Function at 0x496a50
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4f3ac8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x314
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x10], esp
xor eax, eax
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x54], eax
cmp byte [edi + 0x200], al
jne 0x49a2b1
cmp dword [edi + 0x10c], eax
je 0x49a2b1
cmp dword [edi + 0x110], eax
lea esi, [edi + 0x110]
je 0x49a2b1
lea eax, [edi + 0x20]
push eax
lea ecx, [ebp - 0x7c]
call dword [sym.imp.mfc140.dll_Ordinal_300]
mov dword [ebp - 4], 0
mov ecx, edi
mov byte [edi + 0x200], 1
call dword [sym.imp.mfc140.dll_Ordinal_2560]
mov ecx, dword [esi]
push 0
push str.FRONTPAGE_
add ecx, 4
call dword [sym.imp.mfc140.dll_Ordinal_4656]
cmp eax, 0xffffffff
je 0x496af7
lea eax, [edi + 0x110]
mov byte [edi + 0x114], 0
mov dword [ebp - 0x3c], eax
jmp 0x496afa
mov dword [ebp - 0x3c], esi
mov ecx, 0x53d1b0
call dword [sym.imp.mfc140.dll_Ordinal_5894]
mov ecx, dword [edi + 0x10c]
push eax
mov eax, dword [esi]
push 0x4070c0
movzx eax, word [eax + 0xc]
push eax
call fcn.004bc4d0
cmp dword [edi + 0x1d8], 0
je 0x497000
call dword [sym.imp.mfc140.dll_Ordinal_2251]
mov ecx, eax
test ecx, ecx
je 0x496b41
mov eax, dword [ecx]
mov eax, dword [eax + 0x7c]
call eax
mov esi, eax
jmp 0x496b43
xor esi, esi
cmp byte [esi + 0x7fb8], 0
jne 0x496b66
push edi
lea ecx, [esi + 0x6818]
mov byte [esi + 0x7fb8], 1
call fcn.00484240
mov byte [esi + 0x7fb8], 0
mov eax, dword [edi + 0x10c]
mov ecx, dword [eax + 0x2ad74]
test ecx, ecx
je 0x49a28f
mov edx, dword [ecx + 8]
mov ecx, dword [ecx]
mov dword [ebp - 0x20], edx
test edx, edx
je 0x49a28f
mov eax, dword [edx + 0x30]
mov eax, dword [eax]
cmp eax, dword [edi + 0x1dc]
jne 0x496b72
mov ecx, dword [edx]
or esi, 0xffffffff
nop dword [eax]
test ecx, ecx
je 0x49a28f
mov eax, dword [ecx + 8]
mov ecx, dword [ecx]
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x49a28f
mov ecx, dword [eax + 0x88]
sub ecx, 0x10
call fcn.00401750
or dword [ebp - 0x54], 2
add eax, 0x10
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 1
mov ecx, dword [edi + 0x1e4]
test ecx, ecx
je 0x49a2ea
push ecx
push eax
call dword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
mov byte [ebp - 4], 0
add esp, 8
mov edx, dword [ebp - 0x14]
mov ecx, esi
mov dword [ebp - 0x4c], eax
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x496c14
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x5c]
test eax, eax
jne 0x496ba0
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ecx + 0x10]
test ecx, ecx
je 0x49a28f
mov eax, dword [ecx + 8]
mov ecx, dword [ecx]
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x3c], eax
test eax, eax
je 0x49a28f
mov eax, dword [eax + 0x5a54]
mov ecx, dword [eax + 0x2ad54]
sub ecx, 0x10
call fcn.00401750
or dword [ebp - 0x54], 4
add eax, 0x10
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 2
mov ecx, dword [edi + 0x1e8]
test ecx, ecx
je 0x49a2ea
push ecx
push eax
call dword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
mov byte [ebp - 4], 0
add esp, 8
mov edx, dword [ebp - 0x14]
mov ecx, esi
mov dword [ebp - 0x4c], eax
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x496c9b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x5c]
test eax, eax
jne 0x496c21
mov edx, dword [ebp - 0x3c]
mov ecx, dword [edx]
nop dword [eax + eax]
test ecx, ecx
je 0x49a28f
mov esi, dword [ecx + 8]
mov ecx, dword [ecx]
mov dword [ebp - 0x28], esi
test esi, esi
je 0x49a28f
mov eax, dword [esi]
cmp eax, dword [edi + 0x1e0]
jne 0x496cb0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 8]
cmp ecx, 0xd
jne 0x496ce6
mov dword [ebp - 0x5c], 3
jmp 0x496cfc
cmp ecx, 0x1a
mov dword [ebp - 0x14], 6
mov eax, 0xc
cmove eax, dword [ebp - 0x14]
mov dword [ebp - 0x5c], eax
mov ecx, dword [edx + 0x5a54]
lea eax, [ebp - 0x54]
push eax
call fcn.004c3640
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 3
push eax
mov ecx, esi
call fcn.004d9170
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x1c]
push eax
call fcn.004e0320
mov dword [ebp - 0x4c], eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x54]
cmp dword [ecx - 4], 1
jle 0x496d4b
push dword [ecx - 0xc]
lea ecx, [ebp - 0x54]
call fcn.00401ca0
mov ecx, dword [ebp - 0x54]
mov esi, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x14]
push ecx
mov ecx, 0x64
mov esi, dword [esi + 0x30]
push dword [eax]
push dword [ebp - 0x5c]
movzx eax, word [esi + 0x14]
div ecx
movzx eax, byte [esi + 0x16]
push edx
push eax
mov eax, dword [ebp - 0x4c]
push dword [eax]
lea eax, [ebp - 0x7c]
push str.TSA:__s___RAJAR_W_d:_02d___dm_____s____s
push eax
call dword [sym.imp.mfc140.dll_Ordinal_4807]
mov byte [ebp - 4], 4
or esi, 0xffffffff
mov edx, dword [ebp - 0x18]
add esp, 0x20
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x496da5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
mov eax, esi
mov edx, dword [ebp - 0x58]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x496dc3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov eax, esi
mov edx, dword [ebp - 0x54]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x496de1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x7c]
call dword [sym.imp.mfc140.dll_Ordinal_5315]
mov ecx, eax
call fcn.00401750
lea esi, [eax + 0x10]
mov dword [ebp - 0x14], esi
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 6
push eax
lea ecx, [edi + 0x1c8]
call fcn.00401680
mov byte [ebp - 4], 0
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x496e26
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [edi + 0x10c]
mov ecx, dword [eax + 8]
sub ecx, 0x10
call fcn.00401750
lea esi, [eax + 0x10]
mov dword [ebp - 0x14], esi
mov byte [ebp - 4], 7
lea eax, [ebp - 0x14]
push dword [edi + 0x1dc]
lea ecx, [edi + 0x118]
push eax
call fcn.0045d000
mov byte [ebp - 4], 0
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x496e72
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [edi + 0x10c]
lea edx, [edi + 0x1a8]
mov dword [ebp - 0x14], eax
mov eax, dword [edx]
test eax, eax
je 0x496e9d
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
lea edx, [edi + 0x1a8]
add esp, 4
mov dword [edx], 0
mov esi, dword [ebp - 0x28]
xor eax, eax
mov dword [edx + 4], 0
mov dword [edx + 8], 0
mov dword [ebp - 0x5c], eax
cmp dword [esi + 0x409c], eax
jbe 0x496ff4
xor ecx, ecx
mov dword [ebp - 0x20], ecx
nop dword [eax]
nop dword [eax + eax]
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
movups xmmword [ebp - 0x110], xmm0
movups xmmword [ebp - 0x100], xmm0
movups xmmword [ebp - 0xf0], xmm0
movups xmmword [ebp - 0xe0], xmm0
movups xmmword [ebp - 0xd0], xmm0
cmp eax, dword [esi + 0x409c]
jae 0x49a2cc
push dword [ebp - 0x14]
lea eax, [edi + 0x198]
push dword [ebp - 0x1c]
push eax
mov eax, dword [esi + 0x4098]
push esi
push dword [ebp - 0x3c]
add eax, ecx
lea ecx, [ebp - 0x118]
push eax
call fcn.00463370
mov eax, dword [edi + 0x1ac]
lea edx, [edi + 0x1a8]
mov dword [ebp - 0x4c], eax
cmp eax, dword [edx + 8]
jb 0x496f5f
inc eax
mov ecx, edx
push eax
call fcn.004643e0
test al, al
je 0x49a2c2
mov eax, dword [ebp - 0x4c]
lea edx, [edi + 0x1a8]
movups xmm0, xmmword [ebp - 0x110]
imul ecx, eax, 0x58
mov eax, dword [ebp - 0x118]
add ecx, dword [edx]
movsd qword [ecx + 8], xmm0
unpckhpd xmm0, xmm0
movsd qword [ecx + 0x10], xmm0
movups xmm0, xmmword [ebp - 0x100]
mov dword [ecx], eax
mov eax, dword [ebp - 0x5c]
movsd qword [ecx + 0x18], xmm0
inc eax
unpckhpd xmm0, xmm0
movsd qword [ecx + 0x20], xmm0
movups xmm0, xmmword [ebp - 0xf0]
mov dword [ebp - 0x5c], eax
movsd qword [ecx + 0x28], xmm0
unpckhpd xmm0, xmm0
movsd qword [ecx + 0x30], xmm0
movups xmm0, xmmword [ebp - 0xe0]
movsd qword [ecx + 0x38], xmm0
unpckhpd xmm0, xmm0
movsd qword [ecx + 0x40], xmm0
movups xmm0, xmmword [ebp - 0xd0]
movsd qword [ecx + 0x48], xmm0
unpckhpd xmm0, xmm0
movsd qword [ecx + 0x50], xmm0
mov ecx, dword [ebp - 0x20]
inc dword [edx + 4]
add ecx, 0x48
mov dword [ebp - 0x20], ecx
cmp eax, dword [esi + 0x409c]
jb 0x496ed0
mov byte [edi + 0x191], 1
jmp 0x49a28f
cmp dword [edi + 0x1d4], 0
je 0x49a28f
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 0
mov byte [ebp - 4], 0xd
mov ecx, edi
mov eax, dword [edi]
push str.Finished_calculations__generating_report___please_wait
call dword [eax + 0x5c]
mov esi, dword [sym.imp.USER32.dll_PeekMessageA]
lea eax, [ebp - 0x78]
push 1
push 0
push 0
push 0
push eax
call esi
test eax, eax
je 0x49707f
lea eax, [ebp - 0x78]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x78]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
