Function at 0x43e7e0
Capabilities:
Get graphical window text

Disassembly:
push ebp
lea ebp, [esp - 0x6c]
sub esp, 0x6c
push 0xffffffffffffffff
push 0x48a163
mov eax, dword fs:[0]
push eax
sub esp, 0x20c
push ebx
push esi
push edi
mov eax, dword [0x4abf70]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ebx, ecx
mov dword [ebp + 0x20], ebx
call fcn.004524ff
push 0
call fcn.0046de7a
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
add esp, 4
push 0
push 0
mov dword [ebx + 0x158], eax
mov eax, dword [ebx + 0x11c]
push 0x1024
push eax
mov dword [ebx + 0x15c], edx
call esi
mov ecx, dword [ebx + 0x11c]
push 0x14b48c
push 0
push 0x1026
push ecx
call esi
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x48ea88
lea edi, [ebx + 0xfc]
push 1
mov ecx, edi
call fcn.00459ce4
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x48eb2c
push 2
mov ecx, edi
call fcn.00459ce4
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x48eb24
push 3
mov ecx, edi
call fcn.00459ce4
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x4926cc
push 4
mov ecx, edi
call fcn.00459ce4
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x4926c4
push 5
mov ecx, edi
call fcn.00459ce4
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x48f814
push 6
mov ecx, edi
call fcn.00459ce4
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x48f83c
push 7
mov ecx, edi
call fcn.00459ce4
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x48f830
push 8
mov ecx, edi
call fcn.00459ce4
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x48fab4
push 9
mov ecx, edi
call fcn.00459ce4
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x48fabc
push 0xa
mov ecx, edi
call fcn.00459ce4
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x48faac
push 0xb
mov ecx, edi
call fcn.00459ce4
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x48fcd0
push 0xc
mov ecx, edi
call fcn.00459ce4
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x48fcc8
push 0xd
mov ecx, edi
call fcn.00459ce4
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x4926b8
push 0xe
mov ecx, edi
call fcn.00459ce4
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x48fcb0
push 0xf
mov ecx, edi
call fcn.00459ce4
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x48fca4
push 0x10
mov ecx, edi
call fcn.00459ce4
mov eax, dword [ebx + 0x11c]
lea edx, [ebp - 0x118]
push edx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0x110]
sub eax, dword [ebp - 0x118]
mov ecx, dword [ebx + 0x11c]
mov dword [ebp + 0x54], eax
cdq
and edx, 0xf
add eax, edx
sar eax, 4
movzx edi, ax
push edi
push 0
push 0x101e
push ecx
mov dword [ebp + 0x68], 0
call esi
mov edx, dword [ebx + 0x11c]
push edi
push 1
push 0x101e
push edx
call esi
mov eax, dword [ebx + 0x11c]
push edi
push 2
push 0x101e
push eax
call esi
mov eax, 0x66666667
imul dword [ebp + 0x54]
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [ebx + 0x11c]
movzx eax, cx
push eax
push 3
push 0x101e
push edx
mov dword [ebp + 0x4c], eax
call esi
mov eax, dword [ebp + 0x4c]
mov ecx, dword [ebx + 0x11c]
push eax
push 4
push 0x101e
push ecx
call esi
mov edx, dword [ebx + 0x11c]
push edi
push 5
push 0x101e
push edx
call esi
mov eax, dword [ebx + 0x11c]
push edi
push 6
push 0x101e
push eax
call esi
mov ecx, dword [ebx + 0x11c]
push edi
push 7
push 0x101e
push ecx
call esi
mov edx, dword [ebx + 0x11c]
push edi
push 8
push 0x101e
push edx
call esi
mov eax, dword [ebx + 0x11c]
push edi
push 9
push 0x101e
push eax
call esi
mov ecx, dword [ebx + 0x11c]
push edi
push 0xa
push 0x101e
push ecx
call esi
mov edx, dword [ebx + 0x11c]
push edi
push 0xb
push 0x101e
push edx
call esi
mov eax, dword [ebx + 0x11c]
push edi
push 0xc
push 0x101e
push eax
call esi
mov ecx, dword [ebp + 0x54]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
movzx edi, cx
push edi
mov edx, dword [ebx + 0x11c]
push 0xd
push 0x101e
push edx
call esi
mov eax, dword [ebx + 0x11c]
push edi
push 0xe
push 0x101e
push eax
call esi
mov ecx, dword [ebx + 0x11c]
push edi
push 0xf
push 0x101e
push ecx
call esi
mov edx, dword [ebx + 0x11c]
push 0x20
push 0
push 0x1036
push edx
call esi
mov eax, dword [ebx + 0x7c]
lea esi, [ebx + 0x7c]
test eax, eax
je 0x43eb44
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
lea eax, [ebp + 0x54]
push eax
push 0x49826c
push 0x17
xor edi, edi
push edi
push 0x48e8fc
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, edi
jl 0x43eb95
mov ecx, dword [ebp + 0x54]
push ecx
call dword [sym.imp.ole32.dll_OleRun]
cmp eax, edi
mov dword [ebp + 0x50], eax
jl 0x43eb85
mov eax, dword [ebp + 0x54]
mov edx, dword [eax]
