Function at 0x4fcb80
Capabilities:
Encode data using base64
Resolve function by parsing pe exports

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x545ce4
push eax
mov dword fs:[0], esp
sub esp, 0x94
push ebx
mov ebx, ecx
push ebp
push esi
lea ebp, [ebx + 0x90]
lea eax, [ebx + 0x80]
mov ecx, ebp
push edi
mov edx, dword [ecx]
mov dword [eax], edx
mov edx, dword [ecx + 4]
mov dword [eax + 4], edx
mov edx, dword [ecx + 8]
mov dword [eax + 8], edx
mov ecx, dword [ecx + 0xc]
mov dword [eax + 0xc], ecx
lea eax, [ebx + 0xa0]
mov edx, eax
mov ecx, ebp
mov esi, dword [edx]
mov dword [ecx], esi
mov esi, dword [edx + 4]
mov dword [ecx + 4], esi
mov esi, dword [edx + 8]
mov dword [ecx + 8], esi
mov edx, dword [edx + 0xc]
mov dword [ecx + 0xc], edx
lea ecx, [ebx + 0xb0]
mov edx, dword [ebx + 0xb0]
mov dword [eax], edx
mov edx, dword [ecx + 4]
mov dword [eax + 4], edx
mov edx, dword [ecx + 8]
mov dword [eax + 8], edx
mov ecx, dword [ecx + 0xc]
mov dword [eax + 0xc], ecx
mov ecx, ebx
call fcn.004f8a00
test eax, eax
jne 0x4fcc1b
mov ecx, ebx
call fcn.004f8a00
test eax, eax
je 0x4fcc10
cmp word [ebp], 0x3f
jne 0x4fe855
cmp dword [ebp + 4], 1
jne 0x4fe855
mov edx, ebp
lea eax, [ebx + 0x80]
mov ecx, dword [edx]
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
mov ecx, dword [edx + 8]
mov dword [eax + 8], ecx
mov edx, dword [edx + 0xc]
mov dword [eax + 0xc], edx
lea eax, [ebx + 0xa0]
mov ecx, eax
mov edx, ebp
mov esi, dword [ecx]
mov dword [edx], esi
mov esi, dword [ecx + 4]
mov dword [edx + 4], esi
mov esi, dword [ecx + 8]
mov dword [edx + 8], esi
mov ecx, dword [ecx + 0xc]
mov dword [edx + 0xc], ecx
lea ecx, [ebx + 0xb0]
mov edx, dword [ebx + 0xb0]
mov dword [eax], edx
mov edx, dword [ecx + 4]
mov dword [eax + 4], edx
mov edx, dword [ecx + 8]
mov dword [eax + 8], edx
mov ecx, dword [ecx + 0xc]
mov dword [eax + 0xc], ecx
mov ecx, ebx
call fcn.004f8a00
test eax, eax
jne 0x4fcca4
mov ecx, ebx
call fcn.004f8a00
test eax, eax
je 0x4fcc99
mov ax, word [ebp]
xor esi, esi
mov edx, eax
mov dword [esp + 0x14], esi
and edx, 0xffff
mov dword [esp + 0x24], 0x3e
lea edi, [edx - 0x21]
cmp edi, 0x31
ja case.0x4fccd2.41
xor ecx, ecx
mov cl, byte [edi + 0x4fe9bc]
jmp dword [ecx*4 + 0x4fe998]
mov dword [esp + 0x14], 1
mov edx, ebp
mov eax, dword [edx]
mov dword [ebx + 0x80], eax
mov ecx, dword [edx + 4]
mov dword [ebx + 0x84], ecx
mov eax, dword [edx + 8]
mov dword [ebx + 0x88], eax
lea eax, [ebx + 0xa0]
mov ecx, dword [edx + 0xc]
mov edx, eax
mov dword [ebx + 0x8c], ecx
mov ecx, ebp
mov esi, dword [edx]
mov dword [ecx], esi
mov esi, dword [edx + 4]
mov dword [ecx + 4], esi
mov esi, dword [edx + 8]
mov dword [ecx + 8], esi
mov edx, dword [edx + 0xc]
mov dword [ecx + 0xc], edx
mov ecx, dword [ebx + 0xb0]
mov edx, dword [ebx + 0xb4]
mov dword [eax], ecx
mov ecx, dword [ebx + 0xb8]
mov dword [eax + 4], edx
mov edx, dword [ebx + 0xbc]
mov dword [eax + 8], ecx
mov ecx, ebx
mov dword [eax + 0xc], edx
call fcn.004f8a00
test eax, eax
jne 0x4fcd5f
mov ecx, ebx
call fcn.004f8a00
test eax, eax
je 0x4fcd54
push 0xc
call fcn.00532880
mov esi, eax
add esp, 4
mov dword [esp + 0x1c], esi
test esi, esi
mov dword [esp + 0xac], 0
je 0x4fceb6
mov eax, dword [esp + 0xb4]
push 0
push 0
push 1
mov edi, dword [eax]
push 0
lea ecx, [esp + 0x3c]
and edi, 0xffffffef
call fcn.004f7b20
mov cx, word [ebp]
cmp cx, word [eax]
jne 0x4fcdc0
mov edx, dword [ebp + 4]
mov ecx, dword [eax + 4]
cmp edx, ecx
jne 0x4fcdc0
push 0
mov ecx, ebx
call fcn.004f9940
jmp 0x4fce9d
lea eax, [esp + 0x18]
mov ecx, ebx
push eax
mov dword [esp + 0x1c], edi
call fcn.004f9570
push 0
push 0
mov edi, eax
push 1
push 0x7c
lea ecx, [esp + 0x64]
mov dword [esp + 0x30], edi
call fcn.004f7b20
push eax
mov ecx, ebp
call fcn.004f89d0
test eax, eax
je 0x4fce9b
push 0x14
call fcn.00532880
add esp, 4
mov dword [esp + 0x3c], eax
test eax, eax
mov byte [esp + 0xac], 1
je 0x4fce1c
mov ecx, eax
call fcn.004ff200
mov esi, eax
jmp 0x4fce1e
xor esi, esi
push esi
lea ecx, [ebx + 0x14]
mov byte [esp + 0xb0], 0
call fcn.004fb7c0
mov ecx, dword [esp + 0x20]
lea edi, [esi + 4]
push ecx
mov ecx, edi
call fcn.004fb7c0
push 0
push 0
push 1
push 0x7c
lea ecx, [esp + 0x54]
call fcn.004f7b20
push eax
mov ecx, ebp
call fcn.004f89d0
test eax, eax
je 0x4fce93
mov ecx, ebx
call fcn.004fb0e0
lea edx, [esp + 0x18]
mov ecx, ebx
push edx
call fcn.004f9570
push eax
mov ecx, edi
call fcn.004fb7c0
push 0
push 0
push 1
push 0x7c
lea ecx, [esp + 0x54]
call fcn.004f7b20
push eax
mov ecx, ebp
call fcn.004f89d0
test eax, eax
jne 0x4fce5b
mov eax, esi
mov esi, dword [esp + 0x1c]
jmp 0x4fce9d
mov eax, edi
mov ecx, dword [esp + 0x14]
mov dword [esi + 4], eax
xor eax, eax
mov dword [esi], 0x5c2de0
test ecx, ecx
sete al
mov dword [esi + 8], eax
jmp 0x4fceb8
xor esi, esi
push esi
lea ecx, [ebx + 0x14]
mov dword [esp + 0xb0], 0xffffffff
call fcn.004fb7c0
mov ecx, ebx
mov edi, esi
call fcn.004fb0e0
mov eax, edi
jmp 0x4fe97a
lea eax, [ebx + 0xa0]
xor ecx, ecx
mov cx, word [eax]
cmp ecx, 0x21
je 0x4fcef6
cmp ecx, 0x3d
je 0x4fcefe
jmp case.0x4fccd2.39
mov dword [esp + 0x14], 1
mov edx, ebp
lea ecx, [ebx + 0x80]
mov esi, dword [edx]
mov dword [ecx], esi
mov esi, dword [edx + 4]
mov dword [ecx + 4], esi
mov esi, dword [edx + 8]
mov dword [ecx + 8], esi
mov edx, dword [edx + 0xc]
mov dword [ecx + 0xc], edx
mov ecx, eax
mov edx, ebp
mov esi, dword [ecx]
mov dword [edx], esi
mov esi, dword [ecx + 4]