push 1
push 0
push 0
push 0
lea eax, [ebp - 0x78]
push eax
call esi
test eax, eax
jne 0x497051
lea esi, [edi + 0x110]
jmp 0x497082
mov esi, dword [ebp - 0x3c]
mov ecx, dword [0x53d63c]
lea ecx, [ecx - 0x10]
call fcn.00401750
add eax, 0x10
mov dword [ebp - 0x54], eax
mov byte [ebp - 4], 0xe
mov eax, 0x4fd088
cmp byte [edi + 0x114], 0
mov edx, str.GRAPH_
cmove edx, eax
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4970b6
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x54]
call fcn.00406590
mov eax, dword [esi]
lea ecx, [ebp - 0x54]
mov eax, dword [eax + 4]
push dword [eax - 0xc]
push eax
call fcn.00406590
mov eax, dword [edi + 0x210]
lea esi, [edi + 0x210]
cmp dword [eax - 0xc], 0
jne 0x4971af
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x503048
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
mov ecx, esp
mov byte [ebp - 4], 0xf
push str.graph
call dword [sym.imp.mfc140.dll_Ordinal_310]
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0xe
push eax
call fcn.00491030
mov byte [ebp - 4], 0x10
mov edx, dword [eax]
mov ecx, dword [esi]
sub ecx, 0x10
mov dword [ebp - 0x3c], ecx
lea eax, [edx - 0x10]
mov dword [ebp - 0x14], eax
cmp eax, ecx
je 0x49719d
cmp dword [ecx + 0xc], 0
lea edi, [ecx + 0xc]
mov dword [ebp - 0x4c], edi
mov edi, dword [ebp - 0x58]
jl 0x497192
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x497192
mov ecx, dword [ebp - 0x14]
call fcn.00401750
or esi, 0xffffffff
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x4c]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x497177
mov eax, dword [ebp - 0x3c]
push eax
mov ecx, dword [eax]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x20]
add eax, 0x10
mov byte [ebp - 4], 0xe
mov dword [edi + 0x210], eax
call dword [sym.imp.mfc140.dll_Ordinal_1044]
jmp 0x4971b2
push dword [edx - 0xc]
mov ecx, esi
push edx
call fcn.00401820
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0xe
or esi, 0xffffffff
call dword [sym.imp.mfc140.dll_Ordinal_1044]
jmp 0x4971b2
or esi, 0xffffffff
mov eax, dword [edi + 0x214]
cmp dword [eax - 0xc], 0
jne 0x49727b
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x503048
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x11
push 0x50cc18
call dword [sym.imp.mfc140.dll_Ordinal_310]
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0xe
push eax
call fcn.00491030
mov byte [ebp - 4], 0x12
lea edx, [edi + 0x214]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
lea ecx, [eax - 0x10]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [edx]
sub ecx, 0x10
mov dword [ebp - 0x4c], ecx
cmp dword [ebp - 0x3c], ecx
je 0x49726e
cmp dword [ecx + 0xc], 0
lea edi, [ecx + 0xc]
mov dword [ebp - 0x14], edi
mov edi, dword [ebp - 0x58]
jl 0x497263
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x497260
mov ecx, dword [ebp - 0x3c]
call fcn.00401750
mov dword [ebp - 0x3c], eax
mov ecx, esi
mov eax, dword [ebp - 0x14]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x497252
mov eax, dword [ebp - 0x4c]
push eax
mov ecx, dword [eax]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x3c]
add eax, 0x10
mov dword [edi + 0x214], eax
jmp 0x49726e
mov eax, dword [ebp - 0x20]
push dword [eax - 0xc]
mov ecx, edx
push eax
call fcn.00401820
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xe
call dword [sym.imp.mfc140.dll_Ordinal_1044]
mov ecx, dword [edi + 0x10c]
lea eax, [ebp - 0x24]
push eax
call fcn.004be610
mov ecx, 1
mov byte [ebp - 4], 0x13
push ecx
mov dword [ebp - 0x28], ecx
lea ecx, [ebp - 0x5c]
push eax
call fcn.004baa70
test al, al
je 0x49766c
lea ecx, [ebp - 0x48]
call fcn.004bbda0
test al, al
je 0x49766c
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0x14], ecx
test ecx, ecx
je 0x49766c
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0xfc]
test eax, eax
jns 0x4972e3
push 0x50f9e8
push dword [ebp - 0x14]
push eax
call fcn.004e2c00
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0x14], ecx
test ecx, ecx
je 0x49a2e0
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x110]
test eax, eax
jns 0x49730e
push 0x50f9e8
push dword [ebp - 0x14]
push eax
call fcn.004e2c00
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0x14], ecx
test ecx, ecx
je 0x49a2e0
mov eax, dword [ecx]
push 0xffffffffffffffff
push ecx
call dword [eax + 0x118]
test eax, eax
jns 0x497339
push 0x50f9e8
push dword [ebp - 0x14]
push eax
call fcn.004e2c00
mov eax, 2
mov word [ebp - 0x38], ax
xor eax, eax
mov word [ebp - 0x30], ax
push str.ProhibitDTD
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0x14
call fcn.004808c0
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x14], edx
test edx, edx
je 0x49a2e0
mov byte [ebp - 4], 0x16
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x497380
mov eax, dword [eax]
mov dword [ebp - 0x3c], eax
jmp 0x497387
mov dword [ebp - 0x3c], 0
movups xmm0, xmmword [ebp - 0x38]
mov ecx, dword [edx]
sub esp, 0x10
mov eax, esp
push dword [ebp - 0x3c]
movups xmmword [eax], xmm0
push edx
call dword [ecx + 0x140]
test eax, eax
jns 0x4973b1
push 0x50f998
push dword [ebp - 0x14]
push eax
call fcn.004e2c00
lea ecx, [ebp - 0x20]
call fcn.00434ed0
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, 2
mov word [ebp - 0x88], si
mov word [ebp - 0x90], ax
push str.AllowDocumentFunction
lea ecx, [ebp - 0x1c]
mov dword [ebp - 4], 0x17
call fcn.004808c0
mov byte [ebp - 4], 0x18
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x14], edx
test edx, edx
je 0x49a2e0
mov byte [ebp - 4], 0x19
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x49740e
mov eax, dword [eax]
mov dword [ebp - 0x3c], eax
jmp 0x497415
mov dword [ebp - 0x3c], 0
movups xmm0, xmmword [ebp - 0x90]
mov ecx, dword [edx]
sub esp, 0x10
mov eax, esp
push dword [ebp - 0x3c]
movups xmmword [eax], xmm0
push edx
call dword [ecx + 0x140]
test eax, eax
jns 0x497442
push 0x50f998
push dword [ebp - 0x14]
push eax
call fcn.004e2c00
lea ecx, [ebp - 0x1c]
call fcn.00434ed0
lea eax, [ebp - 0x90]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, 2
mov word [ebp - 0x98], si
mov word [ebp - 0xa0], ax
push str.AllowXsltScript
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 0x1a
call fcn.004808c0
mov byte [ebp - 4], 0x1b
mov esi, dword [ebp - 0x48]
test esi, esi
je 0x49a2e0
mov byte [ebp - 4], 0x1c
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x49749c
mov edx, dword [eax]
jmp 0x49749e
xor edx, edx
movups xmm0, xmmword [ebp - 0xa0]
mov ecx, dword [esi]
sub esp, 0x10
mov eax, esp
push edx
push esi
movups xmmword [eax], xmm0
call dword [ecx + 0x140]
test eax, eax
jns 0x4974c7
push 0x50f998
push esi
push eax
call fcn.004e2c00
lea ecx, [ebp - 0x3c]
call fcn.00434ed0
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x13
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [ebp - 0x54]
test esi, esi
je 0x49753c
push 0
push 0
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0x4c], eax
lea ecx, [eax - 1]
push ecx
push 0
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x497531
push dword [ebp - 0x4c]
push eax
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp eax, dword [ebp - 0x4c]
je 0x497531
push dword [ebp - 0x18]
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call esi
jmp 0x497542
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [ebp - 0x18]
jmp 0x497547
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
xor eax, eax
mov dword [ebp - 0x18], eax
mov ecx, 8
push eax
mov word [ebp - 0x6c], cx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x64], eax
test eax, eax
jne 0x497567
cmp dword [ebp - 0x18], eax
jne 0x49a2d6
mov dword [ebp - 4], 0x1d
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x14], edx
test edx, edx
je 0x49a2e0
movups xmm0, xmmword [ebp - 0x6c]
mov ecx, dword [edx]
lea eax, [ebp - 0x4c]
push eax
sub esp, 0x10
mov dword [ebp - 0x4c], 0
mov eax, esp
push edx
movups xmmword [eax], xmm0
call dword [ecx + 0xe8]
test eax, eax
jns 0x4975ae
push 0x50f9e8
push dword [ebp - 0x14]
push eax
call fcn.004e2c00
cmp word [ebp - 0x4c], 0xffff
lea eax, [ebp - 0x6c]
push eax
sete byte [ebp - 0x4d]
mov byte [ebp - 4], 0x13
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp byte [ebp - 0x4d], 0
je 0x497667
mov esi, dword [ebp - 0x44]
test esi, esi
je 0x49a2e0
push dword [ebp - 0x48]
mov eax, dword [esi]
push esi
call dword [eax + 0x1c]
test eax, eax
jns 0x4975f3
push 0x50f988
push esi
push eax
call fcn.004e2c00
mov esi, dword [ebp - 0x44]
test esi, esi
je 0x49a2e0
mov eax, dword [esi]
lea ecx, [ebp - 0x14]
push ecx
push esi
