Function at 0x40c250
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x58f1bb
mov eax, dword fs:[0]
push eax
sub esp, 0xcc
mov eax, dword [0x602fd4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
xor eax, eax
xor ebx, ebx
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x88], eax
call fcn.0040ddb0
push str.Value
add esi, 0x1130
push str.Property
push ebx
mov ecx, esi
mov dword [ebp - 0xa4], esi
call fcn.004a84f8
push 1
mov ecx, esi
call fcn.004a84b6
push 1
mov ecx, esi
call fcn.004aeb9f
push 1
push 1
mov ecx, esi
call fcn.004a9461
push 0xe8
call fcn.0040f260
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], ebx
test esi, esi
je 0x40c35c
push 0xe8
push ebx
push esi
call fcn.00573a70
add esp, 0xc
call fcn.004456c6
mov ecx, eax
test ecx, ecx
je 0x40dc60
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x78], eax
mov eax, 0x5de430
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x78]
test eax, 0xffff0000
jne 0x40c333
movzx eax, ax
push eax
call fcn.00406190
jmp 0x40c33d
push 0x5de430
call fcn.0040bae0
push 0
push 0
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 2
mov ebx, 1
mov ecx, esi
push eax
mov dword [ebp - 0x74], ebx
call fcn.004a7329
mov edi, eax
jmp 0x40c35e
xor edi, edi
mov dword [ebp - 4], 0xffffffff
test bl, 1
je 0x40c38b
mov edx, dword [ebp - 0x78]
and ebx, 0xfffffffe
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c38b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0xe8
call fcn.0040f260
mov esi, eax
add esp, 4
mov dword [ebp - 0x84], esi
mov dword [ebp - 4], 4
test esi, esi
je 0x40c476
push 0xe8
push 0
push esi
call fcn.00573a70
mov eax, 0xb
add esp, 0xc
mov word [ebp - 0xa0], ax
xor eax, eax
mov word [ebp - 0x98], ax
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 5
or ebx, 2
lea ecx, [ebp - 0xb8]
push eax
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x80], ebx
call fcn.004af93c
mov dword [ebp - 4], 6
or ebx, 4
mov dword [ebp - 0x74], ebx
call fcn.004456c6
mov ecx, eax
test ecx, ecx
je 0x40dc6a
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x7c], eax
mov eax, 0x5de46c
mov dword [ebp - 4], 7
lea ecx, [ebp - 0x7c]
test eax, 0xffff0000
jne 0x40c43b
movzx eax, ax
push eax
call fcn.00406190
jmp 0x40c445
push 0x5de46c
call fcn.0040bae0
push 0
push 0
push 0
push 0
push 0x5de438
mov dword [ebp - 4], 8
lea eax, [ebp - 0xb8]
mov ebx, dword [ebp - 0x80]
mov ecx, esi
push eax
lea eax, [ebp - 0x7c]
or ebx, 0xc
push eax
mov dword [ebp - 0x74], ebx
call fcn.004a7207
jmp 0x40c478
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0xb
call fcn.004a79e9
mov dword [ebp - 4], 0xa
test bl, 8
je 0x40c4b4
mov edx, dword [ebp - 0x7c]
and ebx, 0xfffffff7
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c4b4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [sym.imp.OLEAUT32.dll_VariantCopy]
test bl, 4
je 0x40c4d2
lea ecx, [ebp - 0xb8]
and ebx, 0xfffffffb
push ecx
mov dword [ebp - 0x74], ebx
call eax
mov eax, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov dword [ebp - 4], 0xffffffff
test bl, 2
je 0x40c4ed
lea ecx, [ebp - 0xa0]
and ebx, 0xfffffffd
push ecx
mov dword [ebp - 0x74], ebx
call eax
push 0xe8
call fcn.0040f260
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], 0xc
test esi, esi
je 0x40c5b6
push 0xe8
push 0
push esi
call fcn.00573a70
add esp, 0xc
lea ecx, [ebp - 0xa0]
xor eax, eax
mov word [ebp - 0xa0], ax
push 0x5de4b4
call fcn.004afb93
mov byte [ebp - 4], 0xd
or ebx, 0x10
mov dword [ebp - 0x74], ebx
call fcn.004456c6
mov ecx, eax
test ecx, ecx
je 0x40dc74
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x7c], eax
mov eax, 0x5de4c0
mov dword [ebp - 4], 0xe
lea ecx, [ebp - 0x7c]
test eax, 0xffff0000
jne 0x40c57c
movzx eax, ax
push eax
call fcn.00406190
jmp 0x40c586
push 0x5de4c0
call fcn.0040bae0
push 0
push 0
push 0
push 0
push str.vQ_NKN