push esi
push 0x48e700
push eax
mov eax, dword [edx]
call eax
mov dword [ebp + 0x50], eax
mov eax, dword [ebp + 0x54]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp dword [ebp + 0x50], edi
jge 0x43eb97
mov dword [esi], edi
lea eax, [ebp + 0x58]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [0x4ad504]
mov ecx, 9
mov dword [ebp - 4], edi
mov byte [ebp - 4], 1
mov word [ebp - 0x20], cx
mov dword [ebp - 0x18], eax
cmp eax, edi
je 0x43ebc5
mov edx, dword [eax]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, 8
push str.SELECT__FROM_checkoutregtable
mov byte [ebp - 4], 2
mov word [ebp], cx
call fcn.00482a00
mov dword [ebp + 8], eax
mov ecx, dword [esi]
mov byte [ebp - 4], 3
cmp ecx, edi
jne 0x43ebf3
push 0x80004003
call fcn.00482960
push 1
push 3
push 2
lea edx, [ebp - 0x20]
push edx
lea eax, [ebp]
push eax
call fcn.004011f0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [ebp]
push ecx
call esi
lea edx, [ebp - 0x20]
push edx
call esi
mov dword [ebp - 4], edi
jmp 0x43ec3f
mov esi, dword [ebx + 0x7c]
mov byte [ebp - 4], 5
test esi, esi
jne 0x43ec54
push 0x80004003
call fcn.00482960
mov eax, dword [esi]
mov edx, dword [eax + 0x34]
lea ecx, [ebp + 0x50]
push ecx
push esi
mov dword [ebp + 0x50], 0
call edx
test eax, eax
jge 0x43ec77
push 0x48e864
push esi
push eax
call fcn.00482980
cmp word [ebp + 0x50], 0
jne 0x4402dc
mov esi, dword [ebx + 0x7c]
test esi, esi
jne 0x43ec93
push 0x80004003
call fcn.00482960
mov eax, dword [esi]
mov ecx, dword [eax + 0x98]
push esi
call ecx
test eax, eax
jge 0x43ecb0
push 0x48e864
push esi
push eax
call fcn.00482980
mov edi, edi
mov esi, dword [ebx + 0x7c]
xor edi, edi
cmp esi, edi
jne 0x43ecc3
push 0x80004003
call fcn.00482960
mov edx, dword [esi]
mov ecx, dword [edx + 0x50]
lea eax, [ebp + 0x50]
push eax
push esi
mov dword [ebp + 0x50], edi
call ecx
cmp eax, edi
jge 0x43ece2
push 0x48e864
push esi
push eax
call fcn.00482980
cmp word [ebp + 0x50], di
jne 0x4402d7
mov edx, 8
push 0x48ea88
mov word [ebp - 0x20], dx
call fcn.00482a00
mov dword [ebp - 0x18], eax
mov ecx, dword [ebx + 0x7c]
mov byte [ebp - 4], 6
cmp ecx, edi
jne 0x43ed17
push 0x80004003
call fcn.00482960
lea eax, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1a8]
push edx
call fcn.004012e0
push eax
lea eax, [ebp + 0x58]
push eax
mov byte [ebp - 4], 7
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
cmp eax, edi
jge 0x43ed40
push eax
call fcn.00482960
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [ebp - 0x1a8]
push ecx
call esi
lea edx, [ebp - 0x20]
push edx
mov byte [ebp - 4], 5
call esi
cmp word [ebp + 0x58], 1
je 0x43ee02
lea eax, [ebp + 0x58]
push eax
lea ecx, [ebp + 0x54]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 8
cmp esi, edi
je 0x43ed8f
cmp dword [esi + 4], edi
jne 0x43ed8a
mov ecx, dword [esi]
push ecx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x43ed91
xor esi, esi
lea edi, [ebx + 0x8c]
test esi, esi
jne 0x43ed9f
xor eax, eax
jmp 0x43edad
mov eax, esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x43eda4
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
mov eax, dword [ebp + 0x54]
mov byte [ebp - 4], 5
test eax, eax
je 0x43ee02
mov esi, eax
add eax, 8
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x43edfb
test esi, esi
je 0x43edfb
mov eax, dword [esi]
test eax, eax
je 0x43ede2
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esi + 4]
test eax, eax
je 0x43edf2
push eax
call fcn.0044a15c
add esp, 4
push esi
call fcn.0044a15c
add esp, 4
mov dword [ebp + 0x54], 0
mov eax, dword [ebx + 0x8c]
lea esi, [ebx + 0x8c]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x43ee2c
push 0x32
mov ecx, esi
call fcn.00401800
mov esi, dword [esi]
mov edx, dword [ebp + 0x68]
push 0
push 0
push 0
push 0
push esi
push edx
lea ecx, [ebx + 0xfc]
push 1
call fcn.00459d30
mov eax, 8
push 0x48eb2c
mov word [ebp], ax
call fcn.00482a00
mov dword [ebp + 8], eax
mov ecx, dword [ebx + 0x7c]
mov byte [ebp - 4], 9
test ecx, ecx
jne 0x43ee73
push 0x80004003
call fcn.00482960
lea edx, [ebp]
push edx
lea eax, [ebp - 0x148]
push eax
call fcn.004012e0
push eax
lea ecx, [ebp + 0x58]
push ecx
mov byte [ebp - 4], 0xa
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x43ee9c
push eax
call fcn.00482960
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x148]
push edx
call esi
lea eax, [ebp]
push eax
mov byte [ebp - 4], 5
call esi
cmp word [ebp + 0x58], 1
je 0x43ef5f
lea ecx, [ebp + 0x58]
push ecx
lea ecx, [ebp + 0x1c]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 0xb
test esi, esi
je 0x43eeec
cmp dword [esi + 4], 0
jne 0x43eee7