mov dword [edx + 4], esi
mov esi, dword [ecx + 8]
mov dword [edx + 8], esi
mov ecx, dword [ecx + 0xc]
mov dword [edx + 0xc], ecx
lea ecx, [ebx + 0xb0]
mov edx, dword [ebx + 0xb0]
mov dword [eax], edx
mov edx, dword [ecx + 4]
mov dword [eax + 4], edx
mov edx, dword [ecx + 8]
mov dword [eax + 8], edx
mov ecx, dword [ecx + 0xc]
mov dword [eax + 0xc], ecx
mov ecx, ebx
call fcn.004f8a00
test eax, eax
jne 0x4fcf6c
mov ecx, ebx
call fcn.004f8a00
test eax, eax
je 0x4fcf61
mov edx, ebp
lea eax, [ebx + 0x80]
mov ecx, dword [edx]
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
mov ecx, dword [edx + 8]
mov dword [eax + 8], ecx
mov edx, dword [edx + 0xc]
mov dword [eax + 0xc], edx
lea eax, [ebx + 0xa0]
mov ecx, eax
mov edx, ebp
mov esi, dword [ecx]
mov dword [edx], esi
mov esi, dword [ecx + 4]
mov dword [edx + 4], esi
mov esi, dword [ecx + 8]
mov dword [edx + 8], esi
mov ecx, dword [ecx + 0xc]
mov dword [edx + 0xc], ecx
lea ecx, [ebx + 0xb0]
mov edx, dword [ebx + 0xb0]
mov dword [eax], edx
mov edx, dword [ecx + 4]
mov dword [eax + 4], edx
mov edx, dword [ecx + 8]
mov dword [eax + 8], edx
mov ecx, dword [ecx + 0xc]
mov dword [eax + 0xc], ecx
mov ecx, ebx
call fcn.004f8a00
test eax, eax
jne 0x4fcfe0
mov ecx, ebx
call fcn.004f8a00
test eax, eax
je 0x4fcfd5
push 0xc
call fcn.00532880
mov esi, eax
add esp, 4
mov dword [esp + 0x1c], esi
test esi, esi
mov dword [esp + 0xac], 2
je 0x4fd132
mov edx, dword [esp + 0xb4]
push 0
push 0
push 1
mov edi, dword [edx]
push 0
lea ecx, [esp + 0x64]
or edi, 0x10
call fcn.004f7b20
push eax
mov ecx, ebp
call fcn.004f89d0
test eax, eax
je 0x4fd03a
push 0
mov ecx, ebx
call fcn.004f9940
jmp 0x4fd117
lea eax, [esp + 0x18]
mov ecx, ebx
push eax
mov dword [esp + 0x1c], edi
call fcn.004f9570
push 0
push 0
mov edi, eax
push 1
push 0x7c
lea ecx, [esp + 0x3c]
mov dword [esp + 0x30], edi
call fcn.004f7b20
push eax
mov ecx, ebp
call fcn.004f89d0
test eax, eax
je 0x4fd115
push 0x14
call fcn.00532880
add esp, 4
mov dword [esp + 0x3c], eax
test eax, eax
mov byte [esp + 0xac], 3
je 0x4fd096
mov ecx, eax
call fcn.004ff200
mov esi, eax
jmp 0x4fd098
xor esi, esi
push esi
lea ecx, [ebx + 0x14]
mov byte [esp + 0xb0], 2
call fcn.004fb7c0
mov ecx, dword [esp + 0x20]
lea edi, [esi + 4]
push ecx
mov ecx, edi
call fcn.004fb7c0
push 0
push 0
push 1
push 0x7c
lea ecx, [esp + 0x54]
call fcn.004f7b20
push eax
mov ecx, ebp
call fcn.004f89d0
test eax, eax
je 0x4fd10d
mov ecx, ebx
call fcn.004fb0e0
lea edx, [esp + 0x18]
mov ecx, ebx
push edx
call fcn.004f9570
push eax
mov ecx, edi
call fcn.004fb7c0
push 0
push 0
push 1
push 0x7c
lea ecx, [esp + 0x54]
call fcn.004f7b20
push eax
mov ecx, ebp
call fcn.004f89d0
test eax, eax
jne 0x4fd0d5
mov eax, esi
mov esi, dword [esp + 0x1c]
jmp 0x4fd117
mov eax, edi
mov ecx, dword [esp + 0x14]
mov dword [esi + 4], eax
xor eax, eax
mov dword [esi], 0x5c2de0
test ecx, ecx
sete al
mov dword [esi + 8], eax
mov edi, esi
jmp 0x4fd134
xor edi, edi
push edi
lea ecx, [ebx + 0x14]
mov dword [esp + 0xb0], 0xffffffff
call fcn.004fb7c0
test edi, edi
jne 0x4fe847
cmp word [ebp], 0x50
jne case.0x4fccd2.34
mov ecx, ebp
lea eax, [ebx + 0x80]
mov edx, dword [ecx]
mov dword [eax], edx
mov edx, dword [ecx + 4]
mov dword [eax + 4], edx
mov edx, dword [ecx + 8]
mov dword [eax + 8], edx
mov ecx, dword [ecx + 0xc]
mov dword [eax + 0xc], ecx
lea eax, [ebx + 0xa0]
mov edx, eax
mov ecx, ebp
mov esi, dword [edx]
mov dword [ecx], esi
mov esi, dword [edx + 4]
mov dword [ecx + 4], esi
mov esi, dword [edx + 8]
mov dword [ecx + 8], esi
mov edx, dword [edx + 0xc]
mov dword [ecx + 0xc], edx
lea ecx, [ebx + 0xb0]
mov edx, dword [ebx + 0xb0]
mov dword [eax], edx
mov edx, dword [ecx + 4]
mov dword [eax + 4], edx
mov edx, dword [ecx + 8]
mov dword [eax + 8], edx
mov ecx, dword [ecx + 0xc]
mov dword [eax + 0xc], ecx
mov ecx, ebx
call fcn.004f8a00
test eax, eax
jne case.0x4fccd2.34
mov ecx, ebx
call fcn.004f8a00
test eax, eax
je 0x4fd1c0
mov ax, word [ebp]
cmp ax, 0x3c
jne 0x4fd1df
mov dword [esp + 0x24], 0x3e
jmp 0x4fd1ed
cmp ax, 0x27
jne 0x4fd1ed
mov dword [esp + 0x24], 0x27
mov edx, ebp
lea eax, [ebx + 0x80]
mov ecx, dword [edx]
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
mov ecx, dword [edx + 8]
mov dword [eax + 8], ecx
mov edx, dword [edx + 0xc]
mov dword [eax + 0xc], edx
lea eax, [ebx + 0xa0]
mov ecx, eax
mov edx, ebp
mov esi, dword [ecx]
mov dword [edx], esi
mov esi, dword [ecx + 4]
mov dword [edx + 4], esi
mov esi, dword [ecx + 8]
mov dword [edx + 8], esi
mov ecx, dword [ecx + 0xc]
mov dword [edx + 0xc], ecx
lea ecx, [ebx + 0xb0]
mov edx, dword [ebx + 0xb0]
mov dword [eax], edx
mov edx, dword [ecx + 4]
mov dword [eax + 4], edx
mov edx, dword [ecx + 8]
mov dword [eax + 8], edx
mov ecx, dword [ecx + 0xc]
mov dword [eax + 0xc], ecx
mov ecx, ebx
call fcn.004f8a00
test eax, eax
jne 0x4fd261
mov ecx, ebx
call fcn.004f8a00
test eax, eax
je 0x4fd256
mov eax, dword [ebx + 0xc]
push 0x18
mov dword [esp + 0x24], eax
inc eax
mov dword [ebx + 0xc], eax
call fcn.00532880
mov edi, eax
add esp, 4
test edi, edi
je 0x4fd2a1
mov edx, dword [esp + 0xb4]
lea ecx, [edi + 4]
mov esi, dword [edx]
mov dword [edi], method.CSyncObject.virtual_20
and esi, 0x10
call fcn.004f8180
mov dword [edi], 0x5c2d40
mov dword [edi + 0x14], esi
jmp 0x4fd2a3
xor edi, edi
lea ecx, [ebx + 0x14]
push edi
mov dword [esp + 0x20], edi
call fcn.004fb7c0
push 0x1c
call fcn.00532880
mov edi, eax
add esp, 4
test edi, edi