lea eax, [ebp - 0xa0]
mov dword [ebp - 4], 0xf
push eax
lea eax, [ebp - 0x7c]
or ebx, 0x20
push eax
mov ecx, esi
mov dword [ebp - 0x74], ebx
call fcn.004a7207
mov esi, eax
jmp 0x40c5b8
xor esi, esi
mov dword [ebp - 4], 0x10
test bl, 0x20
je 0x40c5e5
mov edx, dword [ebp - 0x7c]
and ebx, 0xffffffdf
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c5e5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
test bl, 0x10
je 0x40c605
lea eax, [ebp - 0xa0]
and ebx, 0xffffffef
push eax
mov eax, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov dword [ebp - 0x74], ebx
call eax
push 1
push 0x5de4c8
mov ecx, esi
call fcn.004a791c
push 1
push 0x5de4cc
mov ecx, esi
call fcn.004a791c
push 1
push 0x5de4d0
mov ecx, esi
call fcn.004a791c
push 1
push 0x5de4b4
mov ecx, esi
call fcn.004a791c
push esi
mov ecx, edi
mov dword [esi + 0x68], 0
call fcn.004a79e9
push 0xe8
call fcn.0040f260
mov esi, eax
add esp, 4
mov dword [ebp - 0x84], esi
mov dword [ebp - 4], 0x12
test esi, esi
je 0x40c74d
push 0xe8
push 0
push esi
call fcn.00573a70
add esp, 0xc
mov eax, 8
mov word [ebp - 0xa0], ax
push 0x5de4f8
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x98], eax
test eax, eax
je 0x40dc7e
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x13
or ebx, 0x40
lea ecx, [ebp - 0xb8]
push eax
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x80], ebx
call fcn.004af93c
mov dword [ebp - 4], 0x14
or ebx, 0x80
mov dword [ebp - 0x74], ebx
call fcn.004456c6
mov ecx, eax
test ecx, ecx
je 0x40dc88
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x7c], eax
mov eax, 0x5de500
mov dword [ebp - 4], 0x15
lea ecx, [ebp - 0x7c]
test eax, 0xffff0000
jne 0x40c70f
movzx eax, ax
push eax
call fcn.00406190
jmp 0x40c719
push 0x5de500
call fcn.0040bae0
push 0
push 0
push 0
push 0
push 0x5de4dc
mov dword [ebp - 4], 0x16
lea eax, [ebp - 0xb8]
mov ebx, dword [ebp - 0x80]
mov ecx, esi
push eax
lea eax, [ebp - 0x7c]
or ebx, 0x180
push eax
mov dword [ebp - 0x74], ebx
call fcn.004a7207
jmp 0x40c74f
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0x19
call fcn.004a79e9
mov dword [ebp - 4], 0x18
test ebx, 0x100
je 0x40c791
mov edx, dword [ebp - 0x7c]
and ebx, 0xfffffeff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c791
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
test bl, bl
jns 0x40c7ad
lea eax, [ebp - 0xb8]
and ebx, 0xffffff7f
push eax
mov dword [ebp - 0x74], ebx
call esi
mov dword [ebp - 4], 0xffffffff
test bl, 0x40
je 0x40c7c8
lea eax, [ebp - 0xa0]
and ebx, 0xffffffbf
push eax
mov dword [ebp - 0x74], ebx
call esi
mov ecx, dword [ebp - 0xa4]
push 1
push 1
push edi
call fcn.004a7965
push 0xe8
call fcn.0040f260
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], 0x1a
test esi, esi
je 0x40c86b
push 0xe8
push 0
push esi
call fcn.00573a70
add esp, 0xc
call fcn.004456c6
mov ecx, eax
test ecx, ecx
je 0x40dc92
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x7c], eax
mov eax, 0x5de508
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x7c]
test eax, 0xffff0000
jne 0x40c83d
movzx eax, ax
push eax
call fcn.00406190
jmp 0x40c847
push 0x5de508
call fcn.0040bae0
push 1
push 0
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0x1c
or ebx, 0x200
mov ecx, esi
push eax
mov dword [ebp - 0x74], ebx
call fcn.004a7329
mov dword [ebp - 0x84], eax
jmp 0x40c875
mov dword [ebp - 0x84], 0
mov dword [ebp - 4], 0xffffffff
test ebx, 0x200
je 0x40c8a8
mov edx, dword [ebp - 0x7c]
and ebx, 0xfffffdff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c8a8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0xe8
call fcn.0040f260
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], 0x1e
mov edi, 3
test esi, esi
je 0x40c99a
push 0xe8
push 0
push esi
call fcn.00573a70
add esp, 0xc
mov word [ebp - 0xa0], di
mov dword [ebp - 0x98], 0xfa
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x1f