mov edx, dword [esi]
push edx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x43eeee
xor esi, esi
lea edi, [ebx + 0x90]
test esi, esi
jne 0x43eefc
xor eax, eax
jmp 0x43ef0a
mov eax, esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x43ef01
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
mov eax, dword [ebp + 0x1c]
mov byte [ebp - 4], 5
test eax, eax
je 0x43ef5f
mov esi, eax
add eax, 8
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x43ef58
test esi, esi
je 0x43ef58
mov eax, dword [esi]
test eax, eax
je 0x43ef3f
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esi + 4]
test eax, eax
je 0x43ef4f
push eax
call fcn.0044a15c
add esp, 4
push esi
call fcn.0044a15c
add esp, 4
mov dword [ebp + 0x1c], 0
mov eax, dword [ebx + 0x90]
lea esi, [ebx + 0x90]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x43ef89
push 0x32
mov ecx, esi
call fcn.00401800
mov esi, dword [esi]
mov eax, dword [ebp + 0x68]
push esi
push 1
push eax
lea ecx, [ebx + 0xfc]
call fcn.00459c19
mov ecx, 8
push 0x48eb24
mov word [ebp - 0xd8], cx
call fcn.00482a00
mov dword [ebp - 0xd0], eax
mov ecx, dword [ebx + 0x7c]
mov byte [ebp - 4], 0xc
test ecx, ecx
jne 0x43efce
push 0x80004003
call fcn.00482960
lea edx, [ebp - 0xd8]
push edx
lea eax, [ebp - 0x1e8]
push eax
call fcn.004012e0
push eax
lea ecx, [ebp + 0x58]
push ecx
mov byte [ebp - 4], 0xd
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x43effa
push eax
call fcn.00482960
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x1e8]
push edx
call esi
lea eax, [ebp - 0xd8]
push eax
mov byte [ebp - 4], 5
call esi
cmp word [ebp + 0x58], 1
je 0x43f0c0
lea ecx, [ebp + 0x58]
push ecx
lea ecx, [ebp + 0x28]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 0xe
test esi, esi
je 0x43f04d
cmp dword [esi + 4], 0
jne 0x43f048
mov edx, dword [esi]
push edx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x43f04f
xor esi, esi
lea edi, [ebx + 0xb0]
test esi, esi
jne 0x43f05d
xor eax, eax
jmp 0x43f06b
mov eax, esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x43f062
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
mov eax, dword [ebp + 0x28]
mov byte [ebp - 4], 5
test eax, eax
je 0x43f0c0
mov esi, eax
add eax, 8
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x43f0b9
test esi, esi
je 0x43f0b9
mov eax, dword [esi]
test eax, eax
je 0x43f0a0
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esi + 4]
test eax, eax
je 0x43f0b0
push eax
call fcn.0044a15c
add esp, 4
push esi
call fcn.0044a15c
add esp, 4
mov dword [ebp + 0x28], 0
mov eax, dword [ebx + 0xb0]
lea esi, [ebx + 0xb0]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x43f0ea
push 0x32
mov ecx, esi
call fcn.00401800
mov esi, dword [esi]
mov eax, dword [ebp + 0x68]
push esi
push 2
push eax
lea ecx, [ebx + 0xfc]
call fcn.00459c19
mov ecx, 8
push 0x48eb0c
mov word [ebp - 0x64], cx
call fcn.00482a00
mov dword [ebp - 0x5c], eax
mov ecx, dword [ebx + 0x7c]
mov byte [ebp - 4], 0xf
test ecx, ecx
jne 0x43f129
push 0x80004003
call fcn.00482960
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x168]
push eax
call fcn.004012e0
push eax
lea ecx, [ebp + 0x58]
push ecx
mov byte [ebp - 4], 0x10
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x43f152
push eax
call fcn.00482960
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x168]
push edx
call esi
lea eax, [ebp - 0x64]
push eax
mov byte [ebp - 4], 5
call esi
cmp word [ebp + 0x58], 1
je 0x43f215
lea ecx, [ebp + 0x58]
push ecx
lea ecx, [ebp + 0x18]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 0x11
test esi, esi
je 0x43f1a2
cmp dword [esi + 4], 0
jne 0x43f19d
mov edx, dword [esi]
push edx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x43f1a4
xor esi, esi
lea edi, [ebx + 0x88]
test esi, esi
jne 0x43f1b2
xor eax, eax
jmp 0x43f1c0
mov eax, esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x43f1b7
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
mov eax, dword [ebp + 0x18]
mov byte [ebp - 4], 5
test eax, eax
je 0x43f215
mov esi, eax
add eax, 8
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x43f20e
test esi, esi
je 0x43f20e
mov eax, dword [esi]
test eax, eax
je 0x43f1f5
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esi + 4]
test eax, eax
je 0x43f205
push eax
call fcn.0044a15c
add esp, 4
push esi
call fcn.0044a15c
add esp, 4
mov dword [ebp + 0x18], 0
mov eax, dword [ebx + 0x88]
lea esi, [ebx + 0x88]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x43f23f
push 0x32
mov ecx, esi
call fcn.00401800
mov esi, dword [esi]
mov eax, dword [ebp + 0x68]
push esi
push 3
push eax
lea ecx, [ebx + 0xfc]