je 0x4fd2f5
mov eax, dword [esp + 0xb4]
lea ecx, [edi + 0xc]
mov esi, dword [eax]
mov dword [edi], method.CSyncObject.virtual_20
shr esi, 4
and esi, 1
call fcn.004f8080
mov dword [edi + 8], esi
mov dword [edi], 0x5c2dd4
mov dword [edi + 4], 0xffffffff
mov dword [esp + 0x14], edi
mov esi, edi
jmp 0x4fd2fb
xor esi, esi
mov dword [esp + 0x14], esi
push esi
lea ecx, [ebx + 0x14]
call fcn.004fb7c0
push 0x1c
call fcn.00532880
mov edi, eax
add esp, 4
test edi, edi
je 0x4fd34f
mov ecx, dword [esp + 0xb4]
mov esi, dword [ecx]
lea ecx, [edi + 0xc]
not esi
shr esi, 4
and esi, 1
mov dword [edi], method.CSyncObject.virtual_20
call fcn.004f8080
mov dword [edi], 0x5c2dd4
mov dword [edi + 4], 0xffffffff
mov dword [edi + 8], esi
mov esi, dword [esp + 0x14]
mov dword [esp + 0x18], edi
xor edi, edi
jmp 0x4fd355
xor edi, edi
mov dword [esp + 0x18], edi
mov edx, dword [esp + 0x18]
lea ecx, [ebx + 0x14]
push edx
call fcn.004fb7c0
push edi
push edi
lea ecx, [esp + 0x34]
call fcn.00500200
mov dword [esp + 0x2c], 0x5c2d68
mov dword [esp + 0x38], edi
mov dword [esp + 0x30], edi
mov ax, word [ebp]
mov dword [esp + 0xac], 4
cmp ax, di
je 0x4fd466
cmp ax, word [esp + 0x24]
je 0x4fd466
mov dword [esp + 0x28], eax
push 1
lea eax, [esp + 0x2c]
push 1
push eax
lea ecx, [esi + 0xc]
call fcn.004f80a0
mov ax, word [ebp]
mov cl, al
and ecx, 0xff
cmp cx, ax
jne 0x4fd3ce
mov dl, al
mov byte [esp + 0x13], dl
jmp 0x4fd3d3
mov byte [esp + 0x13], 0
push 1
lea eax, [esp + 0x17]
push 1
push eax
lea ecx, [esp + 0x38]
call fcn.00500160
mov ecx, ebp
lea eax, [ebx + 0x80]
mov edx, dword [ecx]
mov dword [eax], edx
mov edx, dword [ecx + 4]
mov dword [eax + 4], edx
mov edx, dword [ecx + 8]
mov dword [eax + 8], edx
mov ecx, dword [ecx + 0xc]
mov dword [eax + 0xc], ecx
lea eax, [ebx + 0xa0]
mov edx, eax
mov ecx, ebp
mov edi, dword [edx]
mov dword [ecx], edi
mov edi, dword [edx + 4]
mov dword [ecx + 4], edi
mov edi, dword [edx + 8]
mov dword [ecx + 8], edi
mov edx, dword [edx + 0xc]
mov dword [ecx + 0xc], edx
lea ecx, [ebx + 0xb0]
mov edx, dword [ebx + 0xb0]
mov dword [eax], edx
mov edx, dword [ecx + 4]
mov dword [eax + 4], edx
mov edx, dword [ecx + 8]
mov dword [eax + 8], edx
mov ecx, dword [ecx + 0xc]
mov dword [eax + 0xc], ecx
mov ecx, ebx
call fcn.004f8a00
test eax, eax
jne 0x4fd459
mov ecx, ebx
call fcn.004f8a00
test eax, eax
je 0x4fd44e
mov ax, word [ebp]
test ax, ax
jne 0x4fd395
mov edx, ebp
mov eax, dword [edx]
mov dword [ebx + 0x80], eax
mov ecx, dword [edx + 4]
mov dword [ebx + 0x84], ecx
mov eax, dword [edx + 8]
mov dword [ebx + 0x88], eax
lea eax, [ebx + 0xa0]
mov ecx, dword [edx + 0xc]
mov edx, eax
mov dword [ebx + 0x8c], ecx
mov ecx, ebp
mov esi, dword [edx]
mov dword [ecx], esi
mov esi, dword [edx + 4]
mov dword [ecx + 4], esi
mov esi, dword [edx + 8]
mov dword [ecx + 8], esi
mov edx, dword [edx + 0xc]
mov dword [ecx + 0xc], edx
mov ecx, dword [ebx + 0xb0]
mov edx, dword [ebx + 0xb4]
mov dword [eax], ecx
mov ecx, dword [ebx + 0xb8]
mov dword [eax + 4], edx
mov edx, dword [ebx + 0xbc]
mov dword [eax + 8], ecx
mov ecx, ebx
mov dword [eax + 0xc], edx
call fcn.004f8a00
test eax, eax
jne 0x4fd4e4
mov ecx, ebx
call fcn.004f8a00
test eax, eax
je 0x4fd4d9
mov esi, dword [esp + 0x30]
test esi, esi
jne 0x4fd4f1
mov esi, 0x5c2d64
mov al, byte [esi]
xor edi, edi
test al, al
je 0x4fd513
movsx eax, byte [edi + esi]
push eax
call fcn.0052050c
add esp, 4
test eax, eax
je 0x4fd513
mov al, byte [edi + esi + 1]
inc edi
test al, al
jne 0x4fd4f9
mov al, byte [edi + esi]
cmp al, 0x30
jl 0x4fd5a8
cmp al, 0x39
jg 0x4fd5a8
lea edx, [edi + 6]
xor ecx, ecx
cmp edi, edx
mov dword [esp + 0x24], ecx
jae 0x4fd551
mov al, byte [edi + esi]
cmp al, 0x30
jl 0x4fd54d
cmp al, 0x39
jg 0x4fd54d
movsx eax, al
lea ecx, [ecx + ecx*4]
inc edi
cmp edi, edx
lea ecx, [eax + ecx*2 - 0x30]
jb 0x4fd533
mov dword [esp + 0x24], ecx
mov al, byte [edi + esi]
test al, al
je 0x4fd571
movsx ecx, al
push ecx
call fcn.0052050c
add esp, 4
test eax, eax
je 0x4fd571
mov al, byte [edi + esi + 1]
inc edi
test al, al
jne 0x4fd558
mov dl, byte [esi + edi]
add esi, edi
xor eax, eax
test dl, dl
sete al
test eax, eax
je 0x4fd5a8
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x18]
mov dword [ecx + 4], eax
add ecx, 0xc
mov dword [edx + 4], eax
call fcn.004f8140
test eax, eax
je 0x4fd5a8
push eax
call fcn.0052112e
add esp, 4
mov esi, dword [esp + 0x1c]
mov eax, dword [esi + 0x10]
mov ecx, dword [esi + 0xc]
cmp ecx, eax
jl 0x4fd5dd
lea edi, [eax + eax]
cmp edi, 8
jge 0x4fd5c3
mov edi, 8
mov ecx, dword [esi + 8]
lea eax, [edi*4]
push eax
push ecx
call fcn.00522537
add esp, 8
mov dword [esi + 8], eax
mov dword [esi + 0x10], edi
mov edx, dword [esi + 0xc]
mov eax, dword [esi + 8]
mov ecx, dword [esp + 0x14]
push 0
mov dword [eax + edx*4], ecx
mov ecx, dword [esi + 0xc]
mov edx, dword [esp + 0xb8]
inc ecx
push 0
mov dword [esi + 0xc], ecx
mov edi, dword [edx]
push 1
push 0
lea ecx, [esp + 0x64]
call fcn.004f7b20
push eax
mov ecx, ebp
call fcn.004f89d0
test eax, eax
je 0x4fd627
push 0
mov ecx, ebx
call fcn.004f9940
mov ebp, eax
jmp 0x4fd70e
lea eax, [esp + 0x1c]
mov ecx, ebx
push eax
mov dword [esp + 0x20], edi
call fcn.004f9570
push 0
push 0
mov edi, eax
push 1
push 0x7c
lea ecx, [esp + 0x74]
mov dword [esp + 0x38], edi
call fcn.004f7b20
push eax
mov ecx, ebp
call fcn.004f89d0
test eax, eax
je 0x4fd70c
push 0x14
call fcn.00532880
add esp, 4
mov dword [esp + 0x3c], eax
test eax, eax