mov dword [ebp - 0x14], 0
call dword [eax + 0x24]
test eax, eax
jns 0x49761f
push 0x50f988
push esi
push eax
call fcn.004e2c00
mov esi, dword [ebp - 0x14]
mov ecx, 9
mov dword [ebp - 0x28], ecx
mov dword [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x40]
cmp ecx, esi
je 0x497647
mov dword [ebp - 0x40], esi
xor esi, esi
test ecx, ecx
je 0x497647
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [ebp - 4], 0x20
test esi, esi
je 0x497658
mov eax, dword [esi]
push esi
call dword [eax + 8]
push dword [ebp - 0x18]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov byte [ebp - 0x4d], 1
jmp 0x497670
push dword [ebp - 0x18]
call esi
mov byte [ebp - 0x4d], 0
mov dword [ebp - 4], 0xe
or esi, 0xffffffff
mov eax, dword [ebp - 0x28]
test al, 1
je 0x4976a1
mov edx, dword [ebp - 0x24]
and eax, 0xfffffffe
mov dword [ebp - 0x28], eax
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4976a1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp byte [ebp - 0x4d], 0
je 0x49a243
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49a2ea
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x3c], eax
mov eax, 0x50cc60
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x3c]
test eax, 0xffff0000
jne 0x4976e5
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x4976f1
push 7
push 0x50cc60
call fcn.00401820
mov byte [ebp - 4], 0x22
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49a2ea
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1c], eax
mov eax, str.pAppName
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x1c]
test eax, 0xffff0000
jne 0x49772f
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x49773b
push 8
push str.pAppName
call fcn.00401820
mov byte [ebp - 4], 0x24
cmp dword [ebp - 0x40], 0
je 0x497879
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov esi, dword [ebp - 0x3c]
push 0
push 0
mov eax, dword [esi - 0xc]
push eax
push esi
push 0
push 3
mov dword [ebp - 0x14], eax
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push eax
push 0
mov dword [ebp - 0x24], eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x20], eax
test eax, eax
je 0x49a2fa
push dword [ebp - 0x24]
push eax
push dword [ebp - 0x14]
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov eax, dword [ebp - 0x20]
mov esi, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov eax, 8
mov word [ebp - 0x38], ax
test esi, esi
je 0x4977f1
push 0
push 0
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0x14], eax
lea ecx, [eax - 1]
push ecx
push 0
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x4977f8
push dword [ebp - 0x14]
push eax
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp eax, dword [ebp - 0x14]
je 0x4977f8
push dword [ebp - 0x18]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x18], 0
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
js 0x49a2f4
push ecx
mov byte [ebp - 4], 0x25
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x4fd088
call fcn.004808c0
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x26
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [ebp - 0x18]
call fcn.00480940
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp - 0x40]
test ecx, ecx
je 0x49a2e0
mov byte [ebp - 4], 0x25
call fcn.004bbf20
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [ebp - 0x18]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x49787c
mov esi, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x22
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x497898
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49a2ea
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1c], eax
mov eax, str.pSurveyID
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x1c]
test eax, 0xffff0000
jne 0x4978d2
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x4978de
push 9
push str.pSurveyID
call fcn.00401820
mov byte [ebp - 4], 0x29
cmp dword [ebp - 0x40], 0
mov esi, dword [edi + 0x1dc]
je 0x4979dc
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov dword [ebp - 0x30], esi
mov eax, 3
mov esi, dword [ebp - 0x1c]
mov word [ebp - 0x38], ax
test esi, esi
je 0x497954
push 0
push 0
push 0xffffffffffffffff
push esi
push 0
push eax
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0x14], eax
lea ecx, [eax - 1]
push ecx
push 0
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x49795b
push dword [ebp - 0x14]
push eax
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp eax, dword [ebp - 0x14]
je 0x49795b
push dword [ebp - 0x18]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x18], 0
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
js 0x49a2ff
push ecx
mov byte [ebp - 4], 0x2a
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x4fd088
call fcn.004808c0
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x2b
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [ebp - 0x18]
call fcn.00480940
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x40]
test ecx, ecx
je 0x49a2e0
mov byte [ebp - 4], 0x2a
call fcn.004bbf20
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [ebp - 0x18]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x4979df
mov esi, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x22
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4979fb
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49a2ea
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1c], eax
mov eax, str.pTSAID
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x1c]
test eax, 0xffff0000
jne 0x497a35
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x497a41
push 6
push str.pTSAID
call fcn.00401820
mov byte [ebp - 4], 0x2e
cmp dword [ebp - 0x40], 0
je 0x497b85
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [edi + 0x1e4]
mov esi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0
push 0
mov ecx, dword [eax - 0xc]
push ecx
push eax
push 0
push 3
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], ecx
call esi
push eax
push 0
mov dword [ebp - 0x24], eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x49a2fa
push dword [ebp - 0x24]
push eax
push dword [ebp - 0x14]
push dword [ebp - 0x20]
push 0
push 3
call esi
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov eax, 8
mov word [ebp - 0x38], ax
test esi, esi
je 0x497afd
push 0
push 0
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0x14], eax
lea ecx, [eax - 1]
push ecx
push 0
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x497b04
push dword [ebp - 0x14]
push eax
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp eax, dword [ebp - 0x14]
je 0x497b04
push dword [ebp - 0x18]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x18], 0
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
js 0x49a305
push ecx
mov byte [ebp - 4], 0x2f
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x4fd088
call fcn.004808c0
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x30
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [ebp - 0x18]
call fcn.00480940
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0x40]
test ecx, ecx
je 0x49a2e0
mov byte [ebp - 4], 0x2f
call fcn.004bbf20
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [ebp - 0x18]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x497b88
mov esi, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x22
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x497ba4
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49a2ea
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1c], eax
mov eax, str.pDemoID
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x1c]
test eax, 0xffff0000
jne 0x497bde
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x497bea
push 7
push str.pDemoID
call fcn.00401820
mov byte [ebp - 4], 0x33
cmp dword [ebp - 0x40], 0
je 0x497d2e
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [edi + 0x1e8]
mov esi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0
push 0
mov ecx, dword [eax - 0xc]
push ecx
push eax
push 0
push 3
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], ecx
call esi
push eax
push 0
mov dword [ebp - 0x24], eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x49a2fa
push dword [ebp - 0x24]
push eax
push dword [ebp - 0x14]
push dword [ebp - 0x20]
push 0
push 3
call esi
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov eax, 8
mov word [ebp - 0x38], ax
test esi, esi
je 0x497ca6
push 0
push 0
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0x14], eax
lea ecx, [eax - 1]
push ecx
push 0
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x497cad