call fcn.00459c19
mov ecx, 8
push 0x48eb00
mov word [ebp - 0xb8], cx
call fcn.00482a00
mov dword [ebp - 0xb0], eax
mov ecx, dword [ebx + 0x7c]
mov byte [ebp - 4], 0x12
test ecx, ecx
jne 0x43f284
push 0x80004003
call fcn.00482960
lea edx, [ebp - 0xb8]
push edx
lea eax, [ebp - 0x1c8]
push eax
call fcn.004012e0
push eax
lea ecx, [ebp + 0x58]
push ecx
mov byte [ebp - 4], 0x13
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x43f2b0
push eax
call fcn.00482960
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x1c8]
push edx
call esi
lea eax, [ebp - 0xb8]
push eax
mov byte [ebp - 4], 5
call esi
cmp word [ebp + 0x58], 1
je 0x43f376
lea ecx, [ebp + 0x58]
push ecx
lea ecx, [ebp + 0x24]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 0x14
test esi, esi
je 0x43f303
cmp dword [esi + 4], 0
jne 0x43f2fe
mov edx, dword [esi]
push edx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x43f305
xor esi, esi
lea edi, [ebx + 0xd0]
test esi, esi
jne 0x43f313
xor eax, eax
jmp 0x43f321
mov eax, esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x43f318
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
mov eax, dword [ebp + 0x24]
mov byte [ebp - 4], 5
test eax, eax
je 0x43f376
mov esi, eax
add eax, 8
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x43f36f
test esi, esi
je 0x43f36f
mov eax, dword [esi]
test eax, eax
je 0x43f356
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esi + 4]
test eax, eax
je 0x43f366
push eax
call fcn.0044a15c
add esp, 4
push esi
call fcn.0044a15c
add esp, 4
mov dword [ebp + 0x24], 0
mov eax, dword [ebx + 0xd0]
lea esi, [ebx + 0xd0]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x43f3a0
push 0x32
mov ecx, esi
call fcn.00401800
mov esi, dword [esi]
mov eax, dword [ebp + 0x68]
push esi
push 4
push eax
lea ecx, [ebx + 0xfc]
call fcn.00459c19
mov ecx, 8
push 0x48fcd8
mov word [ebp - 0x30], cx
call fcn.00482a00
mov dword [ebp - 0x28], eax
mov ecx, dword [ebx + 0x7c]
mov byte [ebp - 4], 0x15
test ecx, ecx
jne 0x43f3df
push 0x80004003
call fcn.00482960
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x188]
push eax
call fcn.004012e0
push eax
lea ecx, [ebp + 0x58]
push ecx
mov byte [ebp - 4], 0x16
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x43f408
push eax
call fcn.00482960
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x188]
push edx
call esi
lea eax, [ebp - 0x30]
push eax
mov byte [ebp - 4], 5
call esi
cmp word [ebp + 0x58], 1
je 0x43f4ce
lea ecx, [ebp + 0x58]
push ecx
lea ecx, [ebp + 0x3c]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 0x17
test esi, esi
je 0x43f458
cmp dword [esi + 4], 0
jne 0x43f453
mov edx, dword [esi]
push edx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x43f45a
xor esi, esi
lea edi, [ebx + 0xac]
test esi, esi
jne 0x43f468
xor eax, eax
jmp 0x43f479
mov eax, esi
lea ecx, [eax + 1]
lea ecx, [ecx]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x43f470
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
mov eax, dword [ebp + 0x3c]
mov byte [ebp - 4], 5
test eax, eax
je 0x43f4ce
mov esi, eax
add eax, 8
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x43f4c7
test esi, esi
je 0x43f4c7
mov eax, dword [esi]
test eax, eax
je 0x43f4ae
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esi + 4]
test eax, eax
je 0x43f4be
push eax
call fcn.0044a15c
add esp, 4
push esi
call fcn.0044a15c
add esp, 4
mov dword [ebp + 0x3c], 0
mov eax, dword [ebx + 0xac]
lea esi, [ebx + 0xac]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x43f4f8
push 0x32
mov ecx, esi
call fcn.00401800
mov esi, dword [esi]
mov eax, dword [ebp + 0x68]
push esi
push 5
push eax
lea ecx, [ebx + 0xfc]
call fcn.00459c19
mov ecx, 8
push 0x48f83c
mov word [ebp - 0xf8], cx
call fcn.00482a00
mov dword [ebp - 0xf0], eax
mov ecx, dword [ebx + 0x7c]
mov byte [ebp - 4], 0x18
test ecx, ecx
jne 0x43f53d
push 0x80004003
call fcn.00482960
lea edx, [ebp - 0xf8]
push edx
lea eax, [ebp - 0x208]
push eax
call fcn.004012e0
push eax
lea ecx, [ebp + 0x58]
push ecx
mov byte [ebp - 4], 0x19
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x43f569
push eax
call fcn.00482960
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x208]
push edx
call esi
lea eax, [ebp - 0xf8]
push eax
mov byte [ebp - 4], 5
call esi
cmp word [ebp + 0x58], 1
je 0x43f62f
lea ecx, [ebp + 0x58]
push ecx
lea ecx, [ebp + 0x14]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 0x1a
test esi, esi
je 0x43f5bc
cmp dword [esi + 4], 0
jne 0x43f5b7
mov edx, dword [esi]
push edx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x43f5be
xor esi, esi
lea edi, [ebx + 0xd4]