mov byte [esp + 0xac], 5
je 0x4fd685
mov ecx, eax
call fcn.004ff200
mov dword [esp + 0x24], eax
jmp 0x4fd68d
mov dword [esp + 0x24], 0
mov edi, dword [esp + 0x24]
lea ecx, [ebx + 0x14]
push edi
mov byte [esp + 0xb0], 4
call fcn.004fb7c0
mov ecx, dword [esp + 0x28]
add edi, 4
push ecx
mov ecx, edi
call fcn.004fb7c0
push 0
push 0
push 1
push 0x7c
lea ecx, [esp + 0x54]
call fcn.004f7b20
push eax
mov ecx, ebp
call fcn.004f89d0
test eax, eax
je 0x4fd706
mov ecx, ebx
call fcn.004fb0e0
lea edx, [esp + 0x1c]
mov ecx, ebx
push edx
call fcn.004f9570
push eax
mov ecx, edi
call fcn.004fb7c0
push 0
push 0
push 1
push 0x7c
lea ecx, [esp + 0x54]
call fcn.004f7b20
push eax
mov ecx, ebp
call fcn.004f89d0
test eax, eax
jne 0x4fd6ce
mov ebp, dword [esp + 0x24]
jmp 0x4fd70e
mov ebp, edi
mov eax, dword [esi + 0x10]
mov ecx, dword [esi + 0xc]
cmp ecx, eax
jl 0x4fd73f
lea edi, [eax + eax]
cmp edi, 8
jge 0x4fd725
mov edi, 8
mov ecx, dword [esi + 8]
lea eax, [edi*4]
push eax
push ecx
call fcn.00522537
add esp, 8
mov dword [esi + 8], eax
mov dword [esi + 0x10], edi
mov edx, dword [esi + 0xc]
mov eax, dword [esi + 8]
mov dword [eax + edx*4], ebp
mov edx, dword [esi + 0xc]
inc edx
mov dword [esi + 0xc], edx
mov eax, dword [esi + 0x10]
mov ecx, edx
cmp ecx, eax
jl 0x4fd77f
lea edi, [eax + eax]
cmp edi, 8
jge 0x4fd765
mov edi, 8
mov edx, dword [esi + 8]
lea ecx, [edi*4]
push ecx
push edx
call fcn.00522537
add esp, 8
mov dword [esi + 8], eax
mov dword [esi + 0x10], edi
mov eax, dword [esi + 0xc]
mov ecx, dword [esi + 8]
mov edx, dword [esp + 0x18]
mov dword [ecx + eax*4], edx
mov ecx, dword [esi + 0xc]
mov eax, dword [esp + 0x20]
inc ecx
mov dword [esi + 0xc], ecx
mov edi, dword [ebx + 0x50]
lea ebp, [eax + 1]
cmp ebp, edi
jle 0x4fd7e3
cmp edi, 8
jge 0x4fd7ab
mov edi, 8
cmp ebp, edi
jle 0x4fd7c9
add edi, edi
cmp ebp, edi
jle 0x4fd7c9
lea edi, [ebp + 0xb]
mov ecx, edi
and ecx, reloc.OLEAUT32.dll_VariantInit
jns 0x4fd7c7
dec ecx
or ecx, 0xfffffff8
inc ecx
sub edi, ecx
mov eax, dword [ebx + 0x48]
lea edx, [edi*4]
push edx
push eax
call fcn.00522537
add esp, 8
mov dword [ebx + 0x48], eax
mov dword [ebx + 0x50], edi
mov edx, dword [ebx + 0x4c]
cmp edx, ebp
jge 0x4fd80a
mov edi, dword [ebx + 0x48]
mov ecx, ebp
sub ecx, edx
xor eax, eax
shl ecx, 2
lea edi, [edi + edx*4]
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov dword [ebx + 0x4c], ebp
mov eax, dword [ebx + 0x48]
mov ecx, dword [esp + 0x20]
mov edi, esi
mov dword [esp + 0xac], 0xffffffff
mov dword [eax + ecx*4], esi
mov eax, dword [esp + 0x30]
mov dword [esp + 0x2c], 0x5c2d68
jmp 0x4fdd61
mov edx, ebp
mov eax, dword [edx]
mov dword [ebx + 0x80], eax
mov ecx, dword [edx + 4]
mov dword [ebx + 0x84], ecx
mov eax, dword [edx + 8]
mov dword [ebx + 0x88], eax
lea eax, [ebx + 0xa0]
mov ecx, dword [edx + 0xc]
mov edx, eax
mov dword [ebx + 0x8c], ecx
mov ecx, ebp
mov esi, dword [edx]
mov dword [ecx], esi
mov esi, dword [edx + 4]
mov dword [ecx + 4], esi
mov esi, dword [edx + 8]
mov dword [ecx + 8], esi
mov edx, dword [edx + 0xc]
mov dword [ecx + 0xc], edx
mov ecx, dword [ebx + 0xb0]
mov edx, dword [ebx + 0xb4]
mov dword [eax], ecx
mov ecx, dword [ebx + 0xb8]
mov dword [eax + 4], edx
mov edx, dword [ebx + 0xbc]
mov dword [eax + 8], ecx
mov ecx, ebx
mov dword [eax + 0xc], edx
call fcn.004f8a00
test eax, eax
jne 0x4fd8b0
mov ecx, ebx
call fcn.004f8a00
test eax, eax
je 0x4fd8a5
push 8
call fcn.00532880
mov esi, eax
add esp, 4
mov dword [esp + 0x1c], esi
test esi, esi
mov dword [esp + 0xac], 6
je 0x4fda07
mov eax, dword [esp + 0xb4]
push 0
push 0
push 1
mov edi, dword [eax]
push 0
lea ecx, [esp + 0x74]
call fcn.004f7b20
push eax
mov ecx, ebp
call fcn.004f89d0
test eax, eax
je 0x4fd912
push 0
mov ecx, ebx
call fcn.004f9940
mov dword [esi], 0x5c2dc8
mov dword [esi + 4], eax
mov edi, esi
jmp 0x4fda09
lea ecx, [esp + 0x20]
mov dword [esp + 0x20], edi
push ecx
mov ecx, ebx
call fcn.004f9570
push 0
push 0
mov edi, eax
push 1
push 0x7c
lea ecx, [esp + 0x64]
mov dword [esp + 0x38], edi
call fcn.004f7b20
push eax
mov ecx, ebp
call fcn.004f89d0
test eax, eax
je 0x4fd9f8
push 0x14
call fcn.00532880
add esp, 4
mov dword [esp + 0x3c], eax
test eax, eax
mov byte [esp + 0xac], 7
je 0x4fd96e
mov ecx, eax
call fcn.004ff200
mov esi, eax
jmp 0x4fd970
xor esi, esi
push esi
lea ecx, [ebx + 0x14]
mov byte [esp + 0xb0], 6
call fcn.004fb7c0
mov edx, dword [esp + 0x28]
lea edi, [esi + 4]
push edx
mov ecx, edi
call fcn.004fb7c0
push 0
push 0
push 1
push 0x7c
lea ecx, [esp + 0x54]
call fcn.004f7b20
push eax
mov ecx, ebp
call fcn.004f89d0
test eax, eax
je 0x4fd9e5
mov ecx, ebx
call fcn.004fb0e0
lea eax, [esp + 0x20]
mov ecx, ebx
push eax
call fcn.004f9570
push eax
mov ecx, edi
call fcn.004fb7c0
push 0
push 0
push 1
push 0x7c
lea ecx, [esp + 0x54]
call fcn.004f7b20
push eax
mov ecx, ebp
call fcn.004f89d0
test eax, eax
jne 0x4fd9ad
mov eax, esi
mov esi, dword [esp + 0x1c]
mov edi, esi
mov dword [esi], 0x5c2dc8
mov dword [esi + 4], eax
jmp 0x4fda09
mov eax, edi
mov dword [esi], 0x5c2dc8
mov dword [esi + 4], eax
mov edi, esi
jmp 0x4fda09
xor edi, edi
push edi
lea ecx, [ebx + 0x14]
mov dword [esp + 0xb0], 0xffffffff
call fcn.004fb7c0
mov ecx, ebx
call fcn.004fb0e0
mov eax, edi
jmp 0x4fe97a
mov ecx, ebp
lea eax, [ebx + 0x80]
mov edx, dword [ecx]
mov dword [eax], edx
mov edx, dword [ecx + 4]
mov dword [eax + 4], edx
mov edx, dword [ecx + 8]
mov dword [eax + 8], edx
mov ecx, dword [ecx + 0xc]
