Function at 0x402490
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x14c
push ebx
mov ebx, ecx
mov eax, dword [ebx + 0xe4]
cmp eax, 0x1268
push esi
push edi
jge 0x433664
inc eax
mov dword [esp + 0x94], ebx
mov dword [ebx + 0xe4], eax
cmp eax, 1
je 0x402a9a
cmp byte [ebx + 0xf4], 0
mov byte [ebx + 0x13c], 0
jne 0x402a26
lea ecx, [ecx]
cmp byte [ebx + 0x13c], 0
jne 0x402a26
mov edi, ebx
call fcn.004023b0
cmp eax, 1
je 0x402a18
push ebx
call fcn.004021f0
cmp al, 1
je case.default.0x433ba3
cmp byte [0x492b9c], 1
je 0x433682
mov esi, ebx
call fcn.004021d0
cmp al, 1
je case.default.0x433ba3
cmp byte [0x4a35dc], 0
jne 0x43369c
push ebx
call fcn.00404660
cmp al, 1
je case.default.0x433ba3
cmp byte [0x4a3df0], 0
jne 0x43384c
mov eax, dword [ebx + 0xf0]
cmp eax, 7
je 0x433975
cmp eax, 8
je 0x4339d9
cmp eax, 9
je 0x4339d9
cmp eax, 2
je 0x4029d0
cmp eax, 3
je 0x4029d0
cmp eax, 4
je 0x4029d0
cmp eax, 5
je 0x4029d0
cmp eax, 6
je 0x4029d0
mov ecx, dword [ebp + 8]
mov dword [ebx + 0xec], ecx
mov eax, ecx
inc ecx
mov dword [ebp + 8], ecx
call fcn.004021b0
test eax, eax
je 0x433cbd
mov esi, eax
mov ecx, dword [esi + 4]
xor edi, edi
mov dword [esp + 0x18], edi
mov edx, dword [ecx]
movsx eax, word [edx + 8]
cmp eax, 0x34
jne 0x402679
lea eax, [esp + 0x3f]
push eax
lea ecx, [esp + 0x64]
push ecx
push esi
push ebx
lea eax, [esp + 0x28]
mov dword [esp + 0x70], edi
mov dword [esp + 0x78], 1
mov dword [esp + 0x7c], edi
call fcn.00402b70
test eax, eax
jne 0x402611
mov edx, dword [esi + 4]
mov eax, dword [esp + 0x18]
mov eax, dword [edx + eax*4]
cmp word [eax + 8], 0x7f
jne 0x433f3b
mov esi, dword [esp + 0x6c]
cmp esi, edi
je 0x402636
mov eax, dword [esi + 0xc]
dec dword [eax]
mov edx, dword [esi + 0xc]
cmp dword [edx], edi
je 0x433f56
push esi
call fcn.00412f61
add esp, 4
mov dword [esp + 0x6c], edi
mov eax, dword [esp + 0x68]
cmp eax, 8
je 0x433f72
cmp eax, 0xa
je 0x433f93
cmp eax, 5
je 0x433faa
cmp eax, 0xb
je 0x433fb8
cmp eax, 0xc
je 0x433fd6
cmp byte [ebx + 0xf4], 0
je 0x4024e0
jmp 0x402a26
cmp eax, 0x7f
ja case.0x402689.2
movzx eax, byte [eax + 0x402af0]
jmp dword [eax*4 + 0x402ad8]
push esi
push ebx
call fcn.00404e00
jmp case.default.0x433ba3
lea ecx, [ebp + 8]
push ecx
push esi
push ebx
call fcn.00404680
jmp case.default.0x433ba3
mov dword [esp + 0x50], edi
mov dword [esp + 0x58], 1
mov dword [esp + 0x5c], edi
mov dword [esp + 0x24], 0x486348
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], edi
mov eax, dword [ecx]
mov edx, dword [eax]
movsx eax, word [eax + 0xa]
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], edx
mov edx, dword [ecx + 4]
cmp word [edx + 8], 0x47
jne 0x433ccc
mov dword [esp + 0x7c], eax
mov eax, 2