test esi, esi
jne 0x43f5cc
xor eax, eax
jmp 0x43f5da
mov eax, esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x43f5d1
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
mov eax, dword [ebp + 0x14]
mov byte [ebp - 4], 5
test eax, eax
je 0x43f62f
mov esi, eax
add eax, 8
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x43f628
test esi, esi
je 0x43f628
mov eax, dword [esi]
test eax, eax
je 0x43f60f
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esi + 4]
test eax, eax
je 0x43f61f
push eax
call fcn.0044a15c
add esp, 4
push esi
call fcn.0044a15c
add esp, 4
mov dword [ebp + 0x14], 0
mov eax, dword [ebx + 0xd4]
lea esi, [ebx + 0xd4]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x43f659
push 0x32
mov ecx, esi
call fcn.00401800
mov esi, dword [esi]
mov eax, dword [ebp + 0x68]
push esi
push 6
push eax
lea ecx, [ebx + 0xfc]
call fcn.00459c19
mov ecx, 8
push 0x48f830
mov word [ebp - 0x98], cx
call fcn.00482a00
mov dword [ebp - 0x90], eax
mov ecx, dword [ebx + 0x7c]
mov byte [ebp - 4], 0x1b
test ecx, ecx
jne 0x43f69e
push 0x80004003
call fcn.00482960
lea edx, [ebp - 0x98]
push edx
lea eax, [ebp - 0x128]
push eax
call fcn.004012e0
push eax
lea ecx, [ebp + 0x58]
push ecx
mov byte [ebp - 4], 0x1c
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x43f6ca
push eax
call fcn.00482960
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x128]
push edx
call esi
lea eax, [ebp - 0x98]
push eax
mov byte [ebp - 4], 5
call esi
cmp word [ebp + 0x58], 1
je 0x43f790
lea ecx, [ebp + 0x58]
push ecx
lea ecx, [ebp + 0x34]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 0x1d
test esi, esi
je 0x43f71d
cmp dword [esi + 4], 0
jne 0x43f718
mov edx, dword [esi]
push edx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x43f71f
xor esi, esi
lea edi, [ebx + 0x9c]
test esi, esi
jne 0x43f72d
xor eax, eax
jmp 0x43f73b
mov eax, esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x43f732
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
mov eax, dword [ebp + 0x34]
mov byte [ebp - 4], 5
test eax, eax
je 0x43f790
mov esi, eax
add eax, 8
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x43f789
test esi, esi
je 0x43f789
mov eax, dword [esi]
test eax, eax
je 0x43f770
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esi + 4]
test eax, eax
je 0x43f780
push eax
call fcn.0044a15c
add esp, 4
push esi
call fcn.0044a15c
add esp, 4
mov dword [ebp + 0x34], 0
mov eax, dword [ebx + 0x9c]
lea esi, [ebx + 0x9c]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x43f7ba
push 0x32
mov ecx, esi
call fcn.00401800
mov esi, dword [esi]
mov eax, dword [ebp + 0x68]
push esi
push 7
push eax
lea ecx, [ebx + 0xfc]
call fcn.00459c19
mov ecx, 8
push 0x48fab4
mov word [ebp - 0x40], cx
call fcn.00482a00
mov dword [ebp - 0x38], eax
mov ecx, dword [ebx + 0x7c]
mov byte [ebp - 4], 0x1e
test ecx, ecx
jne 0x43f7f9
push 0x80004003
call fcn.00482960
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x138]
push eax
call fcn.004012e0
push eax
lea ecx, [ebp + 0x58]
push ecx
mov byte [ebp - 4], 0x1f
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x43f822
push eax
call fcn.00482960
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x138]
push edx
call esi
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 5
call esi
cmp word [ebp + 0x58], 1
je 0x43f8e5
lea ecx, [ebp + 0x58]
push ecx
lea ecx, [ebp + 0x48]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 0x20
test esi, esi
je 0x43f872
cmp dword [esi + 4], 0
jne 0x43f86d
mov edx, dword [esi]
push edx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x43f874
xor esi, esi
lea edi, [ebx + 0xe0]
test esi, esi
jne 0x43f882
xor eax, eax
jmp 0x43f890
mov eax, esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x43f887
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
mov eax, dword [ebp + 0x48]
mov byte [ebp - 4], 5
test eax, eax
je 0x43f8e5
mov esi, eax
add eax, 8
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x43f8de
test esi, esi
je 0x43f8de
mov eax, dword [esi]
test eax, eax
je 0x43f8c5
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esi + 4]
test eax, eax
je 0x43f8d5
push eax
call fcn.0044a15c
add esp, 4
push esi
call fcn.0044a15c
add esp, 4
mov dword [ebp + 0x48], 0
mov eax, dword [ebx + 0xe0]
lea esi, [ebx + 0xe0]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x43f90f
push 0x32
mov ecx, esi
call fcn.00401800
mov esi, dword [esi]
mov eax, dword [ebp + 0x68]
push esi
push 8
push eax
lea ecx, [ebx + 0xfc]
call fcn.00459c19
mov ecx, 8
push 0x48fabc
mov word [ebp - 0x54], cx
call fcn.00482a00