push dword [ebp - 0x14]
push eax
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp eax, dword [ebp - 0x14]
je 0x497cad
push dword [ebp - 0x18]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x18], 0
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
js 0x49a30b
push ecx
mov byte [ebp - 4], 0x34
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x4fd088
call fcn.004808c0
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x35
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [ebp - 0x18]
call fcn.00480940
mov byte [ebp - 4], 0x36
mov ecx, dword [ebp - 0x40]
test ecx, ecx
je 0x49a2e0
mov byte [ebp - 4], 0x34
call fcn.004bbf20
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [ebp - 0x18]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x497d31
mov esi, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x22
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x497d4d
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49a2ea
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1c], eax
mov eax, str.pReportID
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x1c]
test eax, 0xffff0000
jne 0x497d87
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x497d93
push 9
push str.pReportID
call fcn.00401820
mov byte [ebp - 4], 0x38
cmp dword [ebp - 0x40], 0
mov esi, dword [edi + 0x1e0]
je 0x497e91
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov dword [ebp - 0x30], esi
mov eax, 3
mov esi, dword [ebp - 0x1c]
mov word [ebp - 0x38], ax
test esi, esi
je 0x497e09
push 0
push 0
push 0xffffffffffffffff
push esi
push 0
push eax
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0x14], eax
lea ecx, [eax - 1]
push ecx
push 0
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x497e10
push dword [ebp - 0x14]
push eax
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp eax, dword [ebp - 0x14]
je 0x497e10
push dword [ebp - 0x18]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x18], 0
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
js 0x49a311
push ecx
mov byte [ebp - 4], 0x39
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x4fd088
call fcn.004808c0
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x3a
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [ebp - 0x18]
call fcn.00480940
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x40]
test ecx, ecx
je 0x49a2e0
mov byte [ebp - 4], 0x39
call fcn.004bbf20
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [ebp - 0x18]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x497e94
mov esi, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x22
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x497eb0
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49a2ea
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1c], eax
mov eax, str.pProgID
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x1c]
test eax, 0xffff0000
jne 0x497eea
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x497ef6
push 7
push str.pProgID
call fcn.00401820
mov byte [ebp - 4], 0x3d
cmp dword [ebp - 0x40], 0
je 0x49803a
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [edi + 0x1ec]
mov esi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0
push 0
mov ecx, dword [eax - 0xc]
push ecx
push eax
push 0
push 3
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], ecx
call esi
push eax
push 0
mov dword [ebp - 0x24], eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x49a2fa
push dword [ebp - 0x24]
push eax
push dword [ebp - 0x14]
push dword [ebp - 0x20]
push 0
push 3
call esi
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov eax, 8
mov word [ebp - 0x38], ax
test esi, esi
je 0x497fb2
push 0
push 0
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0x14], eax
lea ecx, [eax - 1]
push ecx
push 0
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x497fb9
push dword [ebp - 0x14]
push eax
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp eax, dword [ebp - 0x14]
je 0x497fb9
push dword [ebp - 0x18]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x18], 0
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
js 0x49a317
push ecx
mov byte [ebp - 4], 0x3e
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x4fd088
call fcn.004808c0
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x3f
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [ebp - 0x18]
call fcn.00480940
mov byte [ebp - 4], 0x40
mov ecx, dword [ebp - 0x40]
test ecx, ecx
je 0x49a2e0
mov byte [ebp - 4], 0x3e
call fcn.004bbf20
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [ebp - 0x18]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x49803d
mov esi, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x22
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x498059
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49a2ea
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1c], eax
mov eax, str.pSpotID
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x1c]
test eax, 0xffff0000
jne 0x498093
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x49809f
push 7
push str.pSpotID
call fcn.00401820
mov byte [ebp - 4], 0x42
cmp dword [ebp - 0x40], 0
je 0x4981e3
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [edi + 0x1f0]
mov esi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0
push 0
mov ecx, dword [eax - 0xc]
push ecx
push eax
push 0
push 3
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], ecx
call esi
push eax
push 0
mov dword [ebp - 0x24], eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x49a2fa
push dword [ebp - 0x24]
push eax
push dword [ebp - 0x14]
push dword [ebp - 0x20]
push 0
push 3
call esi
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov eax, 8
mov word [ebp - 0x38], ax
test esi, esi
je 0x49815b
push 0
push 0
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0x14], eax
lea ecx, [eax - 1]
push ecx
push 0
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x498162
push dword [ebp - 0x14]
push eax
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp eax, dword [ebp - 0x14]
je 0x498162
push dword [ebp - 0x18]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x18], 0
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
js 0x49a31d
push ecx
mov byte [ebp - 4], 0x43
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x4fd088
call fcn.004808c0
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x44
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [ebp - 0x18]
call fcn.00480940
mov byte [ebp - 4], 0x45
mov ecx, dword [ebp - 0x40]
test ecx, ecx
je 0x49a2e0
mov byte [ebp - 4], 0x43
call fcn.004bbf20
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [ebp - 0x18]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x4981e6
mov esi, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x22
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x498202
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49a2ea
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1c], eax
mov eax, str.pSortID
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x1c]
test eax, 0xffff0000
jne 0x49823c
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x498248
push 7
push str.pSortID
call fcn.00401820
mov byte [ebp - 4], 0x47
cmp dword [ebp - 0x40], 0
mov esi, dword [edi + 0x1f4]
je 0x498346
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov dword [ebp - 0x30], esi
mov eax, 3
mov esi, dword [ebp - 0x1c]
mov word [ebp - 0x38], ax
test esi, esi
je 0x4982be
push 0
push 0
push 0xffffffffffffffff
push esi
push 0
push eax
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0x14], eax
lea ecx, [eax - 1]
push ecx
push 0
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x4982c5
push dword [ebp - 0x14]
push eax
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp eax, dword [ebp - 0x14]
je 0x4982c5
push dword [ebp - 0x18]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x18], 0
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
js 0x49a323
push ecx
mov byte [ebp - 4], 0x48
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x4fd088
call fcn.004808c0
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x49
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [ebp - 0x18]
call fcn.00480940
mov byte [ebp - 4], 0x4a
mov ecx, dword [ebp - 0x40]
test ecx, ecx
je 0x49a2e0
mov byte [ebp - 4], 0x48
call fcn.004bbf20
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [ebp - 0x18]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x498349
mov esi, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x22