mov dword [esp + 0x14], edi
mov dword [esp + 0x34], eax
mov dword [esp + 0x18], eax
mov edx, dword [ecx + eax*4]
movsx edx, word [edx + 8]
cmp edx, 0x47
jge 0x402710
inc eax
jmp 0x4026fd
sub edx, 0x47
je 0x433d1b
sub edx, 1
jne 0x433ce9
cmp dword [esp + 0x14], edi
jne 0x433d11
mov ecx, eax
inc eax
mov dword [esp + 0x18], eax
xor eax, eax
cmp ecx, 2
jbe 0x402810
mov dword [esp + 0x14], eax
mov edi, ecx
jmp 0x402750
mov eax, dword [esp + 0x30]
xor ecx, ecx
mov dword [esp + 0xd0], ecx
mov dword [esp + 0xd8], 1
mov dword [esp + 0xdc], ecx
cmp dword [esp + 0x2c], eax
je 0x40296f
push 0x10
call fcn.00412dbe
add esp, 4
test eax, eax
je 0x433d24
mov ebx, eax
lea eax, [esp + 0xd0]
call fcn.00405c60
mov ebx, dword [esp + 0x94]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x28]
mov dword [edx + ecx*4], eax
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
inc eax
push edi
mov dword [esp + 0x30], eax
mov eax, dword [ecx + eax*4 - 4]
push eax
lea edx, [esp + 0x3c]
push edx
push esi
mov ecx, ebx
call fcn.00403a80
test eax, eax
jne 0x433d3e
mov eax, dword [esp + 0x34]
mov edx, 1
add dword [esp + 0x14], edx
cmp eax, edi
je 0x40280a
mov ecx, dword [esi + 4]
mov ecx, dword [ecx + eax*4]
cmp word [ecx + 8], 0x40
jne 0x433d2b
lea ecx, [eax + 1]
cmp ecx, edi
je 0x433d2b
mov dword [esp + 0x34], ecx
jb 0x402750
mov eax, dword [esp + 0x14]
xor edi, edi
mov ecx, dword [esp + 0x1c]
lea edx, [ecx + ecx*2]
mov ecx, dword [ebx + 0x1b0]
shl edx, 4
add ecx, edx
cmp eax, dword [ecx + 0x20]
jl 0x433e1c
cmp eax, dword [ecx + 0x24]
jg 0x433e1c
mov ecx, dword [esp + 0x1c]
lea edx, [esp + 0x50]
push edx
lea eax, [esp + 0x28]
push eax
push ecx
mov ecx, ebx
call fcn.00402080
test eax, eax
jne 0x433e29
mov dword [esp + 0x24], 0x486348
cmp dword [esp + 0x2c], edi
jbe 0x402907
mov dword [esp + 0x20], eax
jmp 0x402870
mov edx, dword [esp + 0x28]
mov ecx, dword [edx + eax*4]
cmp ecx, edi
je 0x4028f8
mov eax, dword [ecx + 0xc]
mov dword [esp + 0x14], ecx
cmp eax, edi
je 0x4028ae
mov ecx, dword [eax + 0xc]
dec dword [ecx]
mov dword [esp + 0x1c], eax
mov eax, dword [eax + 0xc]
cmp dword [eax], edi
je 0x433d5a
mov edx, dword [esp + 0x1c]
push edx
call fcn.00412f61
mov ecx, dword [esp + 0x18]
add esp, 4
mov dword [ecx + 0xc], edi
mov eax, dword [ecx + 8]
cmp eax, 8
je 0x433d7e
cmp eax, 0xa
je 0x433da3
cmp eax, 5
je 0x433db8
cmp eax, 0xb
je 0x433dc6
cmp eax, 0xc
je 0x433dec
mov eax, dword [esp + 0x14]
push eax
mov dword [eax + 8], 1
mov dword [eax], edi
call fcn.00412f61
mov eax, dword [esp + 0x24]
add esp, 4
inc eax
mov dword [esp + 0x20], eax
cmp eax, dword [esp + 0x2c]
jb 0x402870
mov edx, dword [esp + 0x28]
push edx
mov dword [esp + 0x30], edi
call fcn.00412f61