mov dword [eax + 0xc], ecx
lea eax, [ebx + 0xa0]
mov edx, eax
mov ecx, ebp
mov edi, dword [edx]
mov dword [ecx], edi
mov edi, dword [edx + 4]
mov dword [ecx + 4], edi
mov edi, dword [edx + 8]
mov dword [ecx + 8], edi
mov edx, dword [edx + 0xc]
mov dword [ecx + 0xc], edx
lea ecx, [ebx + 0xb0]
mov edx, dword [ebx + 0xb0]
mov dword [eax], edx
mov edx, dword [ecx + 4]
mov dword [eax + 4], edx
mov edx, dword [ecx + 8]
mov dword [eax + 8], edx
mov ecx, dword [ecx + 0xc]
mov dword [eax + 0xc], ecx
mov ecx, ebx
call fcn.004f8a00
test eax, eax
jne 0x4fda9f
mov ecx, ebx
call fcn.004f8a00
test eax, eax
je 0x4fda94
mov ax, word [ebp]
cmp ax, si
je 0x4fdb43
and eax, 0xffff
push eax
call fcn.0052050c
add esp, 4
test eax, eax
je 0x4fdb43
mov edx, ebp
lea eax, [ebx + 0x80]
mov ecx, dword [edx]
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
mov ecx, dword [edx + 8]
mov dword [eax + 8], ecx
mov edx, dword [edx + 0xc]
mov dword [eax + 0xc], edx
lea eax, [ebx + 0xa0]
mov ecx, eax
mov edx, ebp
mov edi, dword [ecx]
mov dword [edx], edi
mov edi, dword [ecx + 4]
mov dword [edx + 4], edi
mov edi, dword [ecx + 8]
mov dword [edx + 8], edi
mov ecx, dword [ecx + 0xc]
mov dword [edx + 0xc], ecx
lea ecx, [ebx + 0xb0]
mov edx, dword [ebx + 0xb0]
mov dword [eax], edx
mov edx, dword [ecx + 4]
mov dword [eax + 4], edx
mov edx, dword [ecx + 8]
mov dword [eax + 8], edx
mov ecx, dword [ecx + 0xc]
mov dword [eax + 0xc], ecx
mov ecx, ebx
call fcn.004f8a00
test eax, eax
jne 0x4fdb36
mov ecx, ebx
call fcn.004f8a00
test eax, eax
je 0x4fdb2b
mov ax, word [ebp]
cmp ax, si
jne 0x4fdaac
mov ax, word [ebp]
cmp ax, 0x3c
je 0x4fdd80
cmp ax, 0x27
je 0x4fdd80
push esi
push esi
lea ecx, [esp + 0x34]
call fcn.00500200
mov dword [esp + 0x2c], 0x5c2d68
mov dword [esp + 0x38], esi
mov dword [esp + 0x30], esi
mov ax, word [ebp]
mov dword [esp + 0xac], 9
cmp ax, si
je 0x4fdc46
cmp ax, 0x29
je 0x4fdc46
mov dl, al
and edx, 0xff
cmp dx, ax
jne 0x4fdbae
mov al, byte [ebp]
mov byte [esp + 0x13], al
jmp 0x4fdbb3
mov byte [esp + 0x13], 0
push 1
lea ecx, [esp + 0x17]
push 1
push ecx
lea ecx, [esp + 0x38]
call fcn.00500160
mov edx, ebp
lea eax, [ebx + 0x80]
mov ecx, dword [edx]
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
mov ecx, dword [edx + 8]
mov dword [eax + 8], ecx
mov edx, dword [edx + 0xc]
mov dword [eax + 0xc], edx
lea eax, [ebx + 0xa0]
mov ecx, eax
mov edx, ebp
mov esi, dword [ecx]
mov dword [edx], esi
mov esi, dword [ecx + 4]
mov dword [edx + 4], esi
mov esi, dword [ecx + 8]
mov dword [edx + 8], esi
mov ecx, dword [ecx + 0xc]
mov dword [edx + 0xc], ecx
lea ecx, [ebx + 0xb0]
mov edx, dword [ebx + 0xb0]
mov dword [eax], edx
mov edx, dword [ecx + 4]
mov dword [eax + 4], edx
mov edx, dword [ecx + 8]
mov dword [eax + 8], edx
mov ecx, dword [ecx + 0xc]
mov dword [eax + 0xc], ecx
mov ecx, ebx
call fcn.004f8a00
test eax, eax
jne 0x4fdc39
mov ecx, ebx
call fcn.004f8a00
test eax, eax
je 0x4fdc2e
mov ax, word [ebp]
test ax, ax
jne 0x4fdb8e
mov edi, dword [esp + 0x30]
xor ebp, ebp
test edi, edi
jne 0x4fdc55
mov edi, 0x5c2d64
mov al, byte [edi]
xor esi, esi
test al, al
je 0x4fdc77
movsx edx, byte [esi + edi]
push edx
call fcn.0052050c
add esp, 4
test eax, eax
je 0x4fdc77
mov al, byte [esi + edi + 1]
inc esi
test al, al
jne 0x4fdc5d
mov al, byte [esi + edi]
cmp al, 0x30
jl 0x4fdccc
cmp al, 0x39
jg 0x4fdccc
lea edx, [esi + 6]
xor ebp, ebp
cmp esi, edx
mov eax, esi
jae 0x4fdcaa
mov cl, byte [eax + edi]
cmp cl, 0x30
jl 0x4fdcaa
cmp cl, 0x39
jg 0x4fdcaa
movsx ecx, cl
lea esi, [ebp + ebp*4]
inc eax
cmp eax, edx
lea ebp, [ecx + esi*2 - 0x30]
jb 0x4fdc8d
lea esi, [eax + edi]
mov al, byte [eax + edi]
test al, al
je 0x4fdccc
movsx edx, byte [esi]
push edx
call fcn.0052050c
add esp, 4
test eax, eax
je 0x4fdccc
mov al, byte [esi + 1]
inc esi
test al, al
jne 0x4fdcb4
push 0x1c
call fcn.00532880
mov esi, eax
add esp, 4
test esi, esi
je 0x4fdcfc
lea ecx, [esi + 0xc]
mov dword [esi], method.CSyncObject.virtual_20
call fcn.004f8080
mov dword [esi], 0x5c2dbc
mov dword [esi + 4], 0
mov dword [esi + 8], ebp
jmp 0x4fdcfe
xor esi, esi
push esi
lea ecx, [ebx + 0x14]
call fcn.004fb7c0
mov eax, dword [ebx + 0x40]
mov ecx, dword [ebx + 0x3c]
cmp ecx, eax
jl 0x4fdd38
lea edi, [eax + eax]
cmp edi, 8
jge 0x4fdd1e
mov edi, 8
mov ecx, dword [ebx + 0x38]
lea eax, [edi*4]
push eax
push ecx
call fcn.00522537
add esp, 8
mov dword [ebx + 0x38], eax
mov dword [ebx + 0x40], edi
mov edx, dword [ebx + 0x3c]
mov eax, dword [ebx + 0x38]
mov edi, esi
mov dword [esp + 0xac], 0xffffffff
mov dword [eax + edx*4], esi
mov edx, dword [ebx + 0x3c]
mov eax, dword [esp + 0x30]
inc edx
mov dword [ebx + 0x3c], edx
mov dword [esp + 0x2c], 0x5c2d68
test eax, eax
je 0x4fe847
push eax
call fcn.0052112e
add esp, 4
mov ecx, ebx
call fcn.004fb0e0
mov eax, edi
jmp 0x4fe97a
sub ax, 0x3c
push 0x1c
neg ax
sbb eax, eax
and al, 0xe9
add eax, 0x3e
mov dword [esp + 0x28], eax
call fcn.00532880
mov edi, eax
add esp, 4
cmp edi, esi
je 0x4fddc2
lea ecx, [edi + 0xc]
mov dword [edi], method.CSyncObject.virtual_20
call fcn.004f8080
mov dword [edi], 0x5c2dbc
mov dword [edi + 4], esi
mov dword [edi + 8], 0xfffffffd
jmp 0x4fddc4
xor edi, edi
push edi
lea ecx, [ebx + 0x14]
mov dword [esp + 0x1c], edi
call fcn.004fb7c0
mov ecx, ebp
lea eax, [ebx + 0x80]
mov edx, dword [ecx]
mov dword [eax], edx
mov edx, dword [ecx + 4]
mov dword [eax + 4], edx
mov edx, dword [ecx + 8]
mov dword [eax + 8], edx