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x498365
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49a2ea
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1c], eax
mov eax, str.pFiguresID
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x1c]
test eax, 0xffff0000
jne 0x49839f
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x4983ab
push 0xa
push str.pFiguresID
call fcn.00401820
mov byte [ebp - 4], 0x4c
cmp dword [ebp - 0x40], 0
mov esi, dword [edi + 0x1f8]
je 0x4984a9
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov dword [ebp - 0x30], esi
mov eax, 3
mov esi, dword [ebp - 0x1c]
mov word [ebp - 0x38], ax
test esi, esi
je 0x498421
push 0
push 0
push 0xffffffffffffffff
push esi
push 0
push eax
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0x14], eax
lea ecx, [eax - 1]
push ecx
push 0
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x498428
push dword [ebp - 0x14]
push eax
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp eax, dword [ebp - 0x14]
je 0x498428
push dword [ebp - 0x18]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x18], 0
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
js 0x49a329
push ecx
mov byte [ebp - 4], 0x4d
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x4fd088
call fcn.004808c0
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x4e
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [ebp - 0x18]
call fcn.00480940
mov byte [ebp - 4], 0x4f
mov ecx, dword [ebp - 0x40]
test ecx, ecx
je 0x49a2e0
mov byte [ebp - 4], 0x4d
call fcn.004bbf20
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [ebp - 0x18]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x4984ac
mov esi, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x22
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4984c8
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49a2ea
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1c], eax
mov eax, str.pDayID
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0x1c]
test eax, 0xffff0000
jne 0x498502
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x49850e
push 6
push str.pDayID
call fcn.00401820
mov byte [ebp - 4], 0x51
cmp dword [ebp - 0x40], 0
mov esi, dword [edi + 0x1fc]
je 0x49860c
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov dword [ebp - 0x30], esi
mov eax, 3
mov esi, dword [ebp - 0x1c]
mov word [ebp - 0x38], ax
test esi, esi
je 0x498584
push 0
push 0
push 0xffffffffffffffff
push esi
push 0
push eax
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0x14], eax
lea ecx, [eax - 1]
push ecx
push 0
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x49858b
push dword [ebp - 0x14]
push eax
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp eax, dword [ebp - 0x14]
je 0x49858b
push dword [ebp - 0x18]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x18], 0
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
js 0x49a32f
push ecx
mov byte [ebp - 4], 0x52
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x4fd088
call fcn.004808c0
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x53
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [ebp - 0x18]
call fcn.00480940
mov byte [ebp - 4], 0x54
mov ecx, dword [ebp - 0x40]
test ecx, ecx
je 0x49a2e0
mov byte [ebp - 4], 0x52
call fcn.004bbf20
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [ebp - 0x18]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x49860f
mov esi, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x22
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x49862b
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49a2ea
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1c], eax
mov eax, str.pCSSFile
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x1c]
test eax, 0xffff0000
jne 0x498665
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x498671
push 8
push str.pCSSFile
call fcn.00401820
mov byte [ebp - 4], 0x56
cmp dword [ebp - 0x40], 0
je 0x4987b4
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [0x53d640]
mov esi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0
push 0
mov ecx, dword [eax - 0xc]
push ecx
push eax
push 0
push 3
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], ecx
call esi
push eax
push 0
mov dword [ebp - 0x24], eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x49a2fa
push dword [ebp - 0x24]
push eax
push dword [ebp - 0x14]
push dword [ebp - 0x20]
push 0
push 3
call esi
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov eax, 8
mov word [ebp - 0x38], ax
test esi, esi
je 0x49872c
push 0
push 0
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0x14], eax
lea ecx, [eax - 1]
push ecx
push 0
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x498733
push dword [ebp - 0x14]
push eax
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp eax, dword [ebp - 0x14]
je 0x498733
push dword [ebp - 0x18]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x18], 0
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
js 0x49a335
push ecx
mov byte [ebp - 4], 0x57
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x4fd088
call fcn.004808c0
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x58
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [ebp - 0x18]
call fcn.00480940
mov byte [ebp - 4], 0x59
mov ecx, dword [ebp - 0x40]
test ecx, ecx
je 0x49a2e0
mov byte [ebp - 4], 0x57
call fcn.004bbf20
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [ebp - 0x18]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x4987b7
mov esi, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x22
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4987d3
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
push str.Images_
mov edx, 0x53d63c
lea ecx, [ebp - 0x4c]
call fcn.00405dd0
add esp, 4
mov byte [ebp - 4], 0x5a
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49a2ea
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1c], eax
mov eax, str.pImageDir
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x1c]
test eax, 0xffff0000
jne 0x498826
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x498832
push 9
push str.pImageDir
call fcn.00401820
mov byte [ebp - 4], 0x5c
cmp dword [ebp - 0x40], 0
je 0x498973
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebp - 0x4c]
mov esi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0
push 0
mov ecx, dword [eax - 0xc]
push ecx
push eax
push 0
push 3
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], ecx
call esi
push eax
push 0
mov dword [ebp - 0x24], eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x49a2fa
push dword [ebp - 0x24]
push eax
push dword [ebp - 0x14]
push dword [ebp - 0x20]
push 0
push 3
call esi
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov eax, 8
mov word [ebp - 0x38], ax
test esi, esi
je 0x4988eb
push 0
push 0
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0x14], eax
lea ecx, [eax - 1]
push ecx
push 0
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x4988f2
push dword [ebp - 0x14]
push eax
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp eax, dword [ebp - 0x14]
je 0x4988f2
push dword [ebp - 0x18]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x18], 0
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
js 0x49a33b
push ecx
mov byte [ebp - 4], 0x5d
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x4fd088
call fcn.004808c0
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x5e
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [ebp - 0x18]
call fcn.00480940
mov byte [ebp - 4], 0x5f
mov ecx, dword [ebp - 0x40]
test ecx, ecx
je 0x49a2e0
mov byte [ebp - 4], 0x5d
call fcn.004bbf20
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [ebp - 0x18]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x498976
mov esi, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x5a
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x498992
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49a2ea
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x20], eax
mov eax, str.pPopFormat
mov byte [ebp - 4], 0x60
lea ecx, [ebp - 0x20]
test eax, 0xffff0000
jne 0x4989cc
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x4989d8
push 0xa
push str.pPopFormat
call fcn.00401820
mov esi, dword [edi + 0xd8]
mov byte [ebp - 4], 0x62
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49a341
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x18], eax
mov eax, 0x50ccbc
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0x18]
test eax, 0xffff0000
jne 0x498a1c