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebx + 0x7c]
mov byte [ebp - 4], 0x21
test ecx, ecx
jne 0x43f94e
push 0x80004003
call fcn.00482960
lea edx, [ebp - 0x54]
push edx
lea eax, [ebp - 0x158]
push eax
call fcn.004012e0
push eax
lea ecx, [ebp + 0x58]
push ecx
mov byte [ebp - 4], 0x22
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x43f977
push eax
call fcn.00482960
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x158]
push edx
call esi
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 5
call esi
cmp word [ebp + 0x58], 1
je 0x43fa3e
lea ecx, [ebp + 0x58]
push ecx
lea ecx, [ebp + 0x2c]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 0x23
test esi, esi
je 0x43f9c7
cmp dword [esi + 4], 0
jne 0x43f9c2
mov edx, dword [esi]
push edx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x43f9c9
xor esi, esi
lea edi, [ebx + 0xd8]
test esi, esi
jne 0x43f9d7
xor eax, eax
jmp 0x43f9e9
mov eax, esi
lea ecx, [eax + 1]
lea esp, [esp]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x43f9e0
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
mov eax, dword [ebp + 0x2c]
mov byte [ebp - 4], 5
test eax, eax
je 0x43fa3e
mov esi, eax
add eax, 8
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x43fa37
test esi, esi
je 0x43fa37
mov eax, dword [esi]
test eax, eax
je 0x43fa1e
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esi + 4]
test eax, eax
je 0x43fa2e
push eax
call fcn.0044a15c
add esp, 4
push esi
call fcn.0044a15c
add esp, 4
mov dword [ebp + 0x2c], 0
mov eax, dword [ebx + 0xd8]
lea esi, [ebx + 0xd8]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x43fa68
push 0x32
mov ecx, esi
call fcn.00401800
mov esi, dword [esi]
mov eax, dword [ebp + 0x68]
push esi
push 9
push eax
lea ecx, [ebx + 0xfc]
call fcn.00459c19
mov ecx, 8
push 0x48faac
mov word [ebp - 0x74], cx
call fcn.00482a00
mov dword [ebp - 0x6c], eax
mov ecx, dword [ebx + 0x7c]
mov byte [ebp - 4], 0x24
test ecx, ecx
jne 0x43faa7
push 0x80004003
call fcn.00482960
lea edx, [ebp - 0x74]
push edx
lea eax, [ebp - 0x178]
push eax
call fcn.004012e0
push eax
lea ecx, [ebp + 0x58]
push ecx
mov byte [ebp - 4], 0x25
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x43fad0
push eax
call fcn.00482960
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x178]
push edx
call esi
lea eax, [ebp - 0x74]
push eax
mov byte [ebp - 4], 5
call esi
cmp word [ebp + 0x58], 1
je 0x43fb93
lea ecx, [ebp + 0x58]
push ecx
lea ecx, [ebp + 0x10]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 0x26
test esi, esi
je 0x43fb20
cmp dword [esi + 4], 0
jne 0x43fb1b
mov edx, dword [esi]
push edx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x43fb22
xor esi, esi
lea edi, [ebx + 0xe8]
test esi, esi
jne 0x43fb30
xor eax, eax
jmp 0x43fb3e
mov eax, esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x43fb35
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
mov eax, dword [ebp + 0x10]
mov byte [ebp - 4], 5
test eax, eax
je 0x43fb93
mov esi, eax
add eax, 8
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x43fb8c
test esi, esi
je 0x43fb8c
mov eax, dword [esi]
test eax, eax
je 0x43fb73
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esi + 4]
test eax, eax
je 0x43fb83
push eax
call fcn.0044a15c
add esp, 4
push esi
call fcn.0044a15c
add esp, 4
mov dword [ebp + 0x10], 0
mov eax, dword [ebx + 0xe8]
lea esi, [ebx + 0xe8]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x43fbbd
push 0x32
mov ecx, esi
call fcn.00401800
mov esi, dword [esi]
mov eax, dword [ebp + 0x68]
push esi
push 0xa
push eax
lea ecx, [ebx + 0xfc]
call fcn.00459c19
mov ecx, 8
push 0x48fcd0
mov word [ebp - 0x88], cx
call fcn.00482a00
mov dword [ebp - 0x80], eax
mov ecx, dword [ebx + 0x7c]
mov byte [ebp - 4], 0x27
test ecx, ecx
jne 0x43fbff
push 0x80004003
call fcn.00482960
lea edx, [ebp - 0x88]
push edx
lea eax, [ebp - 0x198]
push eax
call fcn.004012e0
push eax
lea ecx, [ebp + 0x58]
push ecx
mov byte [ebp - 4], 0x28
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x43fc2b
push eax
call fcn.00482960
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x198]
push edx
call esi
lea eax, [ebp - 0x88]
push eax
mov byte [ebp - 4], 5
call esi
cmp word [ebp + 0x58], 1
je 0x43fcf1
lea ecx, [ebp + 0x58]
push ecx
lea ecx, [ebp + 0x44]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 0x29
test esi, esi
je 0x43fc7e
cmp dword [esi + 4], 0
jne 0x43fc79
mov edx, dword [esi]
push edx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x43fc80
xor esi, esi
lea edi, [ebx + 0xdc]
test esi, esi
jne 0x43fc8e
xor eax, eax
jmp 0x43fc9c
mov eax, esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x43fc93