mov ecx, dword [ecx + 0xc]
mov dword [eax + 0xc], ecx
lea eax, [ebx + 0xa0]
mov edx, eax
mov ecx, ebp
mov esi, dword [edx]
mov dword [ecx], esi
mov esi, dword [edx + 4]
mov dword [ecx + 4], esi
mov esi, dword [edx + 8]
mov dword [ecx + 8], esi
mov edx, dword [edx + 0xc]
mov dword [ecx + 0xc], edx
lea ecx, [ebx + 0xb0]
mov edx, dword [ebx + 0xb0]
mov dword [eax], edx
mov edx, dword [ecx + 4]
mov dword [eax + 4], edx
mov edx, dword [ecx + 8]
mov dword [eax + 8], edx
mov ecx, dword [ecx + 0xc]
mov dword [eax + 0xc], ecx
mov ecx, ebx
call fcn.004f8a00
test eax, eax
jne 0x4fde45
mov ecx, ebx
call fcn.004f8a00
test eax, eax
je 0x4fde3a
push 0
push 0
lea ecx, [esp + 0x34]
call fcn.00500200
mov dword [esp + 0x2c], 0x5c2d68
mov dword [esp + 0x38], 0
mov dword [esp + 0x30], 0
mov ax, word [ebp]
mov dword [esp + 0xac], 8
test ax, ax
je 0x4fdf53
cmp ax, word [esp + 0x24]
je 0x4fdf53
push 1
lea edx, [esp + 0x2c]
push 1
push edx
lea ecx, [edi + 0xc]
mov dword [esp + 0x34], eax
call fcn.004f80a0
mov ax, word [ebp]
mov cl, al
and ecx, 0xff
cmp cx, ax
jne 0x4fdebb
mov dl, al
mov byte [esp + 0x13], dl
jmp 0x4fdec0
mov byte [esp + 0x13], 0
push 1
lea eax, [esp + 0x17]
push 1
push eax
lea ecx, [esp + 0x38]
call fcn.00500160
mov ecx, ebp
lea eax, [ebx + 0x80]
mov edx, dword [ecx]
mov dword [eax], edx
mov edx, dword [ecx + 4]
mov dword [eax + 4], edx
mov edx, dword [ecx + 8]
mov dword [eax + 8], edx
mov ecx, dword [ecx + 0xc]
mov dword [eax + 0xc], ecx
lea eax, [ebx + 0xa0]
mov edx, eax
mov ecx, ebp
mov esi, dword [edx]
mov dword [ecx], esi
mov esi, dword [edx + 4]
mov dword [ecx + 4], esi
mov esi, dword [edx + 8]
mov dword [ecx + 8], esi
mov edx, dword [edx + 0xc]
mov dword [ecx + 0xc], edx
lea ecx, [ebx + 0xb0]
mov edx, dword [ebx + 0xb0]
mov dword [eax], edx
mov edx, dword [ecx + 4]
mov dword [eax + 4], edx
mov edx, dword [ecx + 8]
mov dword [eax + 8], edx
mov ecx, dword [ecx + 0xc]
mov dword [eax + 0xc], ecx
mov ecx, ebx
call fcn.004f8a00
test eax, eax
jne 0x4fdf46
mov ecx, ebx
call fcn.004f8a00
test eax, eax
je 0x4fdf3b
mov ax, word [ebp]
test ax, ax
jne 0x4fde82
mov edx, ebp
mov eax, dword [edx]
mov dword [ebx + 0x80], eax
mov ecx, dword [edx + 4]
mov dword [ebx + 0x84], ecx
mov eax, dword [edx + 8]
mov dword [ebx + 0x88], eax
lea eax, [ebx + 0xa0]
mov ecx, dword [edx + 0xc]
mov edx, eax
mov dword [ebx + 0x8c], ecx
mov ecx, dword [edx]
mov dword [ebp], ecx
mov ecx, dword [edx + 4]
mov dword [ebp + 4], ecx
mov ecx, dword [edx + 8]
mov dword [ebp + 8], ecx
mov ecx, dword [ebx + 0xb0]
mov edx, dword [edx + 0xc]
mov dword [eax], ecx
mov ecx, dword [ebx + 0xb8]
mov dword [ebp + 0xc], edx
mov edx, dword [ebx + 0xb4]
mov dword [eax + 4], edx
mov edx, dword [ebx + 0xbc]
mov dword [eax + 8], ecx
mov ecx, ebx
mov dword [eax + 0xc], edx
call fcn.004f8a00
test eax, eax
jne 0x4fdfd0
mov ecx, ebx
call fcn.004f8a00
test eax, eax
je 0x4fdfc5
mov ebp, dword [esp + 0x30]
test ebp, ebp
jne 0x4fdfdd
mov ebp, 0x5c2d64
mov al, byte [ebp]
xor edi, edi
test al, al
je 0x4fe000
movsx eax, byte [edi + ebp]
push eax
call fcn.0052050c
add esp, 4
test eax, eax
je 0x4fe000
mov al, byte [edi + ebp + 1]
inc edi
test al, al
jne 0x4fdfe6
mov al, byte [edi + ebp]
cmp al, 0x30
jl 0x4fe07b
cmp al, 0x39
jg 0x4fe07b
lea ecx, [edi + 6]
xor esi, esi
cmp edi, ecx
jae 0x4fe02e
mov al, byte [edi + ebp]
cmp al, 0x30
jl 0x4fe02e
cmp al, 0x39
jg 0x4fe02e
movsx eax, al
lea edx, [esi + esi*4]
inc edi
cmp edi, ecx
lea esi, [eax + edx*2 - 0x30]
jb 0x4fe014
mov al, byte [edi + ebp]
test al, al
je 0x4fe04e
movsx ecx, al
push ecx
call fcn.0052050c
add esp, 4
test eax, eax
je 0x4fe04e
mov al, byte [edi + ebp + 1]
inc edi
test al, al
jne 0x4fe035
mov dl, byte [ebp + edi]
add ebp, edi
xor eax, eax
test dl, dl
sete al
test eax, eax
je 0x4fe07b
mov eax, dword [esp + 0x18]
lea ecx, [eax + 0xc]
mov dword [eax + 8], esi
call fcn.004f8140
test eax, eax
je 0x4fe07b
push eax
call fcn.0052112e
add esp, 4
mov eax, dword [ebx + 0x40]
mov ecx, dword [ebx + 0x3c]
cmp ecx, eax
jl 0x4fe0ac
lea esi, [eax + eax]
cmp esi, 8
jge 0x4fe092
mov esi, 8
mov eax, dword [ebx + 0x38]
lea edx, [esi*4]
push edx
push eax
call fcn.00522537
add esp, 8
mov dword [ebx + 0x38], eax
mov dword [ebx + 0x40], esi
mov ecx, dword [ebx + 0x3c]
mov edx, dword [ebx + 0x38]
mov edi, dword [esp + 0x18]
mov dword [esp + 0xac], 0xffffffff
mov dword [edx + ecx*4], edi
mov edx, dword [ebx + 0x3c]
mov eax, dword [esp + 0x30]
inc edx
mov dword [ebx + 0x3c], edx
mov dword [esp + 0x2c], 0x5c2d68
jmp 0x4fdd61
push 0x24
call fcn.00532880
mov edi, eax
add esp, 4
cmp edi, esi
je 0x4fe10d
lea ecx, [edi + 8]
mov dword [edi], method.CSyncObject.virtual_20
call fcn.004f8080
mov dword [edi], 0x5c2db0
mov dword [edi + 4], 0xffffffff
mov dword [esp + 0x14], edi
jmp 0x4fe113
mov dword [esp + 0x14], esi
mov edi, esi
lea ecx, [ebx + 0x14]
push edi
call fcn.004fb7c0
cmp word [ebx + 0xa0], 0x3f
lea eax, [ebx + 0xa0]
jne 0x4fe149
cmp dword [eax + 4], 1
jne 0x4fe149
mov esi, dword [esp + 0xb4]
mov ecx, ebx
push esi
call fcn.004fcb80
mov dword [edi + 0x18], eax
jmp 0x4fe57d
mov edx, ebp
lea ecx, [ebx + 0x80]
mov edi, dword [edx]
mov dword [ecx], edi
mov edi, dword [edx + 4]
mov dword [ecx + 4], edi
mov edi, dword [edx + 8]
mov dword [ecx + 8], edi
mov edx, dword [edx + 0xc]
mov dword [ecx + 0xc], edx
mov ecx, eax
mov edx, ebp
mov edi, dword [ecx]
mov dword [edx], edi
mov edi, dword [ecx + 4]