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x498a28
push 7
push 0x50ccbc
call fcn.00401820
mov byte [ebp - 4], 0x62
or dword [ebp - 0x28], 0x20
test esi, esi
jle 0x498a57
push 1
push 0x50c060
lea ecx, [ebp - 0x18]
call fcn.00406590
push 1
push 0x4fc9ec
lea ecx, [ebp - 0x18]
call fcn.00406590
sub esi, 1
jne 0x498a43
push 0
push 0x4fd088
lea ecx, [ebp - 0x18]
call fcn.00406590
cmp dword [ebp - 0x40], 0
je 0x498b9e
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov edi, dword [ebp - 0x18]
mov esi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0
push 0
mov eax, dword [edi - 0xc]
push eax
push edi
push 0
push 3
mov dword [ebp - 0x14], eax
call esi
push eax
push 0
mov dword [ebp - 0x24], eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x49a2fa
push dword [ebp - 0x24]
push eax
push dword [ebp - 0x14]
push edi
push 0
push 3
call esi
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x20]
mov dword [ebp - 0x30], eax
mov eax, 8
mov word [ebp - 0x38], ax
test esi, esi
je 0x498b16
push 0
push 0
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0x14], eax
lea ecx, [eax - 1]
push ecx
push 0
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x498b1d
push dword [ebp - 0x14]
push eax
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp eax, dword [ebp - 0x14]
je 0x498b1d
push dword [ebp - 0x1c]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x1c], 0
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
js 0x49a34b
push ecx
mov byte [ebp - 4], 0x64
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x4fd088
call fcn.004808c0
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x65
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [ebp - 0x1c]
call fcn.00480940
mov byte [ebp - 4], 0x66
mov ecx, dword [ebp - 0x40]
test ecx, ecx
je 0x49a2e0
mov byte [ebp - 4], 0x64
call fcn.004bbf20
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [ebp - 0x1c]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x498ba4
mov edi, dword [ebp - 0x18]
mov esi, dword [ebp - 0x20]
and dword [ebp - 0x28], 0xffffffdf
lea edx, [edi - 0x10]
or edi, 0xffffffff
mov byte [ebp - 4], 0x61
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x498bc6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x5a
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x498be1
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49a2ea
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x20], eax
mov eax, str.pReachFormat
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0x20]
test eax, 0xffff0000
jne 0x498c1b
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x498c27
push 0xc
push str.pReachFormat
call fcn.00401820
mov eax, dword [ebp - 0x58]
mov esi, dword [eax + 0xdc]
mov byte [ebp - 4], 0x69
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49a351
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x18], eax
mov eax, 0x50ccbc
mov byte [ebp - 4], 0x6a
lea ecx, [ebp - 0x18]
test eax, 0xffff0000
jne 0x498c6e
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x498c7a
push 7
push 0x50ccbc
call fcn.00401820
mov byte [ebp - 4], 0x69
or dword [ebp - 0x28], 0x40
test esi, esi
jle 0x498ca9
push 1
push 0x50c060
lea ecx, [ebp - 0x18]
call fcn.00406590
push 1
push 0x4fc9ec
lea ecx, [ebp - 0x18]
call fcn.00406590
sub esi, 1
jne 0x498c95
push 0
push 0x4fd088
lea ecx, [ebp - 0x18]
call fcn.00406590
cmp dword [ebp - 0x40], 0
je 0x498df0
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov edi, dword [ebp - 0x18]
mov esi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0
push 0
mov eax, dword [edi - 0xc]
push eax
push edi
push 0
push 3
mov dword [ebp - 0x14], eax
call esi
push eax
push 0
mov dword [ebp - 0x24], eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x49a2fa
push dword [ebp - 0x24]
push eax
push dword [ebp - 0x14]
push edi
push 0
push 3
call esi
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x20]
mov dword [ebp - 0x30], eax
mov eax, 8
mov word [ebp - 0x38], ax
test esi, esi
je 0x498d68
push 0
push 0
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0x14], eax
lea ecx, [eax - 1]
push ecx
push 0
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x498d6f
push dword [ebp - 0x14]
push eax
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp eax, dword [ebp - 0x14]
je 0x498d6f
push dword [ebp - 0x1c]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x1c], 0
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
js 0x49a35b
push ecx
mov byte [ebp - 4], 0x6b
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x4fd088
call fcn.004808c0
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x6c
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [ebp - 0x1c]
call fcn.00480940
mov byte [ebp - 4], 0x6d
mov ecx, dword [ebp - 0x40]
test ecx, ecx
je 0x49a2e0
mov byte [ebp - 4], 0x6b
call fcn.004bbf20
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [ebp - 0x1c]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x498df6
mov edi, dword [ebp - 0x18]
mov esi, dword [ebp - 0x20]
and dword [ebp - 0x28], 0xffffffbf
lea edx, [edi - 0x10]
or edi, 0xffffffff
mov byte [ebp - 4], 0x68
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x498e18
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x5a
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x498e33
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49a2ea
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x20], eax
mov eax, str.pReachPercentFormat
mov byte [ebp - 4], 0x6e
lea ecx, [ebp - 0x20]
test eax, 0xffff0000
jne 0x498e6d
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x498e79
push 0x13
push str.pReachPercentFormat
call fcn.00401820
mov eax, dword [ebp - 0x58]
mov esi, dword [eax + 0xe0]
mov byte [ebp - 4], 0x70
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49a361
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x18], eax
mov eax, 0x4fc9ec
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0x18]
test eax, 0xffff0000
jne 0x498ec0
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x498ecc
push 1
push 0x4fc9ec
call fcn.00401820
mov byte [ebp - 4], 0x70
or dword [ebp - 0x28], 0x80
test esi, esi
jle 0x498f04
push 1
push 0x50c060
lea ecx, [ebp - 0x18]
call fcn.00406590
nop word [eax + eax]
push 1
push 0x4fc9ec
lea ecx, [ebp - 0x18]
call fcn.00406590
sub esi, 1
jne 0x498ef0
push 1
push 0x50ccc4
lea ecx, [ebp - 0x18]
call fcn.00406590
cmp dword [ebp - 0x40], 0
je 0x49904b
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov edi, dword [ebp - 0x18]
mov esi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0
push 0
mov eax, dword [edi - 0xc]
push eax
push edi
push 0
push 3
mov dword [ebp - 0x14], eax
call esi
push eax
push 0
mov dword [ebp - 0x24], eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x49a2fa
push dword [ebp - 0x24]
push eax
push dword [ebp - 0x14]
push edi
push 0
push 3
call esi
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x20]
mov dword [ebp - 0x30], eax
mov eax, 8
mov word [ebp - 0x38], ax
test esi, esi
je 0x498fc3
push 0
push 0
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0x14], eax
lea ecx, [eax - 1]
push ecx
push 0
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x498fca
push dword [ebp - 0x14]
push eax
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp eax, dword [ebp - 0x14]
je 0x498fca
push dword [ebp - 0x1c]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x1c], 0
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
js 0x49a36b
push ecx
mov byte [ebp - 4], 0x72
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x4fd088
call fcn.004808c0
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x73
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [ebp - 0x1c]
call fcn.00480940
mov byte [ebp - 4], 0x74
mov ecx, dword [ebp - 0x40]
test ecx, ecx
je 0x49a2e0
mov byte [ebp - 4], 0x72
call fcn.004bbf20
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [ebp - 0x1c]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x499051
mov edi, dword [ebp - 0x18]
mov esi, dword [ebp - 0x20]
and dword [ebp - 0x28], 0xffffff7f
lea edx, [edi - 0x10]
or edi, 0xffffffff
mov byte [ebp - 4], 0x6f
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x499076
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x5a
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x499091
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49a2ea
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x20], eax
mov eax, str.pShareFormat
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0x20]