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
mov eax, dword [ebp + 0x44]
mov byte [ebp - 4], 5
test eax, eax
je 0x43fcf1
mov esi, eax
add eax, 8
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x43fcea
test esi, esi
je 0x43fcea
mov eax, dword [esi]
test eax, eax
je 0x43fcd1
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esi + 4]
test eax, eax
je 0x43fce1
push eax
call fcn.0044a15c
add esp, 4
push esi
call fcn.0044a15c
add esp, 4
mov dword [ebp + 0x44], 0
mov eax, dword [ebx + 0xdc]
lea esi, [ebx + 0xdc]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x43fd1b
push 0x32
mov ecx, esi
call fcn.00401800
mov esi, dword [esi]
mov eax, dword [ebp + 0x68]
push esi
push 0xb
push eax
lea ecx, [ebx + 0xfc]
call fcn.00459c19
mov ecx, 8
push 0x48fcc8
mov word [ebp - 0xa8], cx
call fcn.00482a00
mov dword [ebp - 0xa0], eax
mov ecx, dword [ebx + 0x7c]
mov byte [ebp - 4], 0x2a
test ecx, ecx
jne 0x43fd60
push 0x80004003
call fcn.00482960
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0x1b8]
push eax
call fcn.004012e0
push eax
lea ecx, [ebp + 0x58]
push ecx
mov byte [ebp - 4], 0x2b
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x43fd8c
push eax
call fcn.00482960
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x1b8]
push edx
call esi
lea eax, [ebp - 0xa8]
push eax
mov byte [ebp - 4], 5
call esi
cmp word [ebp + 0x58], 1
je 0x43fe52
lea ecx, [ebp + 0x58]
push ecx
lea ecx, [ebp + 0x40]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 0x2c
test esi, esi
je 0x43fddf
cmp dword [esi + 4], 0
jne 0x43fdda
mov edx, dword [esi]
push edx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x43fde1
xor esi, esi
lea edi, [ebx + 0xe4]
test esi, esi
jne 0x43fdef
xor eax, eax
jmp 0x43fdfd
mov eax, esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x43fdf4
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
mov eax, dword [ebp + 0x40]
mov byte [ebp - 4], 5
test eax, eax
je 0x43fe52
mov esi, eax
add eax, 8
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x43fe4b
test esi, esi
je 0x43fe4b
mov eax, dword [esi]
test eax, eax
je 0x43fe32
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esi + 4]
test eax, eax
je 0x43fe42
push eax
call fcn.0044a15c
add esp, 4
push esi
call fcn.0044a15c
add esp, 4
mov dword [ebp + 0x40], 0
mov eax, dword [ebx + 0xe4]
lea esi, [ebx + 0xe4]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x43fe7c
push 0x32
mov ecx, esi
call fcn.00401800
mov esi, dword [esi]
mov eax, dword [ebp + 0x68]
push esi
push 0xc
push eax
lea ecx, [ebx + 0xfc]
call fcn.00459c19
mov ecx, 8
push 0x48fcbc
mov word [ebp - 0xc8], cx
call fcn.00482a00
mov dword [ebp - 0xc0], eax
mov ecx, dword [ebx + 0x7c]
mov byte [ebp - 4], 0x2d
test ecx, ecx
jne 0x43fec1
push 0x80004003
call fcn.00482960
lea edx, [ebp - 0xc8]
push edx
lea eax, [ebp - 0x1d8]
push eax
call fcn.004012e0
push eax
lea ecx, [ebp + 0x58]
push ecx
mov byte [ebp - 4], 0x2e
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x43feed
push eax
call fcn.00482960
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x1d8]
push edx
call esi
lea eax, [ebp - 0xc8]
push eax
mov byte [ebp - 4], 5
call esi
cmp word [ebp + 0x58], 1
je 0x43ffb3
lea ecx, [ebp + 0x58]
push ecx
lea ecx, [ebp + 0x38]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 0x2f
test esi, esi
je 0x43ff40
cmp dword [esi + 4], 0
jne 0x43ff3b
mov edx, dword [esi]
push edx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x43ff42
xor esi, esi
lea edi, [ebx + 0x84]
test esi, esi
jne 0x43ff50
xor eax, eax
jmp 0x43ff5e
mov eax, esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x43ff55
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
mov eax, dword [ebp + 0x38]
mov byte [ebp - 4], 5
test eax, eax
je 0x43ffb3
mov esi, eax
add eax, 8
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x43ffac
test esi, esi
je 0x43ffac
mov eax, dword [esi]
test eax, eax
je 0x43ff93
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esi + 4]
test eax, eax
je 0x43ffa3
push eax
call fcn.0044a15c
add esp, 4
push esi
call fcn.0044a15c
add esp, 4
mov dword [ebp + 0x38], 0
mov eax, dword [ebx + 0x84]
lea esi, [ebx + 0x84]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x43ffdd
push 0x32
mov ecx, esi
call fcn.00401800
mov esi, dword [esi]
mov eax, dword [ebp + 0x68]
push esi
push 0xd
push eax
lea ecx, [ebx + 0xfc]
call fcn.00459c19
mov ecx, 8
push 0x48fcb0
mov word [ebp - 0xe8], cx
call fcn.00482a00
mov dword [ebp - 0xe0], eax
mov ecx, dword [ebx + 0x7c]
mov byte [ebp - 4], 0x30
test ecx, ecx
jne 0x440022
push 0x80004003
call fcn.00482960