or ebx, 0x400
lea ecx, [ebp - 0xb8]
push eax
mov dword [ebp - 0x74], ebx
mov edi, ebx
call fcn.004af93c
mov dword [ebp - 4], 0x20
or ebx, 0x800
mov dword [ebp - 0x74], ebx
call fcn.004456c6
mov ecx, eax
test ecx, ecx
je 0x40dc9c
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x78], eax
mov eax, 0x5de524
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x78]
test eax, 0xffff0000
jne 0x40c95b
movzx eax, ax
push eax
call fcn.00406190
jmp 0x40c965
push 0x5de524
call fcn.0040bae0
push 0
push 0
push 0
push 0
push 0x5de514
lea eax, [ebp - 0xb8]
mov dword [ebp - 4], 0x22
push eax
mov ebx, edi
lea eax, [ebp - 0x78]
or ebx, 0x1800
mov ecx, esi
push eax
mov dword [ebp - 0x74], ebx
call fcn.004a7207
mov esi, eax
jmp 0x40c99c
xor esi, esi
mov dword [ebp - 4], 0x24
test ebx, 0x1000
je 0x40c9cf
mov edx, dword [ebp - 0x78]
and ebx, 0xffffefff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40c9cf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
test ebx, 0x800
je 0x40c9ef
lea eax, [ebp - 0xb8]
and ebx, 0xfffff7ff
push eax
mov dword [ebp - 0x74], ebx
call edi
mov dword [ebp - 4], 0xffffffff
test ebx, 0x400
je 0x40ca10
lea eax, [ebp - 0xa0]
and ebx, 0xfffffbff
push eax
mov dword [ebp - 0x74], ebx
call edi
push 0x12c
push 0x32
push 1
mov ecx, esi
call fcn.004a861c
mov edi, dword [ebp - 0x84]
mov ecx, edi
push esi
call fcn.004a79e9
push 0xe8
call fcn.0040f260
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], 0x26
test esi, esi
je 0x40cb26
push 0xe8
push 0
push esi
call fcn.00573a70
mov eax, 3
mov dword [ebp - 0x98], 0x96
add esp, 0xc
mov word [ebp - 0xa0], ax
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x27
or ebx, 0x2000
lea ecx, [ebp - 0xb8]
push eax
mov dword [ebp - 0x74], ebx
mov edi, ebx
call fcn.004af93c
mov dword [ebp - 4], 0x28
or ebx, 0x4000
mov dword [ebp - 0x74], ebx
call fcn.004456c6
mov ecx, eax
test ecx, ecx
je 0x40dca6
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x78], eax
mov eax, 0x5de53c
mov dword [ebp - 4], 0x29
lea ecx, [ebp - 0x78]
test eax, 0xffff0000
jne 0x40cae1
movzx eax, ax
push eax
call fcn.00406190
jmp 0x40caeb
push 0x5de53c
call fcn.0040bae0
push 0
push 0
push 0
push 0
push 0x5de52c
lea eax, [ebp - 0xb8]
mov dword [ebp - 4], 0x2a
push eax
mov ebx, edi
lea eax, [ebp - 0x78]
or ebx, 0xc000
mov ecx, esi
push eax
mov dword [ebp - 0x74], ebx
call fcn.004a7207
mov edi, dword [ebp - 0x84]
mov esi, eax
jmp 0x40cb28
xor esi, esi
mov dword [ebp - 4], 0x2c
test ebx, 0x8000
je 0x40cb5b
mov edx, dword [ebp - 0x78]
and ebx, 0xffff7fff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40cb5b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test ebx, 0x4000
je 0x40cb7a
lea eax, [ebp - 0xb8]
and ebx, 0xffffbfff
push eax
mov eax, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov dword [ebp - 0x74], ebx
call eax
mov dword [ebp - 4], 0xffffffff
test ebx, 0x2000
je 0x40cb9f
lea eax, [ebp - 0xa0]
and ebx, 0xffffdfff
push eax
mov dword [ebp - 0x74], ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0xc8
push 0x32
push 1
mov ecx, esi
call fcn.004a861c
push esi
mov ecx, edi
call fcn.004a79e9
mov ecx, dword [ebp - 0xa4]
push 1
push 1
push edi
call fcn.004a7965
push 0xe8
call fcn.0040f260
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], 0x2e
mov edi, 0x5de544
test esi, esi
je 0x40cc57
push 0xe8
push 0
push esi
call fcn.00573a70
add esp, 0xc
call fcn.004456c6
mov ecx, eax
test ecx, ecx
je 0x40dcb0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x7c], eax
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x7c]
test edi, 0xffff0000
jne 0x40cc2d
movzx eax, di
push eax
call fcn.00406190
jmp 0x40cc37
push 0x5de544
call fcn.0040bae0
push 0
push 0
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0x30
or ebx, 0x10000
mov ecx, esi
push eax
mov dword [ebp - 0x74], ebx