mov ecx, dword [esi + 4]
mov edx, dword [esp + 0x1c]
mov eax, dword [ecx + edx*4]
add esp, 4
cmp word [eax + 8], 0x7f
jne 0x433e01
mov eax, dword [esp + 0x5c]
cmp eax, edi
jne 0x433e37
mov eax, dword [esp + 0x58]
cmp eax, 8
je 0x433e46
cmp eax, 0xa
je 0x433e6b
cmp eax, 5
je 0x433e82
cmp eax, 0xb
je 0x433e90
cmp eax, 0xc
jne case.default.0x433ba3
jmp 0x433eb2
add eax, eax
cmp eax, 4
jae 0x40297b
mov eax, 4
xor ecx, ecx
mov dword [esp + 0x30], eax
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00412dbe
mov ecx, dword [esp + 0x30]
add esp, 4
lea edx, [ecx*4]
mov ecx, dword [esp + 0x28]
push edx
push ecx
push eax
mov dword [esp + 0x2c], eax
call fcn.004135d0
mov edx, dword [esp + 0x34]
add esp, 0xc
push edx
call fcn.00412f61
mov eax, dword [esp + 0x24]
add esp, 4
mov dword [esp + 0x28], eax
jmp 0x402779
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
xor edi, edi
cmp dword [ebx + 0x2c0], edi
je 0x402a04
call dword [sym.imp.WINMM.dll_timeGetTime]
mov ecx, dword [ebx + 0x2c8]
cmp eax, ecx
jb 0x433b7d
sub eax, ecx
cmp eax, dword [ebx + 0x2c0]
jae 0x402aa4
mov eax, dword [ebx + 0xf0]
cmp eax, 3
jl case.default.0x433ba3
jmp 0x433b97
mov eax, dword [ebx]
mov eax, dword [eax + 4]
push 0
add eax, ebx
call fcn.0040e870
mov eax, dword [ebx + 0xe4]
mov byte [ebx + 0x13c], 0
cmp eax, 1
jne 0x402ac3
mov esi, ebx
call fcn.00412090
call fcn.00401100
call fcn.00412070
cmp byte [ebx + 0xf4], 1
je 0x402a8f
push ebx
call fcn.00407be0
push 0
call dword [sym.imp.USER32.dll_LockWindowUpdate]
mov ecx, dword [0x492bc8]
push ecx
call dword [sym.imp.USER32.dll_DestroyWindow]
mov esi, dword [sym.imp.USER32.dll_GetMessageW]
push 0
push 0
push 0
lea edx, [esp + 0x148]
push edx
call esi
test eax, eax
jg 0x433fed
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
call fcn.0040ebd0
jmp 0x4024c9
cmp dword [ebx + 0xf0], 2
jne 0x433b85
mov byte [ebx + 0x13c], 1
mov dword [ebx + 0xf0], edi
jmp case.default.0x433ba3
pop edi
dec eax
mov dword [ebx + 0xe4], eax
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 4
push 0xffffffffffffffff
push 0x9a
push ebx
mov byte [0x492b92], 0
call fcn.004456fb
mov eax, 1
jmp 0x402a91
cmp byte [0x492b93], 0
jne 0x402518
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp case.default.0x433ba3
cmp byte [ebx + 0x41c], 1
je 0x402534
cmp byte [0x4a3608], 1
je 0x402534
lea eax, [esp + 0xac]
push eax
call fcn.00446f2e
lea ecx, [esp + 0xac]
push ecx
push 0x4a35d0
call fcn.00457b1b
test al, al
je 0x43383b
lea edx, [esp + 0xb0]
push edx
call fcn.004384bf
test al, al
jne 0x4336c3
mov edi, dword [esp + 0xb0]
lea eax, [esp + 0xf0]
push eax
lea ecx, [esp + 0xec]
push ecx
lea edx, [esp + 0xec]
push edx
lea eax, [esp + 0x84]