lea edx, [ebp - 0xe8]
push edx
lea eax, [ebp - 0x1f8]
push eax
call fcn.004012e0
push eax
lea ecx, [ebp + 0x58]
push ecx
mov byte [ebp - 4], 0x31
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x44004e
push eax
call fcn.00482960
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x1f8]
push edx
call esi
lea eax, [ebp - 0xe8]
push eax
mov byte [ebp - 4], 5
call esi
cmp word [ebp + 0x58], 1
je 0x440114
lea ecx, [ebp + 0x58]
push ecx
lea ecx, [ebp + 0x30]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 0x32
test esi, esi
je 0x4400a1
cmp dword [esi + 4], 0
jne 0x44009c
mov edx, dword [esi]
push edx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x4400a3
xor esi, esi
lea edi, [ebx + 0xec]
test esi, esi
jne 0x4400b1
xor eax, eax
jmp 0x4400bf
mov eax, esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4400b6
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
mov eax, dword [ebp + 0x30]
mov byte [ebp - 4], 5
test eax, eax
je 0x440114
mov esi, eax
add eax, 8
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x44010d
test esi, esi
je 0x44010d
mov eax, dword [esi]
test eax, eax
je 0x4400f4
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esi + 4]
test eax, eax
je 0x440104
push eax
call fcn.0044a15c
add esp, 4
push esi
call fcn.0044a15c
add esp, 4
mov dword [ebp + 0x30], 0
mov eax, dword [ebx + 0xec]
lea esi, [ebx + 0xec]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x44013e
push 0x32
mov ecx, esi
call fcn.00401800
mov esi, dword [esi]
mov eax, dword [ebp + 0x68]
push esi
push 0xe
push eax
lea ecx, [ebx + 0xfc]
call fcn.00459c19
mov ecx, 8
push 0x48fca4
mov word [ebp - 0x108], cx
call fcn.00482a00
mov dword [ebp - 0x100], eax
mov ecx, dword [ebx + 0x7c]
mov byte [ebp - 4], 0x33
test ecx, ecx
jne 0x440183
push 0x80004003
call fcn.00482960
lea edx, [ebp - 0x108]
push edx
lea eax, [ebp - 0x218]
push eax
call fcn.004012e0
push eax
lea ecx, [ebp + 0x58]
push ecx
mov byte [ebp - 4], 0x34
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x4401af
push eax
call fcn.00482960
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0x218]
push edx
call esi
lea eax, [ebp - 0x108]
push eax
mov byte [ebp - 4], 5
call esi
cmp word [ebp + 0x58], 1
je 0x440275
lea ecx, [ebp + 0x58]
push ecx
lea ecx, [ebp + 0x4c]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 0x35
test esi, esi
je 0x440202
cmp dword [esi + 4], 0
jne 0x4401fd
mov edx, dword [esi]
push edx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x440204
xor esi, esi
lea edi, [ebx + 0xf0]
test esi, esi
jne 0x440212
xor eax, eax
jmp 0x440220
mov eax, esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x440217
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
mov eax, dword [ebp + 0x4c]
mov byte [ebp - 4], 5
test eax, eax
je 0x440275
mov esi, eax
add eax, 8
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x44026e
test esi, esi
je 0x44026e
mov eax, dword [esi]
test eax, eax
je 0x440255
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esi + 4]
test eax, eax
je 0x440265
push eax
call fcn.0044a15c
add esp, 4
push esi
call fcn.0044a15c
add esp, 4
mov dword [ebp + 0x4c], 0
mov eax, dword [ebx + 0xf0]
lea esi, [ebx + 0xf0]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x44029f
push 0x32
mov ecx, esi
call fcn.00401800
mov esi, dword [esi]
mov eax, dword [ebp + 0x68]
push esi
push 0xf
push eax
lea ecx, [ebx + 0xfc]
call fcn.00459c19
mov esi, dword [ebx + 0x7c]
inc dword [ebp + 0x68]
test esi, esi
jne 0x4402c7
push 0x80004003
call fcn.00482960
mov ecx, dword [esi]
mov edx, dword [ecx + 0x90]
push esi
call edx
jmp 0x43ec9e
mov dword [ebp - 4], edi
jmp 0x44031d
push 0
push 0
push 0x48ea78
call fcn.00451fe9
lea eax, [ebp + 0x58]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
xor eax, eax
jmp 0x4403bf
mov esi, dword [ebx + 0x7c]
test esi, esi
jne 0x44032e
push 0x80004003
call fcn.00482960
mov ecx, dword [esi]
mov edx, dword [ecx + 0x80]
push esi
call edx
test eax, eax
jge 0x440349
push 0x48e864
push esi
push eax
call fcn.00482980
mov eax, dword [ebx + 0x7c]
test eax, eax
je 0x44035f
mov dword [ebx + 0x7c], 0
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
fldz
push 0x4ad508
fst dword [ebx + 0x170]
lea ecx, [ebx + 0x194]
fst dword [ebx + 0x174]
fst dword [ebx + 0x178]
fst dword [ebx + 0x17c]
fst dword [ebx + 0x180]
fst dword [ebx + 0x184]
fst dword [ebx + 0x188]
fst dword [ebx + 0x18c]
fstp dword [ebx + 0x190]
call fcn.00401c90
push 0
mov ecx, ebx
call fcn.0044d72f
lea eax, [ebp + 0x58]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
add ebp, 0x6c
mov esp, ebp
pop ebp
ret