test eax, 0xffff0000
jne 0x4990cb
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x4990d7
push 0xc
push str.pShareFormat
call fcn.00401820
mov eax, dword [ebp - 0x58]
mov esi, dword [eax + 0xe8]
mov byte [ebp - 4], 0x77
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49a371
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x18], eax
mov eax, 0x4fc9ec
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0x18]
test eax, 0xffff0000
jne 0x49911e
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x49912a
push 1
push 0x4fc9ec
call fcn.00401820
mov byte [ebp - 4], 0x77
or dword [ebp - 0x28], 0x100
test esi, esi
jle 0x499164
push 1
push 0x50c060
lea ecx, [ebp - 0x18]
call fcn.00406590
nop dword [eax + eax]
push 1
push 0x4fc9ec
lea ecx, [ebp - 0x18]
call fcn.00406590
sub esi, 1
jne 0x499150
push 1
push 0x50ccc4
lea ecx, [ebp - 0x18]
call fcn.00406590
cmp dword [ebp - 0x40], 0
je 0x4992ab
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov edi, dword [ebp - 0x18]
mov esi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0
push 0
mov eax, dword [edi - 0xc]
push eax
push edi
push 0
push 3
mov dword [ebp - 0x14], eax
call esi
push eax
push 0
mov dword [ebp - 0x24], eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x49a2fa
push dword [ebp - 0x24]
push eax
push dword [ebp - 0x14]
push edi
push 0
push 3
call esi
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x20]
mov dword [ebp - 0x30], eax
mov eax, 8
mov word [ebp - 0x38], ax
test esi, esi
je 0x499223
push 0
push 0
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0x14], eax
lea ecx, [eax - 1]
push ecx
push 0
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x49922a
push dword [ebp - 0x14]
push eax
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp eax, dword [ebp - 0x14]
je 0x49922a
push dword [ebp - 0x1c]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x1c], 0
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
js 0x49a37b
push ecx
mov byte [ebp - 4], 0x79
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x4fd088
call fcn.004808c0
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x7a
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [ebp - 0x1c]
call fcn.00480940
mov byte [ebp - 4], 0x7b
mov ecx, dword [ebp - 0x40]
test ecx, ecx
je 0x49a2e0
mov byte [ebp - 4], 0x79
call fcn.004bbf20
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [ebp - 0x1c]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x4992b1
mov edi, dword [ebp - 0x18]
mov esi, dword [ebp - 0x20]
and dword [ebp - 0x28], 0xfffffeff
lea edx, [edi - 0x10]
or edi, 0xffffffff
mov byte [ebp - 4], 0x76
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4992d6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x5a
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4992f1
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49a2ea
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x20], eax
mov eax, str.pAvgHoursFormat
mov byte [ebp - 4], 0x7c
lea ecx, [ebp - 0x20]
test eax, 0xffff0000
jne 0x49932b
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x499337
push 0xf
push str.pAvgHoursFormat
call fcn.00401820
mov eax, dword [ebp - 0x58]
mov esi, dword [eax + 0xe4]
mov byte [ebp - 4], 0x7e
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49a381
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x18], eax
mov eax, 0x4fc9ec
mov byte [ebp - 4], 0x7f
lea ecx, [ebp - 0x18]
test eax, 0xffff0000
jne 0x49937e
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x49938a
push 1
push 0x4fc9ec
call fcn.00401820
mov byte [ebp - 4], 0x7e
or dword [ebp - 0x28], 0x200
test esi, esi
jle 0x4993c4
push 1
push 0x50c060
lea ecx, [ebp - 0x18]
call fcn.00406590
nop dword [eax + eax]
push 1
push 0x4fc9ec
lea ecx, [ebp - 0x18]
call fcn.00406590
sub esi, 1
jne 0x4993b0
push 0
push 0x4fd088
lea ecx, [ebp - 0x18]
call fcn.00406590
cmp dword [ebp - 0x40], 0
je 0x49950b
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov edi, dword [ebp - 0x18]
mov esi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0
push 0
mov eax, dword [edi - 0xc]
push eax
push edi
push 0
push 3
mov dword [ebp - 0x14], eax
call esi
push eax
push 0
mov dword [ebp - 0x24], eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x49a2fa
push dword [ebp - 0x24]
push eax
push dword [ebp - 0x14]
push edi
push 0
push 3
call esi
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x20]
mov dword [ebp - 0x30], eax
mov eax, 8
mov word [ebp - 0x38], ax
test esi, esi
je 0x499483
push 0
push 0
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0x14], eax
lea ecx, [eax - 1]
push ecx
push 0
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x49948a
push dword [ebp - 0x14]
push eax
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp eax, dword [ebp - 0x14]
je 0x49948a
push dword [ebp - 0x1c]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x1c], 0
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
js 0x49a38b
push ecx
mov byte [ebp - 4], 0x80
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x4fd088
call fcn.004808c0
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x81
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [ebp - 0x1c]
call fcn.00480940
mov byte [ebp - 4], 0x82
mov ecx, dword [ebp - 0x40]
test ecx, ecx
je 0x49a2e0
mov byte [ebp - 4], 0x80
call fcn.004bbf20
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [ebp - 0x1c]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x499511
mov edi, dword [ebp - 0x18]
mov esi, dword [ebp - 0x20]
and dword [ebp - 0x28], 0xfffffdff
lea edx, [edi - 0x10]
or edi, 0xffffffff
mov byte [ebp - 4], 0x7d
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x499536
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x5a
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x499551
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49a2ea
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x20], eax
mov eax, str.pAvgAgeFormat
mov byte [ebp - 4], 0x83
lea ecx, [ebp - 0x20]
test eax, 0xffff0000
jne 0x49958b
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x499597
push 0xd
push str.pAvgAgeFormat
call fcn.00401820
mov eax, dword [ebp - 0x58]
mov esi, dword [eax + 0xf0]
mov byte [ebp - 4], 0x85
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49a391
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x18], eax
mov eax, 0x4fc9ec
mov byte [ebp - 4], 0x86
lea ecx, [ebp - 0x18]
test eax, 0xffff0000
jne 0x4995de
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x4995ea
push 1
push 0x4fc9ec
call fcn.00401820
mov byte [ebp - 4], 0x85
or dword [ebp - 0x28], 0x400
test esi, esi
jle 0x499624
push 1
push 0x50c060
lea ecx, [ebp - 0x18]
call fcn.00406590
nop dword [eax + eax]
push 1
push 0x4fc9ec
lea ecx, [ebp - 0x18]
call fcn.00406590
sub esi, 1
jne 0x499610
push 0
push 0x4fd088
lea ecx, [ebp - 0x18]
call fcn.00406590
cmp dword [ebp - 0x40], 0
je 0x49976b
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov edi, dword [ebp - 0x18]
mov esi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0
push 0
mov eax, dword [edi - 0xc]
push eax
push edi
push 0
push 3
mov dword [ebp - 0x14], eax
call esi
push eax
push 0
mov dword [ebp - 0x24], eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x49a2fa
push dword [ebp - 0x24]
push eax
push dword [ebp - 0x14]
push edi
push 0
push 3
call esi
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x20]
mov dword [ebp - 0x30], eax
mov eax, 8
mov word [ebp - 0x38], ax
test esi, esi
je 0x4996e3
push 0
push 0
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0x14], eax
lea ecx, [eax - 1]
push ecx
push 0
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x4996ea
push dword [ebp - 0x14]
push eax
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp eax, dword [ebp - 0x14]
je 0x4996ea
push dword [ebp - 0x1c]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x1c], 0
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
js 0x49a39b
push ecx
mov byte [ebp - 4], 0x87
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x4fd088
call fcn.004808c0
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x88
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [ebp - 0x1c]
call fcn.00480940
mov byte [ebp - 4], 0x89
mov ecx, dword [ebp - 0x40]
test ecx, ecx
je 0x49a2e0
mov byte [ebp - 4], 0x87
call fcn.004bbf20
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [ebp - 0x1c]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x499771
mov edi, dword [ebp - 0x18]
mov esi, dword [ebp - 0x20]