call fcn.004a7329
mov edi, eax
jmp 0x40cc59
xor edi, edi
mov dword [ebp - 4], 0xffffffff
test ebx, 0x10000
je 0x40cc8c
mov edx, dword [ebp - 0x7c]
and ebx, 0xfffeffff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40cc8c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x11
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
call fcn.00443b20
lea ecx, [ebp - 0x70]
push ecx
push 0x5c
push dword [eax + 4]
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0x5de54c
lea eax, [ebp - 0x54]
push 0x20
push eax
call fcn.005785ec
push 0x1a8
call fcn.0040f260
mov esi, eax
add esp, 0x10
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], 0x32
test esi, esi
je 0x40cd54
push 0x1a8
push 0
push esi
call fcn.00573a70
add esp, 0xc
call fcn.004456c6
mov ecx, eax
test ecx, ecx
je 0x40dcba
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x78], eax
mov eax, 0x5de544
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x78]
test eax, 0xffff0000
jne 0x40cd1e
movzx eax, ax
push eax
call fcn.00406190
jmp 0x40cd28
push 0x5de544
call fcn.0040bae0
push 0xffffffffffffffff
push 0
push 0x5de560
push 0x101
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x34
push eax
lea eax, [ebp - 0x78]
or ebx, 0x20000
push eax
mov ecx, esi
mov dword [ebp - 0x74], ebx
call fcn.004a7172
jmp 0x40cd56
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0x35
call fcn.004a79e9
mov dword [ebp - 4], 0xffffffff
test ebx, 0x20000
je 0x40cd98
mov edx, dword [ebp - 0x78]
and ebx, 0xfffdffff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40cd98
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0xe8
call fcn.0040f260
mov esi, eax
add esp, 4
mov dword [ebp - 0x84], esi
mov dword [ebp - 4], 0x36
test esi, esi
je 0x40ce8d
push 0xe8
push 0
push esi
call fcn.00573a70
mov eax, 0xb
add esp, 0xc
mov word [ebp - 0xa0], ax
or eax, 0xffffffff
mov word [ebp - 0x98], ax
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x37
or ebx, 0x40000
lea ecx, [ebp - 0xb8]
push eax
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x80], ebx
call fcn.004af93c
mov dword [ebp - 4], 0x38
or ebx, 0x80000
mov dword [ebp - 0x74], ebx
call fcn.004456c6
mov ecx, eax
test ecx, ecx
je 0x40dcc4
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x78], eax
mov eax, 0x5de5a4
mov dword [ebp - 4], 0x39
lea ecx, [ebp - 0x78]
test eax, 0xffff0000
jne 0x40ce4f
movzx eax, ax
push eax
call fcn.00406190
jmp 0x40ce59
push 0x5de5a4
call fcn.0040bae0
push 0
push 0
push 0
push 0
push 0x5de574
mov dword [ebp - 4], 0x3a
lea eax, [ebp - 0xb8]
mov ebx, dword [ebp - 0x80]
mov ecx, esi
push eax
lea eax, [ebp - 0x78]
or ebx, 0x180000
push eax
mov dword [ebp - 0x74], ebx
call fcn.004a7207
jmp 0x40ce8f
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0x3d
call fcn.004a79e9
mov dword [ebp - 4], 0x3c
test ebx, 0x100000
je 0x40ced1
mov edx, dword [ebp - 0x78]
and ebx, 0xffefffff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40ced1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
test ebx, 0x80000
je 0x40cef1
lea eax, [ebp - 0xb8]
and ebx, 0xfff7ffff
push eax
mov dword [ebp - 0x74], ebx
call esi
mov dword [ebp - 4], 0xffffffff
test ebx, 0x40000
je 0x40cf12
lea eax, [ebp - 0xa0]
and ebx, 0xfffbffff
push eax
mov dword [ebp - 0x74], ebx
call esi
mov ecx, dword [ebp - 0xa4]
push 1
push 1
push edi
call fcn.004a7965
push 0xe8
call fcn.0040f260
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], 0x3e
test esi, esi
je 0x40cfb1
push 0xe8
push 0
push esi
call fcn.00573a70
add esp, 0xc
call fcn.004456c6
mov ecx, eax
test ecx, ecx
je 0x40dcce
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x7c], eax
mov eax, 0x5de5b4
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x7c]
test eax, 0xffff0000
jne 0x40cf87
movzx eax, ax
push eax
call fcn.00406190
jmp 0x40cf91
push 0x5de5b4
call fcn.0040bae0