mov dword [edx + 4], edi
mov edi, dword [ecx + 8]
mov dword [edx + 8], edi
mov ecx, dword [ecx + 0xc]
mov dword [edx + 0xc], ecx
lea ecx, [ebx + 0xb0]
mov edx, dword [ebx + 0xb0]
mov dword [eax], edx
mov edx, dword [ecx + 4]
mov dword [eax + 4], edx
mov edx, dword [ecx + 8]
mov dword [eax + 8], edx
mov ecx, dword [ecx + 0xc]
mov dword [eax + 0xc], ecx
mov ecx, ebx
call fcn.004f8a00
test eax, eax
jne 0x4fe1b7
mov ecx, ebx
call fcn.004f8a00
test eax, eax
je 0x4fe1ac
mov edx, dword [ebx + 0x98]
push 0xc
mov dword [esp + 0x1c], edx
call fcn.00532880
add esp, 4
mov dword [esp + 0x1c], eax
cmp eax, esi
mov dword [esp + 0xac], 0xa
je 0x4fe2fb
mov eax, dword [esp + 0xb4]
push esi
push esi
push 1
mov edi, dword [eax]
push esi
lea ecx, [esp + 0x74]
call fcn.004f7b20
push eax
mov ecx, ebp
call fcn.004f89d0
test eax, eax
je 0x4fe212
push esi
mov ecx, ebx
call fcn.004f9940
jmp 0x4fe2e5
lea ecx, [esp + 0x20]
mov dword [esp + 0x20], edi
push ecx
mov ecx, ebx
call fcn.004f9570
push esi
push esi
mov edi, eax
push 1
push 0x7c
lea ecx, [esp + 0x64]
mov dword [esp + 0x38], edi
call fcn.004f7b20
push eax
mov ecx, ebp
call fcn.004f89d0
test eax, eax
je 0x4fe2e3
push 0x14
call fcn.00532880
add esp, 4
mov dword [esp + 0x40], eax
cmp eax, esi
mov byte [esp + 0xac], 0xb
je 0x4fe26c
mov ecx, eax
call fcn.004ff200
mov edi, eax
jmp 0x4fe26e
xor edi, edi
push edi
lea ecx, [ebx + 0x14]
mov byte [esp + 0xb0], 0xa
call fcn.004fb7c0
mov edx, dword [esp + 0x28]
lea esi, [edi + 4]
push edx
mov ecx, esi
call fcn.004fb7c0
push 0
push 0
push 1
push 0x7c
lea ecx, [esp + 0x54]
call fcn.004f7b20
push eax
mov ecx, ebp
call fcn.004f89d0
test eax, eax
je 0x4fe2e3
mov ecx, ebx
call fcn.004fb0e0
lea eax, [esp + 0x20]
mov ecx, ebx
push eax
call fcn.004f9570
push eax
mov ecx, esi
call fcn.004fb7c0
push 0
push 0
push 1
push 0x7c
lea ecx, [esp + 0x54]
call fcn.004f7b20
push eax
mov ecx, ebp
call fcn.004f89d0
test eax, eax
jne 0x4fe2ab
mov eax, edi
mov esi, dword [esp + 0x1c]
mov dword [esi], 0x5c2de0
mov dword [esi + 4], eax
mov dword [esi + 8], 1
jmp 0x4fe2fd
xor esi, esi
push esi
lea ecx, [ebx + 0x14]
mov dword [esp + 0xb0], 0xffffffff
call fcn.004fb7c0
mov edi, dword [esp + 0x14]
mov dword [edi + 0x18], esi
mov eax, dword [ebx + 0x78]
test eax, eax
mov dword [esp + 0x20], eax
jne 0x4fe32b
mov dword [esp + 0x20], 0x5c2d20
mov eax, dword [ebx + 0x98]
mov edx, dword [esp + 0x18]
sub eax, edx
mov edx, dword [edi + 0x14]
mov esi, edx
mov dword [esp + 0x1c], eax
cmp esi, 8
jge 0x4fe34a
mov esi, 8
mov ecx, dword [edi + 0x10]
add eax, ecx
lea ecx, [eax + 1]
cmp ecx, esi
jle 0x4fe36f
add esi, esi
cmp ecx, esi
jle 0x4fe36f
lea esi, [eax + 0xc]
mov eax, esi
and eax, reloc.OLEAUT32.dll_VariantInit
jns 0x4fe36d
dec eax
or eax, 0xfffffff8
inc eax
sub esi, eax
cmp esi, edx
jle 0x4fe389
mov edx, dword [edi + 0xc]
lea ecx, [esi + esi]
push ecx
push edx
call fcn.00522537
add esp, 8
mov dword [edi + 0xc], eax
mov dword [edi + 0x14], esi
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
push 0
push 0
lea ecx, [eax + eax]
mov eax, dword [esp + 0x28]
lea esi, [eax + edx*2]
mov eax, dword [esp + 0x1c]
mov edx, dword [eax + 0x10]
mov edi, dword [eax + 0xc]
lea edi, [edi + edx*2]
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x24]
mov edi, dword [eax + 0x10]
mov edx, dword [eax + 0xc]
add edi, ecx
mov ecx, edi
mov dword [eax + 0x10], edi
mov word [edx + ecx*2], 0
lea ecx, [esp + 0x34]
call fcn.00500200
xor eax, eax
mov dword [esp + 0x2c], 0x5c2d68
mov dword [esp + 0x38], eax
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x18]
mov ecx, dword [ebx + 0x98]
cmp eax, ecx
mov dword [esp + 0xac], 0xc
jge 0x4fe454
mov esi, eax
cmp esi, dword [ebx + 0x7c]
jl 0x4fe410
xor eax, eax
jmp 0x4fe417
mov ecx, dword [ebx + 0x78]
mov ax, word [ecx + esi*2]
mov dl, al
push 1
and dx, 0xff
push 1
cmp dx, ax
lea edx, [esp + 0x1b]
setne cl
dec ecx
push edx
and ecx, eax
mov byte [esp + 0x1f], cl
lea ecx, [esp + 0x38]
call fcn.00500160
mov eax, dword [ebx + 0x98]
inc esi
cmp esi, eax
jl 0x4fe407
mov eax, dword [esp + 0x30]
test eax, eax
mov dword [esp + 0x24], eax
jne 0x4fe45c
mov dword [esp + 0x24], 0x5c2d64
lea eax, [esp + 0x3c]
lea ecx, [esp + 0x24]
push eax
push ecx
call fcn.004ff220
add esp, 8
test eax, eax
je 0x4fe496
mov edx, dword [esp + 0x24]
xor eax, eax
cmp byte [edx], 0
sete al
test eax, eax
je 0x4fe496
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x3c]
mov dword [eax + 4], ecx
mov dword [eax + 0x18], 0
jmp 0x4fe4e0
mov edi, dword [esp + 0x14]
mov dword [edi + 4], 0xffffffff
mov eax, dword [ebx + 0x70]
cmp dword [ebx + 0x6c], eax
jl 0x4fe4d0
lea esi, [eax + eax]
cmp esi, 8
jge 0x4fe4b6
mov esi, 8
mov eax, dword [ebx + 0x68]
lea edx, [esi*4]
push edx
push eax
call fcn.00522537
add esp, 8
mov dword [ebx + 0x68], eax
mov dword [ebx + 0x70], esi
mov ecx, dword [ebx + 0x6c]
mov edx, dword [ebx + 0x68]
mov dword [edx + ecx*4], edi
mov eax, dword [ebx + 0x6c]
inc eax
mov dword [ebx + 0x6c], eax
mov eax, ebp
mov ecx, dword [eax]
mov dword [ebx + 0x80], ecx
mov edx, dword [eax + 4]
mov dword [ebx + 0x84], edx
mov ecx, dword [eax + 8]
mov dword [ebx + 0x88], ecx
mov edx, dword [eax + 0xc]
lea eax, [ebx + 0xa0]
mov ecx, eax
mov dword [ebx + 0x8c], edx
mov edx, ebp
mov esi, dword [ecx]
mov dword [edx], esi
mov esi, dword [ecx + 4]
mov dword [edx + 4], esi
mov esi, dword [ecx + 8]
mov dword [edx + 8], esi
mov ecx, dword [ecx + 0xc]
mov dword [edx + 0xc], ecx