push eax
push ebx
call fcn.0040eba0
test al, al
je 0x4336c3
xor eax, eax
mov edi, 1
lea esi, [esp + 0x40]
mov dword [esp + 0x40], eax
mov dword [esp + 0x48], edi
mov dword [esp + 0x4c], eax
call fcn.00401f90
mov ecx, dword [esp + 0xac]
mov dword [esp + 0x48], edi
mov edi, str._GUI_CTRLID
lea esi, [esp + 0xfc]
mov dword [esp + 0x40], ecx
call fcn.00406780
mov eax, 2
lea ecx, [eax - 1]
lea edx, [esp + 0x40]
mov edi, esi
call fcn.0040e370
mov ecx, esi
call fcn.004066f0
lea esi, [esp + 0x40]
call fcn.00401f90
mov edx, dword [esp + 0xc0]
mov edi, str._GUI_WINHANDLE
lea esi, [esp + 0x11c]
mov dword [esp + 0x48], 7
mov dword [esp + 0x40], edx
call fcn.00406780
mov eax, 2
lea ecx, [eax - 1]
lea edx, [esp + 0x40]
mov edi, esi
call fcn.0040e370
mov ecx, esi
call fcn.004066f0
lea esi, [esp + 0x40]
call fcn.00401f90
mov eax, dword [esp + 0xc4]
mov edi, str._GUI_CTRLHANDLE
lea esi, [esp + 0x12c]
mov dword [esp + 0x48], 7
mov dword [esp + 0x40], eax
call fcn.00406780
mov eax, 2
lea ecx, [eax - 1]
lea edx, [esp + 0x40]
mov edi, esi
call fcn.0040e370
mov ecx, esi
call fcn.004066f0
mov ecx, dword [esp + 0x78]
push 0
push 1
inc ecx
push ecx
push ebx
mov byte [ebx + 0x41c], 1
call fcn.0047c943
lea esi, [esp + 0x40]
mov byte [ebx + 0x41c], 0
call fcn.00401f90
lea ecx, [esp + 0xb0]
call fcn.004066f0
jmp case.default.0x433ba3
lea ecx, [esp + 0xb0]
call fcn.004066f0
jmp 0x402534
cmp byte [ebx + 0x41d], 1
je 0x40254f
lea edx, [esp + 0xac]
push edx
call fcn.00446f2e
lea eax, [esp + 0xac]
push eax
push 0x4a3d50
call fcn.0044f13d
lea ecx, [esp + 0xb0]
test al, al
je 0x43396b
push ecx
call fcn.004384bf
test al, al
jne 0x433866
mov edi, dword [esp + 0xb0]
lea edx, [esp + 0xec]
push edx
lea eax, [esp + 0xfc]
push eax
lea ecx, [esp + 0xfc]
push ecx
lea edx, [esp + 0x9c]
push edx
push ebx
call fcn.0040eba0
test al, al
je 0x433866
xor eax, eax
mov edi, 1
lea esi, [esp + 0x98]
mov dword [esp + 0x98], eax
mov dword [esp + 0xa0], edi
mov dword [esp + 0xa4], eax
call fcn.00401f90
mov eax, dword [esp + 0xac]
mov dword [esp + 0xa0], edi
mov edi, str._TRAY_ID
lea esi, [esp + 0x10c]
mov dword [esp + 0x98], eax
call fcn.00406780
mov eax, 2
lea ecx, [eax - 1]
lea edx, [esp + 0x98]
mov edi, esi
call fcn.0040e370
mov ecx, esi
call fcn.004066f0
mov ecx, dword [esp + 0x90]
push 0
push 1
inc ecx
push ecx
push ebx
mov byte [ebx + 0x41d], 1
call fcn.0047c943
lea esi, [esp + 0x98]
mov byte [ebx + 0x41d], 0
call fcn.00401f90
lea ecx, [esp + 0xb0]
call fcn.004066f0
jmp case.default.0x433ba3
call fcn.004066f0
jmp 0x40254f
mov edx, dword [ebx + 0x408]
push 0xa
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [esp + 0x70], eax
cmp eax, 0x102
je case.default.0x433ba3