push 0
push 0
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0x40
or ebx, 0x200000
mov ecx, esi
push eax
mov dword [ebp - 0x74], ebx
call fcn.004a7329
mov edi, eax
jmp 0x40cfb3
xor edi, edi
mov dword [ebp - 4], 0xffffffff
test ebx, 0x200000
je 0x40cfe6
mov edx, dword [ebp - 0x7c]
and ebx, 0xffdfffff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40cfe6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0xe8
call fcn.0040f260
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], 0x42
test esi, esi
je 0x40d0b2
push 0xe8
push 0
push esi
call fcn.00573a70
add esp, 0xc
lea ecx, [ebp - 0xa0]
xor eax, eax
mov word [ebp - 0xa0], ax
push 0x5de3f8
call fcn.004afb93
mov byte [ebp - 4], 0x43
or ebx, 0x400000
mov dword [ebp - 0x74], ebx
call fcn.004456c6
mov ecx, eax
test ecx, ecx
je 0x40dcd8
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x78], eax
mov eax, 0x5de5bc
mov dword [ebp - 4], 0x44
lea ecx, [ebp - 0x78]
test eax, 0xffff0000
jne 0x40d078
movzx eax, ax
push eax
call fcn.00406190
jmp 0x40d082
push 0x5de5bc
call fcn.0040bae0
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0xa0]
mov dword [ebp - 4], 0x45
push eax
lea eax, [ebp - 0x78]
or ebx, 0x800000
push eax
mov ecx, esi
mov dword [ebp - 0x74], ebx
call fcn.004a7207
mov esi, eax
jmp 0x40d0b4
xor esi, esi
mov dword [ebp - 4], 0x46
test ebx, 0x800000
je 0x40d0e7
mov edx, dword [ebp - 0x78]
and ebx, 0xff7fffff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d0e7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
test ebx, 0x400000
je 0x40d10c
lea eax, [ebp - 0xa0]
and ebx, 0xffbfffff
push eax
mov dword [ebp - 0x74], ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push 0
mov ecx, esi
call fcn.004a8458
push esi
mov ecx, edi
call fcn.004a79e9
push 0x120
call fcn.0040f260
mov esi, eax
add esp, 4
mov dword [ebp - 0x84], esi
mov dword [ebp - 4], 0x48
test esi, esi
je 0x40d1c3
push 0x120
push 0
push esi
call fcn.00573a70
add esp, 0xc
mov dword [ebp - 0x80], 0xfec0d2
call fcn.004456c6
mov ecx, eax
test ecx, ecx
je 0x40dce2
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x78], eax
mov eax, 0x5de5dc
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x78]
test eax, 0xffff0000
jne 0x40d190
movzx eax, ax
push eax
call fcn.00406190
jmp 0x40d19a
push 0x5de5dc
call fcn.0040bae0
push 0
push 0x5de5c8
push 0
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x4a
push eax
lea eax, [ebp - 0x78]
or ebx, 0x1000000
push eax
mov ecx, esi
mov dword [ebp - 0x74], ebx
call fcn.004a6ce6
mov esi, eax
jmp 0x40d1c5
xor esi, esi
mov dword [ebp - 4], 0xffffffff
test ebx, 0x1000000
je 0x40d1f8
mov edx, dword [ebp - 0x78]
and ebx, 0xfeffffff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d1f8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 1
push 1
push 0x5de5e8
mov ecx, esi
call fcn.004a85e9
push 1
push 0xf
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
push 0x5de5f4
mov ecx, esi
call fcn.004a8488
push esi
mov ecx, edi
call fcn.004a79e9
push 0x100
call fcn.0040f260
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], 0x4c
test esi, esi
je 0x40d32b
push 0x100
push 0
push esi
call fcn.00573a70
add esp, 0xc
call fcn.004456c6
mov ecx, eax
test ecx, ecx
je 0x40dcec
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x8c], eax
mov eax, 0x5de68c
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x8c]
test eax, 0xffff0000
jne 0x40d296
movzx eax, ax
push eax
call fcn.00406190
jmp 0x40d2a0
push 0x5de68c
call fcn.0040bae0
mov byte [ebp - 4], 0x4e
or ebx, 0x2000000
mov dword [ebp - 0x74], ebx
call fcn.004456c6
mov ecx, eax
test ecx, ecx
je 0x40dcf6
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x78], eax
mov eax, 0x5de614
mov dword [ebp - 4], 0x4f
lea ecx, [ebp - 0x78]
test eax, 0xffff0000
jne 0x40d2e8
movzx eax, ax
push eax
call fcn.00406190
jmp 0x40d2f2