and dword [ebp - 0x28], 0xfffffbff
lea edx, [edi - 0x10]
or edi, 0xffffffff
mov byte [ebp - 4], 0x84
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x499796
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x5a
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4997b1
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49a2ea
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x20], eax
mov eax, str.pPostcodeFormat
mov byte [ebp - 4], 0x8a
lea ecx, [ebp - 0x20]
test eax, 0xffff0000
jne 0x4997eb
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x4997f7
push 0xf
push str.pPostcodeFormat
call fcn.00401820
mov byte [ebp - 4], 0x8b
cmp dword [ebp - 0x40], 0
mov edi, dword [ebp - 0x58]
mov esi, dword [edi + 0x100]
je 0x4998f8
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov dword [ebp - 0x30], esi
mov eax, 3
mov esi, dword [ebp - 0x20]
mov word [ebp - 0x38], ax
test esi, esi
je 0x499870
push 0
push 0
push 0xffffffffffffffff
push esi
push 0
push eax
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0x14], eax
lea ecx, [eax - 1]
push ecx
push 0
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x499877
push dword [ebp - 0x14]
push eax
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp eax, dword [ebp - 0x14]
je 0x499877
push dword [ebp - 0x1c]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x1c], 0
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
js 0x49a3a1
push ecx
mov byte [ebp - 4], 0x8c
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x4fd088
call fcn.004808c0
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x8d
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [ebp - 0x1c]
call fcn.00480940
mov byte [ebp - 4], 0x8e
mov ecx, dword [ebp - 0x40]
test ecx, ecx
je 0x49a2e0
mov byte [ebp - 4], 0x8c
call fcn.004bbf20
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [ebp - 0x1c]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x4998fb
mov esi, dword [ebp - 0x20]
mov byte [ebp - 4], 0x5a
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x499917
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49a2ea
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x20], eax
mov eax, str.pHoursFormat
mov byte [ebp - 4], 0x8f
lea ecx, [ebp - 0x20]
test eax, 0xffff0000
jne 0x499951
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x49995d
push 0xc
push str.pHoursFormat
call fcn.00401820
mov esi, dword [edi + 0xf4]
mov byte [ebp - 4], 0x91
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49a3a7
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x18], eax
mov eax, 0x50ccbc
mov byte [ebp - 4], 0x92
lea ecx, [ebp - 0x18]
test eax, 0xffff0000
jne 0x4999a1
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x4999ad
push 7
push 0x50ccbc
call fcn.00401820
mov byte [ebp - 4], 0x91
or dword [ebp - 0x28], 0x800
test esi, esi
jle 0x4999e4
push 1
push 0x50c060
lea ecx, [ebp - 0x18]
call fcn.00406590
nop dword [eax + eax]
push 1
push 0x4fc9ec
lea ecx, [ebp - 0x18]
call fcn.00406590
sub esi, 1
jne 0x4999d0
push 0
push 0x4fd088
lea ecx, [ebp - 0x18]
call fcn.00406590
cmp dword [ebp - 0x40], 0
je 0x499b2b
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov edi, dword [ebp - 0x18]
mov esi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0
push 0
mov eax, dword [edi - 0xc]
push eax
push edi
push 0
push 3
mov dword [ebp - 0x14], eax
call esi
push eax
push 0
mov dword [ebp - 0x24], eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x49a2fa
push dword [ebp - 0x24]
push eax
push dword [ebp - 0x14]
push edi
push 0
push 3
call esi
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x20]
mov dword [ebp - 0x30], eax
mov eax, 8
mov word [ebp - 0x38], ax
test esi, esi
je 0x499aa3
push 0
push 0
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0x14], eax
lea ecx, [eax - 1]
push ecx
push 0
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x499aaa
push dword [ebp - 0x14]
push eax
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp eax, dword [ebp - 0x14]
je 0x499aaa
push dword [ebp - 0x1c]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x1c], 0
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
js 0x49a3b1
push ecx
mov byte [ebp - 4], 0x93
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x4fd088
call fcn.004808c0
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x94
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [ebp - 0x1c]
call fcn.00480940
mov byte [ebp - 4], 0x95
mov ecx, dword [ebp - 0x40]
test ecx, ecx
je 0x49a2e0
mov byte [ebp - 4], 0x93
call fcn.004bbf20
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [ebp - 0x1c]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x499b31
mov edi, dword [ebp - 0x18]
mov esi, dword [ebp - 0x20]
lea edx, [edi - 0x10]
mov byte [ebp - 4], 0x90
or edi, 0xffffffff
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x499b4f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x5a
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x499b6a
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49a2ea
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x20], eax
mov eax, str.pGraphFile
mov byte [ebp - 4], 0x96
lea ecx, [ebp - 0x20]
test eax, 0xffff0000
jne 0x499ba4
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x499bb0
push 0xa
push str.pGraphFile
call fcn.00401820
mov byte [ebp - 4], 0x97
cmp dword [ebp - 0x40], 0
je 0x499cf7
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov edi, dword [ebp - 0x58]
mov esi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0
push 0
mov eax, dword [edi + 0x210]
mov dword [ebp - 0x1c], eax
mov ecx, dword [eax - 0xc]
push ecx
push eax
push 0
push 3
mov dword [ebp - 0x14], ecx
call esi
push eax
push 0
mov dword [ebp - 0x24], eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x49a2fa
push dword [ebp - 0x24]
push eax
push dword [ebp - 0x14]
push dword [ebp - 0x1c]
push 0
push 3
call esi
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x20]
mov dword [ebp - 0x30], eax
mov eax, 8
mov word [ebp - 0x38], ax
test esi, esi
je 0x499c6f
push 0
push 0
push 0xffffffffffffffff
push esi
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0x14], eax
lea ecx, [eax - 1]
push ecx
push 0
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x499c76
mov dword [ebp - 0x1c], 0
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
js 0x49a3b7
mov esi, dword [ebp - 0x20]
mov edi, dword [ebp - 0x58]
mov byte [ebp - 4], 0x5a
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x499d19
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49a2ea
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x20], eax
mov eax, str.pMapFile
mov byte [ebp - 4], 0x9b
lea ecx, [ebp - 0x20]
test eax, 0xffff0000
jne 0x499d53
mov byte [ebp - 4], 0xd
mov edx, dword [ebp - 0x54]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], esi
dec esi
test esi, esi
jg 0x49a25f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x48]
call fcn.004bbcf0
mov byte [ebp - 4], 0xaa
mov eax, dword [ebp - 0x5c]
test eax, eax
je 0x49a27d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
mov dword [ebp - 0x5c], eax
mov byte [ebp - 4], 0xac
test eax, eax
je 0x49a28b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0
mov ecx, edi
call dword [sym.imp.mfc140.dll_Ordinal_4490]
mov eax, dword [edi]
mov ecx, edi
push dword [ebp - 0x7c]
call dword [eax + 0x5c]
lea ecx, [ebp - 0x7c]
mov byte [edi + 0x200], 0
call dword [sym.imp.mfc140.dll_Ordinal_1044]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
push 0x8007000e
call fcn.00401f30
push 0x80070057
call fcn.00401f30
push 0x8007000e
call fcn.004e2be0
push 0x80004003
call fcn.004e2be0
push 0x80004005
call fcn.00401f30
push eax
call fcn.004e2be0
call fcn.00401d50
push eax
call fcn.004e2be0
push eax
call fcn.004e2be0
push eax
call fcn.004e2be0
push eax
call fcn.004e2be0
push eax
call fcn.004e2be0
push eax
call fcn.004e2be0
push eax
call fcn.004e2be0
push eax
call fcn.004e2be0
push eax
call fcn.004e2be0
push eax
call fcn.004e2be0
push eax
call fcn.004e2be0
push 0x80004005
call fcn.00401f30
push eax
call fcn.004e2be0
push 0x80004005
call fcn.00401f30
push eax
call fcn.004e2be0
push 0x80004005
call fcn.00401f30
push eax
call fcn.004e2be0
push 0x80004005
call fcn.00401f30
push eax
call fcn.004e2be0
push 0x80004005
call fcn.00401f30
push eax
call fcn.004e2be0
push 0x80004005
call fcn.00401f30
push eax
call fcn.004e2be0
push eax
call fcn.004e2be0
push 0x80004005
call fcn.00401f30
push eax
call fcn.004e2be0
push eax
call fcn.004e2be0
push eax
call fcn.004e2be0
int3