mov ecx, dword [ebx + 0x408]
lea eax, [esp + 0x70]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov edx, dword [ebx + 0x408]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x70]
mov ecx, dword [ebx]
push eax
mov eax, dword [ecx + 4]
add eax, ebx
call fcn.0040e870
mov byte [ebx + 0x13c], 1
mov dword [ebx + 0xf0], 0
jmp case.default.0x433ba3
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
xor esi, esi
cmp dword [ebx + 0x400], esi
je 0x433a53
call dword [sym.imp.WINMM.dll_timeGetTime]
mov ecx, dword [ebx + 0x404]
cmp eax, ecx
jae 0x433a0b
sub eax, ecx
dec eax
jmp 0x433a0d
sub eax, ecx
cmp eax, dword [ebx + 0x400]
jb 0x433a53
mov eax, dword [ebx + 0x40c]
cmp eax, esi
je 0x433a34
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebx + 0x40c], esi
mov edx, dword [ebx]
mov eax, dword [edx + 4]
push esi
add eax, ebx
call fcn.0040e870
mov byte [ebx + 0x13c], 1
mov dword [ebx + 0xf0], esi
jmp case.default.0x433ba3
cmp dword [ebx + 0xf0], 8
mov eax, dword [ebx + 0x3f0]
lea ecx, [esp + 0x13]
push ecx
lea edx, [esp + 0x3c]
push edx
mov byte [esp + 0x1b], 0
push eax
jne 0x433b22
call fcn.00446a91
add esp, 0xc
test al, al
jne 0x433a93
push 0xffffffffffffffff
push 0x88
push ebx
call fcn.004456fb
cmp byte [esp + 0x13], 1
jne case.default.0x433ba3
mov eax, dword [ebx + 0x40c]
mov dword [esp + 0x74], 0xcccccccc
cmp eax, esi
je 0x433ad3
lea ecx, [esp + 0x74]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov edx, dword [ebx + 0x40c]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebx + 0x40c], esi
cmp dword [ebx + 0xf0], 8
jne 0x433af1
mov eax, dword [esp + 0x38]
mov ecx, dword [ebx]
push eax
mov eax, dword [ecx + 4]
add eax, ebx
call fcn.0040e870
mov eax, dword [ebx]
mov edx, dword [esp + 0x74]
mov eax, dword [eax + 4]
push esi
push edx
add eax, ebx
call fcn.00402010
mov ecx, dword [ebx + 0x2c4]
push ecx
mov byte [ebx + 0x13c], 1
mov dword [ebx + 0xf0], esi
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp case.default.0x433ba3
call fcn.00446a91
add esp, 0xc
test al, al
jne 0x433b3f
push 0xffffffffffffffff
push 0x88
push ebx
call fcn.004456fb
cmp dword [ebx + 0x40c], esi
jne 0x433b6d
cmp byte [esp + 0x13], 0
je 0x433a9e
mov eax, dword [esp + 0x38]
push eax
push esi
push 0x400
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebx + 0x40c], eax
cmp byte [esp + 0x13], 0
je 0x433a9e
jmp case.default.0x433ba3
sub eax, ecx
dec eax
jmp 0x4029f8
mov edx, dword [ebx]
mov eax, dword [edx + 4]
push edi
add eax, ebx
call fcn.0040e870
jmp 0x402ab1
sub eax, 3
cmp eax, 3
ja case.default.0x433ba3
jmp dword [eax*4 + 0x434024]
push ebx
call fcn.0046a5ba
jmp 0x433bd8
push ebx
call fcn.0046a5ba
mov esi, eax
cmp esi, edi
jl 0x433be2