push 0x5de614
call fcn.0040bae0
push 0
push 0x5de5fc
push 0x5de690
push 0
push 0x5de60c
lea eax, [ebp - 0x8c]
mov dword [ebp - 4], 0x50
push eax
push 1
lea eax, [ebp - 0x78]
or ebx, 0x4000000
push eax
mov ecx, esi
mov dword [ebp - 0x74], ebx
call fcn.004a709d
jmp 0x40d32d
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0x52
call fcn.004a79e9
mov dword [ebp - 4], 0x51
test ebx, 0x4000000
je 0x40d36f
mov edx, dword [ebp - 0x78]
and ebx, 0xfbffffff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d36f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
test ebx, 0x2000000
je 0x40d3a5
mov edx, dword [ebp - 0x8c]
and ebx, 0xfdffffff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d3a5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x100
call fcn.0040f260
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], 0x53
test esi, esi
je 0x40d498
push 0x100
push 0
push esi
call fcn.00573a70
add esp, 0xc
call fcn.004456c6
mov ecx, eax
test ecx, ecx
je 0x40dd00
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x78], eax
mov eax, 0x5de61c
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x78]
test eax, 0xffff0000
jne 0x40d40e
movzx eax, ax
push eax
call fcn.00406190
jmp 0x40d418
push 0x5de61c
call fcn.0040bae0
mov byte [ebp - 4], 0x55
or ebx, 0x8000000
mov dword [ebp - 0x74], ebx
call fcn.004456c6
mov ecx, eax
test ecx, ecx
je 0x40dd0a
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x8c], eax
mov eax, 0x5de624
mov dword [ebp - 4], 0x56
lea ecx, [ebp - 0x8c]
test eax, 0xffff0000
jne 0x40d466
movzx eax, ax
push eax
call fcn.00406190
jmp 0x40d470
push 0x5de624
call fcn.0040bae0
push 0
push 0
lea eax, [ebp - 0x78]
mov dword [ebp - 4], 0x57
push eax
lea eax, [ebp - 0x8c]
or ebx, 0x10000000
push eax
mov ecx, esi
mov dword [ebp - 0x74], ebx
call fcn.004a700c
jmp 0x40d49a
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0x59
call fcn.004a79e9
mov dword [ebp - 4], 0x58
test ebx, 0x10000000
je 0x40d4df
mov edx, dword [ebp - 0x8c]
and ebx, 0xefffffff
mov dword [ebp - 0x74], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d4df
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
test ebx, 0x8000000
je 0x40d50f
mov edx, dword [ebp - 0x78]
and ebx, 0xf7ffffff
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d50f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xa4]
push 1
push 1
push edi
call fcn.004a7965
push 0xe8
call fcn.0040f260
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 4], 0x5a
test esi, esi
je 0x40d5b8
push 0xe8
push 0
push esi
call fcn.00573a70
add esp, 0xc
call fcn.004456c6
mov ecx, eax
test ecx, ecx
je 0x40dd14
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x8c], eax
mov eax, str.B_k
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x8c]
test eax, 0xffff0000
jne 0x40d58a
movzx eax, ax
push eax
call fcn.00406190
jmp 0x40d594
push str.B_k
call fcn.0040bae0
push 0
push 0
lea eax, [ebp - 0x8c]
mov byte [ebp - 4], 0x5c
or ebx, 0x20000000
mov ecx, esi
push eax
mov dword [ebp - 0x74], ebx
call fcn.004a7329
mov dword [ebp - 0x80], eax
jmp 0x40d5bf
mov dword [ebp - 0x80], 0
mov dword [ebp - 4], 0xffffffff
test ebx, 0x20000000
je 0x40d5f2
mov edx, dword [ebp - 0x8c]
and ebx, 0xdfffffff
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d5f2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0xe8
call fcn.0040f260
mov esi, eax
add esp, 4
mov dword [ebp - 0x84], esi
mov dword [ebp - 4], 0x5e
test esi, esi
je 0x40d684
push 0xe8
push 0
push esi
call fcn.00573a70
add esp, 0xc
call fcn.004456c6
mov ecx, eax
test ecx, ecx
je 0x40dd1e
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x7c], eax
mov eax, 0x5de638
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x7c]
test eax, 0xffff0000
jne 0x40d65a
movzx eax, ax
push eax
call fcn.00406190
jmp 0x40d664
push 0x5de638
call fcn.0040bae0