mov edx, dword [ebx + 0xb0]
mov ecx, dword [ebx + 0xb4]
mov dword [eax], edx
mov edx, dword [ebx + 0xb8]
mov dword [eax + 4], ecx
mov ecx, dword [ebx + 0xbc]
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov ecx, ebx
call fcn.004f8a00
test eax, eax
jne 0x4fe55e
mov ecx, ebx
call fcn.004f8a00
test eax, eax
je 0x4fe553
lea ecx, [esp + 0x2c]
mov dword [esp + 0xac], 0xffffffff
call fcn.004fb070
mov esi, dword [esp + 0xb4]
mov edi, dword [esp + 0x14]
mov edx, dword [esi]
lea eax, [esp + 0x3c]
push eax
mov ecx, ebx
mov dword [esp + 0x40], edx
call fcn.004f9570
mov dword [edi + 0x1c], eax
cmp word [ebp], 0x7c
jne 0x4fe5bb
mov ecx, ebx
call fcn.004fb0e0
mov ecx, dword [esi]
push ecx
mov ecx, ebx
call fcn.004f8670
mov ecx, ebx
mov dword [edi + 0x20], eax
call fcn.004fb0e0
mov eax, edi
jmp 0x4fe97a
mov ecx, ebx
mov dword [edi + 0x20], 0
call fcn.004fb0e0
mov eax, edi
jmp 0x4fe97a
cmp ax, si
je 0x4fe5f7
and eax, 0xffff
push eax
call fcn.0052050c
add esp, 4
test eax, eax
je 0x4fe5f7
mov ecx, ebx
call fcn.004fb0e0
mov ax, word [ebp]
cmp ax, si
jne 0x4fe5d5
mov ax, word [ebp]
cmp ax, 0x30
jb 0x4fe6fe
cmp ax, 0x39
ja 0x4fe6fe
lea ecx, [esp + 0x44]
call fcn.004ff2d0
mov ax, word [ebp]
mov dword [esp + 0xac], 0xd
cmp ax, si
je 0x4fe66f
cmp ax, 0x29
je 0x4fe66f
mov dl, al
and edx, 0xff
cmp dx, ax
jne 0x4fe648
mov al, byte [ebp]
mov byte [esp + 0x13], al
jmp 0x4fe64d
mov byte [esp + 0x13], 0
push 1
lea ecx, [esp + 0x17]
push 1
push ecx
lea ecx, [esp + 0x50]
call fcn.00500160
mov ecx, ebx
call fcn.004fb0e0
mov ax, word [ebp]
cmp ax, si
jne 0x4fe62c
mov eax, dword [esp + 0x48]
mov dword [esp + 0x14], esi
cmp eax, esi
mov dword [esp + 0x1c], eax
jne 0x4fe687
mov dword [esp + 0x1c], 0x5c2d64
lea edx, [esp + 0x14]
lea eax, [esp + 0x1c]
push edx
push eax
call fcn.004ff220
push 0x1c
call fcn.00532880
add esp, 0xc
mov dword [esp + 0x40], eax
cmp eax, esi
mov byte [esp + 0xac], 0xe
je 0x4fe6c0
mov ecx, dword [esp + 0x14]
push ecx
mov ecx, eax
call fcn.00500960
mov edi, eax
jmp 0x4fe6c2
xor edi, edi
push edi
lea ecx, [ebx + 0x14]
mov byte [esp + 0xb0], 0xd
call fcn.004fb7c0
push edi
lea ecx, [ebx + 0x34]
call fcn.004fb7c0
lea ecx, [esp + 0x44]
mov dword [esp + 0xac], 0xffffffff
call fcn.004fb070
mov ecx, ebx
call fcn.004fb0e0
mov eax, edi
jmp 0x4fe97a
mov edx, dword [esp + 0xb4]
push 0
push 0
push 1
mov esi, dword [edx]
push 0
lea ecx, [esp + 0x84]
call fcn.004f7b20
push eax
mov ecx, ebp
call fcn.004f89d0
test eax, eax
jne 0x4fe7e7
mov ax, word [ebp]
cmp ax, 0x3a
je 0x4fe7e7
cmp ax, 0x29
je 0x4fe7e7
push 0
push 0
push 1
push 0x28
lea ecx, [esp + 0x94]
call fcn.004f7b20
push eax
mov ecx, ebp
call fcn.004f89d0
test eax, eax
jne 0x4fe7e7
mov ax, word [ebp]
xor ecx, ecx
lea edi, [eax - 0x2d]
cmp edi, 0x46
ja case.0x4fe77d.50
xor eax, eax
mov al, byte [edi + 0x4fea08]
jmp dword [eax*4 + 0x4fe9f0]
mov ecx, 8
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4fe7ba
not ecx
and esi, ecx
jmp 0x4fe7bc
mov ecx, 1
jmp case.0x4fe77d.50
mov ecx, 2
jmp case.0x4fe77d.50
mov ecx, 4
jmp case.0x4fe77d.50
not ecx
mov dword [esp + 0x14], 1
and esi, ecx
jmp 0x4fe7bc
or esi, ecx
mov ecx, ebx
call fcn.004fb0e0
push 0
push 0
push 1
push 0
lea ecx, [esp + 0x84]
call fcn.004f7b20
push eax
mov ecx, ebp
call fcn.004f89d0
test eax, eax
je 0x4fe72b
cmp word [ebp], 0x3a
je 0x4fe836
push 0
push 0
push 1
push 0x28
lea ecx, [esp + 0xa4]
call fcn.004f7b20
push eax
mov ecx, ebp
call fcn.004f89d0
test eax, eax
jne 0x4fe82f
mov ecx, dword [esp + 0xb4]
push eax
mov dword [ecx], esi
mov ecx, ebx
call fcn.004f9940
mov ecx, ebx
mov edi, eax
call fcn.004fb0e0
mov eax, edi
jmp 0x4fe97a
cmp word [ebp], 0x3a
jne 0x4fe83d
mov ecx, ebx
call fcn.004fb0e0
push esi
mov ecx, ebx
call fcn.004f8670
mov edi, eax
mov ecx, ebx
call fcn.004fb0e0
mov eax, edi
jmp 0x4fe97a
push 0x18
call fcn.00532880
mov edi, dword [esp + 0xb8]
add esp, 4
test eax, eax
je 0x4fe87b
mov edx, dword [edi]
mov ecx, eax
and edx, 0x10
push edx
call fcn.004fb160
mov ebp, eax
jmp 0x4fe87d
xor ebp, ebp
lea ecx, [ebx + 0x14]
push ebp
call fcn.004fb7c0
mov ecx, dword [ebx + 8]
push 0x1c
inc ecx
mov esi, ecx
mov dword [ebx + 8], ecx
mov dword [esp + 0x24], esi
call fcn.00532880
add esp, 4
mov dword [esp + 0x40], eax
test eax, eax
mov dword [esp + 0xac], 0xf
je 0x4fe8c5
mov ecx, dword [edi]
shr ecx, 4
and ecx, 1
push ecx
push esi
mov ecx, eax
call fcn.00500830
mov edi, eax
jmp 0x4fe8c7
xor edi, edi
push edi
lea ecx, [ebx + 0x14]
mov dword [esp + 0xb0], 0xffffffff
call fcn.004fb7c0
lea esi, [ebp + 4]
push edi
mov ecx, esi
call fcn.004fb7c0
mov edx, dword [esp + 0xb4]
mov ecx, ebx
mov eax, dword [edx]
push eax
call fcn.004f8670
push eax
mov ecx, esi
call fcn.004fb7c0
push 0x1c
call fcn.00532880
add esp, 4
mov dword [esp + 0x40], eax
test eax, eax
mov dword [esp + 0xac], 0x10
je 0x4fe93e
mov ecx, dword [esp + 0xb4]
mov edx, dword [ecx]
mov ecx, dword [esp + 0x20]
not edx
shr edx, 4
and edx, 1
push edx
push ecx
mov ecx, eax
call fcn.00500830
mov edi, eax
jmp 0x4fe940
xor edi, edi
push edi
lea ecx, [ebx + 0x14]
mov dword [esp + 0xb0], 0xffffffff
call fcn.004fb7c0
push edi
mov ecx, esi
call fcn.004fb7c0
mov esi, dword [esp + 0x20]
push 0
push esi
lea ecx, [ebx + 0x24]
call fcn.004fedd0
mov edx, dword [ebx + 0x28]
mov ecx, ebx
mov dword [edx + esi*4], ebp
call fcn.004fb0e0
mov eax, ebp
mov ecx, dword [esp + 0xa4]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xa0
ret 4