jg case.default.0x433ba3
jmp 0x433c11
push 1
push ebx
call fcn.00469861
mov esi, eax
cmp esi, edi
jge 0x433c03
mov ecx, dword [ebx]
mov eax, esi
neg eax
push edi
push eax
mov eax, dword [ecx + 4]
add eax, ebx
call fcn.00402050
mov edx, dword [ebx]
mov eax, dword [edx + 4]
push edi
add eax, ebx
call fcn.0040e870
cmp esi, edi
je case.default.0x433ba3
cmp esi, edi
jle 0x433c7f
mov eax, dword [ebx + 0xf0]
cmp eax, 5
je 0x433c29
cmp eax, 3
jne 0x433c7f
mov eax, dword [ebx + 0x1d8]
mov dword [esp + 0x80], edi
mov dword [esp + 0x8c], edi
mov edi, dword [eax]
lea esi, [esp + 0x80]
mov dword [esp + 0x88], 1
call fcn.00401f90
mov edx, dword [ebx]
mov eax, dword [edx + 4]
push 0
push esi
add eax, ebx
push eax
mov dword [esp + 0x94], 7
mov dword [esp + 0x8c], edi
call fcn.0047213d
call fcn.00401f90
xor edi, edi
mov ecx, dword [ebx + 0x2c4]
push ecx
mov byte [ebx + 0x13c], 1
mov dword [ebx + 0xf0], edi
call fcn.00438dd5
add esp, 4
jmp case.default.0x433ba3
push 1
push ebx
call fcn.00469861
mov esi, eax
cmp esi, edi
jl 0x433be2
jle 0x433c11
jmp case.default.0x433ba3
mov dword [ebx + 0xf0], 1
jmp case.default.0x433ba3
mov eax, dword [ecx]
movsx ecx, word [eax + 0xa]
push ecx
push 0x6f
push ebx
call fcn.004456fb
lea ecx, [esp + 0x24]
call fcn.00412860
jmp 0x40292d
sub edx, 0x37
jne 0x40270d
mov eax, dword [ecx + eax*4 - 4]
movsx ecx, word [eax + 0xa]
push ecx
push 0x6f
push ebx
call fcn.004456fb
lea ecx, [esp + 0x24]
call fcn.00412860
jmp 0x40292d
dec dword [esp + 0x14]
inc eax
jmp 0x4026fd
inc dword [esp + 0x14]
jmp 0x40270d
xor eax, eax
jmp 0x4027a0
mov edx, dword [esi + 4]
mov eax, dword [edx + eax*4]
movsx ecx, word [eax + 0xa]
push ecx
push 0x6f
push ebx
call fcn.004456fb
lea esi, [esp + 0xd0]
call fcn.00401f90
lea ecx, [esp + 0x24]
xor edi, edi
call fcn.00412860
jmp 0x40292d
mov ecx, dword [esp + 0x1c]
mov edx, dword [ecx]
push edx
call fcn.00412f61
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 0xc]
add esp, 4
push ecx
call fcn.00412f61
add esp, 4
jmp 0x40289a
mov edx, dword [ecx]
cmp edx, edi
je 0x4028ba
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
push edx
call fcn.00412f61
add esp, 4
jmp 0x4028de
mov ecx, dword [ecx]
cmp ecx, edi
je 0x4028de
push ecx
call fcn.0044db42
jmp 0x4028de
mov eax, dword [esp + 0x14]
call fcn.0040fa90
jmp 0x4028de
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push edx
call fcn.00412f61
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
add esp, 4
push ecx
call fcn.00412f61
add esp, 4
jmp 0x4028de
mov ecx, dword [ecx]
cmp ecx, edi
je 0x4028de
push ecx
call fcn.00454e58
jmp 0x4028de
movsx eax, word [eax + 0xa]
push eax
push 0x72
push ebx
call fcn.004456fb
lea esi, [esp + 0x50]
