ecx, esi
call dword [0xd0cffc]
call esi
mov ecx, dword [esp + 0x18]
add edi, eax
mov esi, dword [esp + 0x10]
lea eax, [ecx - 1]
cmp ebx, eax
jge 0xbe8ddf
mov eax, dword [esi + 0xf4]
jmp 0xbe8de1
xor eax, eax
add edi, eax
inc ebx
mov eax, dword [esp + 0x30]
add eax, dword [esp + 0x5c]
mov dword [esp + 0x30], eax
cmp ebx, ecx
jl 0xbe8d9d
mov ebx, dword [esp + 0x2c]
push eax
push edi
push ebx
lea eax, [esp + 0x128]
mov ecx, esi
push eax
call fcn.00ca3525
push dword [esp + 0x30]
lea eax, [esp + 0x120]
mov ecx, esi
push edi
push ebx
push eax
call fcn.00ca369c
jmp 0xb66b6b
mov eax, dword [edi + 0x1c]
test eax, eax
je 0xbe8e60
mov eax, dword [eax]
cmp eax, 1
jle 0xbe8e3b
test byte [edi + 0x28], 0x10
je 0xbe8e54
cmp eax, 1
je 0xbe8e54
cmp eax, 1
jle 0xbe8e60
test byte [edi + 0x28], 0x10
je 0xbe8e60
mov dword [edi + 0x20], 3
jmp 0xb66b5a
mov dword [edi + 0x20], 1
jmp 0xb66b5a
mov eax, dword [edi + 0x10]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x5c]
mov ecx, esi
call dword [0xd0cffc]
call esi
test al, 2
jne 0xbe8e9d
test byte [edi + 0x28], 0x20
jne 0xbe8e9d
lea ecx, [edi - 8]
call fcn.00b983a1
mov esi, dword [esp + 0x10]
test eax, eax
je 0xb66b5a
mov dword [edi + 0x20], 2
jmp 0xb66b5a
mov esi, dword [esp + 0x10]
mov dword [edi + 0x20], 4
jmp 0xb66b5a
push edi
mov ecx, eax
call dword [0xd0cffc]
call dword [esp + 0x60]
test eax, eax
je 0xb66b64
jmp 0xb66c78
mov ecx, eax
call dword [0xd0cffc]
call dword [esp + 0x64]
jmp 0xb66b64
lea edx, [esp + 0x60]
push edx
push 1
push 1
push 0xffffffffffffffff
push 0xffffffffffffffff
push ecx
mov ecx, eax
call dword [0xd0cffc]
call dword [esp + 0x2c]
jmp 0xb66bb4
mov eax, ebx
sub eax, ecx
sub edx, eax
mov dword [esp + 0x14], edx
fild dword [esp + 0x14]
fstp dword [esp + 0x1c]
fld dword [esp + 0x1c]
fild dword [esp + 0x30]
fstp dword [esp + 0x1c]
fdiv dword [esp + 0x1c]
mov edi, dword [esp + 0x11c]
jmp 0xbe8f24
fldz
fstp dword [esp + 0x1c]
jmp 0xb66c12
mov ecx, ebx
call dword [0xd0cffc]
call ebx
jmp 0xb66ce5
mov eax, dword [edi]
push edi
mov dword [esp + 0x30], 1
mov esi, dword [eax + 0x10]
mov ecx, esi
call dword [0xd0cffc]
call esi
mov ebx, dword [esp + 0x10]
cmp eax, 1
je 0xbe8f6f
push 0
push 6
push edi
lea eax, [ebx + 0x1c]
push eax
call fcn.00b67440
test eax, eax
jne 0xbe8f86
mov eax, dword [edi]
push edi
mov esi, dword [eax + 0xb8]
mov ecx, esi
call dword [0xd0cffc]
call esi
mov dword [esp + 0x2c], eax
mov ecx, dword [edi]
lea eax, [esp + 0x24]
push eax
push edi
mov esi, dword [ecx + 0x10]
mov ecx, esi
call dword [0xd0cffc]
call esi
push eax
mov ecx, ebx
call fcn.00c1d11e
fild dword [esp + 0x24]
mov esi, eax
fstp dword [esp + 0x58]
fld dword [esp + 0x58]
fld qword [esp + 0x110]
fmul st(1)
fsubp st(1)
call fcn.00bc6351
sub esi, eax
mov ebx, dword [esp + 0x40]
mov eax, dword [esp + 0x3c]
sub eax, dword [esp + 0x13c]
cdq
idiv esi
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
mov edi, eax
cmp ebx, ecx
jne 0xbe8fea
cmp edx, 0xffffffff
je 0xbe8fea
add edi, edx
mov eax, dword [esp + 0x2c]
dec eax
cmp edi, eax
jl 0xbe8ff5
mov edi, eax
mov eax, dword [esp + 0x11c]
mov esi, dword [esp + 0x10]
mov dword [esp + 0x13c], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x144], eax
lea eax, [esp + 0x13c]
push eax
push edi
push ebx
push edx
push ecx
push dword [esp + 0x48]
mov ecx, esi
call fcn.00b64d60
test eax, eax
jne 0xbe90c3
test edi, edi
jg 0xbe909d
mov eax, dword [esi + 0x88]
dec ebx
mov edi, 1
mov dword [esp + 0x2c], edi
mov eax, dword [eax + 4]
mov ecx, dword [eax + ebx*4]
mov dword [esp + 0x40], ecx
push ecx
mov eax, dword [ecx]
mov esi, dword [eax + 0x10]