push 0
push 0
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0x60
or ebx, 0x40000000
mov ecx, esi
push eax
mov dword [ebp - 0x74], ebx
call fcn.004a7329
mov edi, eax
jmp 0x40d686
xor edi, edi
mov dword [ebp - 4], 0xffffffff
test ebx, 0x40000000
je 0x40d6b6
mov edx, dword [ebp - 0x7c]
and ebx, 0xbfffffff
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d6b6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x80]
push edi
call fcn.004a79e9
push 0xe8
call fcn.0040f260
mov esi, eax
add esp, 4
mov dword [ebp - 0x84], esi
mov dword [ebp - 4], 0x62
test esi, esi
je 0x40d757
push 0xe8
push 0
push esi
call fcn.00573a70
add esp, 0xc
call fcn.004456c6
mov ecx, eax
test ecx, ecx
je 0x40dd28
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x78], eax
mov eax, 0x5de644
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0x78]
test eax, 0xffff0000
jne 0x40d727
movzx eax, ax
push eax
call fcn.00406190
jmp 0x40d731
push 0x5de644
call fcn.0040bae0
push 0
push 0
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x64
or ebx, 0x80000000
mov ecx, esi
push eax
mov dword [ebp - 0x74], ebx
call fcn.004a7329
mov esi, eax
mov dword [ebp - 0x84], eax
jmp 0x40d75f
xor esi, esi
mov dword [ebp - 0x84], esi
mov dword [ebp - 4], 0xffffffff
test ebx, ebx
jns 0x40d785
mov edx, dword [ebp - 0x78]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d785
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push esi
mov ecx, edi
call fcn.004a79e9
push 0xe8
call fcn.0040f260
mov esi, eax
add esp, 4
mov dword [ebp - 0x74], esi
mov dword [ebp - 4], 0x66
test esi, esi
je 0x40d88c
push 0xe8
push 0
push esi
call fcn.00573a70
add esp, 0xc
mov eax, 8
mov word [ebp - 0xa0], ax
push 0x5de65c
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x98], eax
test eax, eax
je 0x40dd32
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x67
push eax
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0x88], 1
call fcn.004af93c
mov dword [ebp - 4], 0x68
mov dword [ebp - 0x88], 3
call fcn.004456c6
mov ecx, eax
test ecx, ecx
je 0x40dd3c
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x7c], eax
mov eax, 0x5de664
mov dword [ebp - 4], 0x69
lea ecx, [ebp - 0x7c]
test eax, 0xffff0000
jne 0x40d84f
movzx eax, ax
push eax
call fcn.00406190
jmp 0x40d859
push 0x5de664
call fcn.0040bae0
push 0
push 0
push 0
push 0
push str.dk:N
lea eax, [ebp - 0xb8]
mov dword [ebp - 4], 0x6a
push eax
lea eax, [ebp - 0x7c]
mov ebx, 7
push eax
mov ecx, esi
mov dword [ebp - 0x88], ebx
call fcn.004a7207
jmp 0x40d894
mov ebx, dword [ebp - 0xa8]
xor eax, eax
mov dword [ebp - 4], 0x6d
mov edi, dword [ebp - 0x84]
mov ecx, edi
push eax
call fcn.004a79e9
mov dword [ebp - 4], 0x6c
test bl, 4
je 0x40d8d9
mov edx, dword [ebp - 0x7c]
and ebx, 0xfffffffb
mov dword [ebp - 0x88], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40d8d9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
test bl, 2
je 0x40d8f6
lea eax, [ebp - 0xb8]
and ebx, 0xfffffffd
push eax
mov dword [ebp - 0x88], ebx
call esi
mov dword [ebp - 4], 0xffffffff
test bl, 1
je 0x40d914
lea eax, [ebp - 0xa0]
and ebx, 0xfffffffe
push eax
mov dword [ebp - 0x88], ebx
call esi
push 0xe8
call fcn.0040f260
mov esi, eax
add esp, 4
mov dword [ebp - 0x84], esi
mov dword [ebp - 4], 0x6e
test esi, esi
je 0x40da1e
push 0xe8
push 0
push esi
call fcn.00573a70
add esp, 0xc
mov eax, 8
mov word [ebp - 0xa0], ax
push 0x5de66c
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x98], eax
test eax, eax
je 0x40dd46
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x6f
or ebx, 8
lea ecx, [ebp - 0xb8]
push eax
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0xa8], ebx
call fcn.004af93c
mov dword [ebp - 4], 0x70
or ebx, 0x10
mov dword [ebp - 0x88], ebx
call fcn.004456c6
mov ecx, eax
test ecx, ecx
je 0x40dd50
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x7c], eax