call fcn.00401f90
jmp case.default.0x433ba3
mov eax, dword [esp + 0x7c]
push eax
push 0x70
push ebx
call fcn.004456fb
lea ecx, [esp + 0x24]
call fcn.00412860
jmp 0x40292d
push eax
call fcn.0044db5e
mov dword [esp + 0x5c], edi
jmp 0x402939
mov eax, dword [esp + 0x50]
cmp eax, edi
je case.default.0x433ba3
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [esp + 0x50]
push ecx
call fcn.00412f61
add esp, 4
jmp case.default.0x433ba3
mov eax, dword [esp + 0x50]
cmp eax, edi
je case.default.0x433ba3
push eax
call fcn.0044db42
jmp case.default.0x433ba3
lea eax, [esp + 0x50]
call fcn.0040fa90
jmp case.default.0x433ba3
mov edx, dword [esp + 0x50]
mov eax, dword [edx + 4]
push eax
call fcn.00412f61
mov ecx, dword [esp + 0x54]
add esp, 4
push ecx
call fcn.00412f61
add esp, 4
jmp case.default.0x433ba3
mov eax, dword [esp + 0x50]
cmp eax, edi
je case.default.0x433ba3
push eax
call fcn.00454e58
jmp case.default.0x433ba3
lea edi, [ebx + 0x438]
push edi
call fcn.00437ba2
test al, al
jne 0x433ef2
movsx edx, word [edx + 0xa]
push edx
push 0xa7
push ebx
call fcn.004456fb
jmp case.default.0x433ba3
push edi
lea eax, [esp + 0x1c]
push eax
push esi
push ebx
call fcn.0047f341
test eax, eax
je case.default.0x433ba3
mov ecx, dword [esi + 4]
mov edx, dword [esp + 0x18]
mov eax, dword [ecx + edx*4]
movsx ecx, word [eax + 0xa]
push ecx
push 0xaa
push ebx
call fcn.004456fb
jmp case.default.0x433ba3
movsx edx, word [edx + 0xa]
push edx
push 0x1388
push ebx
call fcn.004456fb
jmp case.default.0x433ba3
movsx ecx, word [eax + 0xa]
push ecx
push 0x72
push ebx
call fcn.004456fb
lea esi, [esp + 0x60]
call fcn.00401f90
jmp case.default.0x433ba3
mov eax, dword [esi]
push eax
call fcn.00412f61
mov ecx, dword [esi + 0xc]
add esp, 4
push ecx
call fcn.00412f61
add esp, 4
jmp 0x402629
mov esi, dword [esp + 0x60]
cmp esi, edi
je case.default.0x433ba3
push esi
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push esi
call fcn.00412f61
add esp, 4
jmp case.default.0x433ba3
mov eax, dword [esp + 0x60]
cmp eax, edi
je case.default.0x433ba3
push eax
call fcn.0044db42
jmp case.default.0x433ba3
lea eax, [esp + 0x60]
call fcn.0040fa90
jmp case.default.0x433ba3
mov esi, dword [esp + 0x60]
mov edx, dword [esi + 4]
push edx
call fcn.00412f61
add esp, 4
push esi
call fcn.00412f61
add esp, 4
jmp case.default.0x433ba3
mov eax, dword [esp + 0x60]
cmp eax, edi
je case.default.0x433ba3
push eax
call fcn.00454e58
jmp case.default.0x433ba3
lea eax, [esp + 0x13c]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea ecx, [esp + 0x13c]
push ecx
call dword [sym.imp.USER32.dll_DispatchMessageW]
push 0
push 0
push 0
lea edx, [esp + 0x148]
push edx
call esi
test eax, eax
jg 0x433fed
jmp 0x402a8f