mov ecx, esi
call dword [0xd0cffc]
call esi
cmp eax, edi
je 0xbe907c
mov esi, dword [esp + 0x10]
push 0
push 6
push dword [esp + 0x48]
lea eax, [esi + 0x1c]
push eax
call fcn.00b67440
test eax, eax
jne 0xbe909d
mov ecx, dword [esp + 0x40]
push ecx
mov eax, dword [ecx]
mov esi, dword [eax + 0xb8]
mov ecx, esi
call dword [0xd0cffc]
call esi
mov esi, dword [esp + 0x10]
mov edi, eax
mov dword [esp + 0x2c], edi
lea eax, [esp + 0x13c]
dec edi
push eax
push edi
push ebx
push dword [esp + 0x2c]
mov ecx, esi
push dword [esp + 0x38]
push dword [esp + 0x48]
call fcn.00b64d60
test eax, eax
je 0xbe9031
mov eax, dword [esp + 0x2c]
dec eax
cmp edi, eax
jge 0xbe90ed
lea eax, [edi + 1]
mov edx, ebx
mov dword [esp + 0x20], eax
xor eax, eax
cmp dword [esp + 0x28], ebx
setne al
dec ebx
lea edi, [eax - 1]
and edi, dword [esp + 0x34]
inc edi
mov dword [esp + 0x34], edi
jmp 0xbe9100
lea edx, [ebx + 1]
mov dword [esp + 0x20], 0xffffffff
mov dword [esp + 0x34], 0
mov ecx, dword [esp + 0xd0]
add ecx, dword [esp + 0x140]
mov edi, dword [esp + 0x54]
mov eax, dword [esp + 0x11c]
mov dword [esp + 0x13c], eax
mov dword [esp + 0x28], edx
lea eax, [ecx + edi]
mov dword [esp + 0x140], eax
lea eax, [ecx + edi*2]
mov dword [esp + 0x148], eax
jmp 0xb66e0b
mov edx, 0x140
mov ecx, 0xd08c68
call fcn.00b7ea9a
mov eax, dword [0xd08c68]
mov dword [esp + 0x2c], eax
jmp 0xb671b7
xor eax, eax
jmp 0xb671cf
mov dword [esp + 0x48], 0x8007000e
jmp 0xb66de5
xor eax, eax
jmp 0xb66d74
mov edx, 0x143
mov ecx, 0xd08c60
call fcn.00b7ea9a
mov eax, dword [0xd08c60]
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x2c], eax
jmp 0xb66d95
xor eax, eax
jmp 0xb66dab
mov eax, dword [edi + 0x1c]
test eax, eax
je 0xbe91d9
mov eax, dword [eax]
cmp eax, 1
jle 0xbe91b4
test byte [edi + 0x28], 0x10
je 0xbe91cd
cmp eax, 1
je 0xbe91cd
cmp eax, 1
jle 0xbe91d9
test byte [edi + 0x28], 0x10
je 0xbe91d9
mov dword [edi + 0x20], 3
jmp 0xb66dcb
mov dword [edi + 0x20], 1
jmp 0xb66dcb
mov eax, dword [edi + 0x10]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x5c]
mov ecx, esi
call dword [0xd0cffc]
call esi
test al, 2
jne 0xbe9216
test byte [edi + 0x28], 0x20
jne 0xbe9216
lea ecx, [edi - 8]
call fcn.00b983a1
mov esi, dword [esp + 0x10]
test eax, eax
je 0xb66dcb
mov dword [edi + 0x20], 2
jmp 0xb66dcb
mov esi, dword [esp + 0x10]
mov dword [edi + 0x20], 4
jmp 0xb66dcb
xor eax, eax
jmp 0xb66ddd
push ebx
push dword [edi + 0x18]
call fcn.00b51b93
jmp 0xb66dd0
mov edx, 0x144
mov ecx, 0xd08c54
call fcn.00b7ea9a
mov edi, dword [0xd08c54]
jmp 0xb67234
mov dword [esp + 0x48], 0x8007000e
jmp 0xb66de5
lea ecx, [esp + 0x13c]
push ecx
push 0xffffffffffffffff
push ebx
push edi
mov ecx, eax
call dword [0xd0cffc]
call dword [esp + 0x68]
mov dword [esp + 0x48], eax
jmp 0xb66de5
xor bl, bl
jmp 0xb66e6a
push 0xc98390
mov dword [esp + 0xec], 0xd0a218
mov dword [esp + 0x50], 0xd0a21c
mov dword [0xd0a21c], 0xb11080
call fcn.00bc122d
add esp, 4
mov dword [esp + 0xec], 0
lea ecx, [esp + 0xe8]
call fcn.00baaeb2
jmp 0xb66e92
mov dword [esp + 0xf0], 0xd0ac68
xor al, al
mov dword [esp + 0x50], 0xd0ac6c
mov ecx, 0xd0ac7c
mov dword [0xd0ac6c], 0xb11080
xchg byte [ecx], al
push 0xc289a0
call fcn.00bc122d
add esp, 4
mov dword [esp + 0xf4], 0
lea ecx, [esp + 0xf0]
call fcn.00b92c9c
jmp 0xb66f46
mov dword [esp + 0x44], 0
jmp 0xb6737a
mov esi, dword [esp + 0x18]
jmp 0xb6716d
push 0xc98390
mov dword [esp + 0xfc], 0xd0a218
mov dword [esp + 0x18], 0xd0a21c
mov dword [0xd0a21c], 0xb11080
call fcn.00bc122d
add esp, 4
mov dword [esp + 0xfc], 0
lea ecx, [esp + 0xf8]
call fcn.00baaeb2
jmp 0xb67195
xor eax, eax
jmp 0xb66f02