mov eax, 0x5de674
mov dword [ebp - 4], 0x71
lea ecx, [ebp - 0x7c]
test eax, 0xffff0000
jne 0x40d9dd
movzx eax, ax
push eax
call fcn.00406190
jmp 0x40d9e7
push 0x5de674
call fcn.0040bae0
push 0
push 0
push 0
push 0
push str.dk:N
mov dword [ebp - 4], 0x72
lea eax, [ebp - 0xb8]
mov ebx, dword [ebp - 0xa8]
mov ecx, esi
push eax
lea eax, [ebp - 0x7c]
or ebx, 0x30
push eax
mov dword [ebp - 0x88], ebx
call fcn.004a7207
jmp 0x40da20
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0x75
call fcn.004a79e9
mov dword [ebp - 4], 0x74
test bl, 0x20
je 0x40da5f
mov edx, dword [ebp - 0x7c]
and ebx, 0xffffffdf
mov dword [ebp - 0x88], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40da5f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
test bl, 0x10
je 0x40da7c
lea eax, [ebp - 0xb8]
and ebx, 0xffffffef
push eax
mov dword [ebp - 0x88], ebx
call esi
mov dword [ebp - 4], 0xffffffff
test bl, 8
je 0x40da9a
lea eax, [ebp - 0xa0]
and ebx, 0xfffffff7
push eax
mov dword [ebp - 0x88], ebx
call esi
push 0xe8
call fcn.0040f260
mov esi, eax
add esp, 4
mov dword [ebp - 0x7c], esi
mov dword [ebp - 4], 0x76
test esi, esi
je 0x40dbb0
push 0xe8
push 0
push esi
call fcn.00573a70
add esp, 0xc
mov eax, 8
mov word [ebp - 0xc8], ax
push 0x5de67c
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0xc0], eax
test eax, eax
je 0x40dd5a
lea eax, [ebp - 0xc8]
mov byte [ebp - 4], 0x77
or ebx, 0x40
lea ecx, [ebp - 0xd8]
push eax
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0xa8], ebx
call fcn.004af93c
mov dword [ebp - 4], 0x78
or ebx, 0x80
mov dword [ebp - 0x88], ebx
call fcn.004456c6
mov ecx, eax
test ecx, ecx
je 0x40dd64
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x84], eax
mov eax, 0x5de684
mov dword [ebp - 4], 0x79
lea ecx, [ebp - 0x84]
test eax, 0xffff0000
jne 0x40db69
movzx eax, ax
push eax
call fcn.00406190
jmp 0x40db73
push 0x5de684
call fcn.0040bae0
push 0
push 0
push 0
push 0
push str.dk:N
mov dword [ebp - 4], 0x7a
lea eax, [ebp - 0xd8]
mov ebx, dword [ebp - 0xa8]
mov ecx, esi
push eax
lea eax, [ebp - 0x84]
or ebx, 0x180
push eax
mov dword [ebp - 0x88], ebx
call fcn.004a7207
jmp 0x40dbb2
xor eax, eax
push eax
mov ecx, edi
mov dword [ebp - 4], 0x7d
call fcn.004a79e9
mov dword [ebp - 4], 0x7c
test ebx, 0x100
je 0x40dbfa
mov edx, dword [ebp - 0x84]
and ebx, 0xfffffeff
mov dword [ebp - 0x88], ebx
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40dbfa
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
test bl, bl
jns 0x40dc13
lea eax, [ebp - 0xd8]
and ebx, 0xffffff7f
push eax
call esi
mov dword [ebp - 4], 0xffffffff
test bl, 0x40
je 0x40dc28
lea eax, [ebp - 0xc8]
push eax
call esi
mov ebx, dword [ebp - 0x80]
mov ecx, ebx
push 0
call fcn.004a8849
mov ecx, dword [ebp - 0xa4]
push 1
push 1
push ebx
call fcn.004a7965
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00571487
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.004042e0
push 0x80004005
call fcn.004042e0
push 0x80004005
call fcn.004042e0
push 0x8007000e
call fcn.00572720
push 0x80004005
call fcn.004042e0
push 0x80004005
call fcn.004042e0
push 0x80004005
call fcn.004042e0
push 0x80004005
call fcn.004042e0
push 0x80004005
call fcn.004042e0
push 0x80004005
call fcn.004042e0
push 0x80004005
call fcn.004042e0
push 0x80004005
call fcn.004042e0
push 0x80004005
call fcn.004042e0
push 0x80004005
call fcn.004042e0
push 0x80004005
call fcn.004042e0
push 0x80004005
call fcn.004042e0
push 0x80004005
call fcn.004042e0
push 0x80004005
call fcn.004042e0
push 0x80004005
call fcn.004042e0
push 0x80004005
call fcn.004042e0
push 0x80004005
call fcn.004042e0
push 0x8007000e
call fcn.00572720
push 0x80004005
call fcn.004042e0
push 0x8007000e
call fcn.00572720
push 0x80004005
call fcn.004042e0
push 0x8007000e
call fcn.00572720
push 0x80004005
call fcn.004042e0
int3