Function at 0x40e730
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x11c
mov eax, dword [0x4c321c]
push ebx
push esi
push edi
mov dword [esp + 0x14], ecx
test al, 1
je 0x40fcaf
mov edi, dword [ebp + 0x10]
xor eax, eax
push 8
mov word [esp + 0x60], 1
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], 0
mov dword [esp + 0x14], eax
mov dword [esp + 0x2c], eax
mov word [esp + 0x30], 1
call fcn.00420f2a
mov ebx, eax
add esp, 4
mov dword [esp + 0x34], eax
test ebx, ebx
je 0x40fe77
mov dword [ebx], 0x14
mov esi, dword [ebp + 0xc]
mov edx, dword [ebp + 8]
mov ecx, dword [esi]
mov dword [ebx + 4], 0
mov eax, dword [edx + 4]
mov dword [esp + 0x58], ebx
mov eax, dword [eax + ecx*4]
mov dword [esp + 0x54], 1
movsx eax, word [eax + 0xa]
mov dword [esp + 0x18], 0x17
mov dword [esp + 0x64], eax
jmp 0x40e83b
mov byte [esp + 0x1f], 1
cmp byte [esp + 0x1f], 0
mov eax, dword [esi]
mov ecx, dword [esp + 0x68]
mov eax, dword [eax + 0x18]
mov dword [ecx + 0x1c], eax
mov eax, dword [esi]
mov ecx, dword [esp + 0x40]
mov eax, dword [eax + 0x1c]
mov dword [ecx + 0x18], eax
mov ecx, dword [esi]
mov eax, dword [0x4c3210]
mov dword [ecx + 0x18], eax
mov ecx, dword [esi]
mov eax, dword [0x4c320c]
mov dword [ecx + 0x1c], eax
je 0x40ecfb
mov eax, dword [esi]
test eax, eax
je 0x40ecfb
mov eax, dword [eax + 0x14]
test eax, eax
je 0x40ecfb
push dword [esp + 0x6c]
mov esi, dword [ebp + 0xc]
mov ecx, dword [esp + 0x18]
inc dword [esi]
push eax
push esi
push dword [ebp + 8]
call fcn.0040e3c0
test eax, eax
js 0x47b534
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov ecx, dword [esi]
cmp ecx, eax
je case.0x40f918.4
mov esi, dword [edx + 4]
mov edx, dword [esi + ecx*4]
movzx eax, word [edx + 8]
cmp ax, 0x7f
je case.0x40f918.4
cwde
cmp eax, 0x33
je 0x40e902
cmp eax, 0x4f
je case.0x40f918.4
cmp eax, 5
je 0x40ec4b
cmp eax, 0x58
ja case.0x40f918.4
movzx eax, byte [eax + 0x40ff98]
jmp dword [eax*4 + 0x40ff2c]
mov eax, dword [edx]
cmp eax, 4
jl 0x40f907
cmp eax, 0x27
jge 0x40f907
mov esi, 0x14
mov dword [esp + 0x18], esi
lea esp, [esp]
mov cl, byte [esp + 0x5d]
test cl, cl
jne 0x40ee34
mov eax, ebx
mov eax, dword [eax]
imul eax, eax, 0x15
movzx eax, byte [eax + esi + 0x4bcc20]
cmp eax, 3
jne 0x40ebb4
cmp dword [esp + 0x24], 1
jne 0x40ff20
xor edi, edi
mov eax, dword [esp + 0x28]
mov dword [esp + 0x10], eax
test eax, eax
jne 0x40f07e
test ebx, ebx
je 0x40e8f7
mov esi, dword [ebx + 4]
push ebx
call fcn.00420f9e
add esp, 4
mov ebx, esi
test esi, esi
jne 0x40e8e5
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov esi, dword [esp + 0x24]
mov dword [esp + 0x18], 0x16
test esi, esi
jne 0x40f01e
cmp edi, 0x4c3220
je 0x40e95c
cmp dword [edi + 0xc], 4
je 0x40f6fc
mov esi, dword [edi + 8]
test esi, esi
jne 0x40f70e
mov eax, dword [edi + 0xc]
cmp eax, 5
jge 0x47bde1
push 0x4c3220
mov ecx, edi
mov dword [edi + 0xc], 1
mov dword [edi], 0
call fcn.00410090
mov esi, dword [esp + 0x24]
mov eax, dword [esp + 0x10]
inc esi
mov dword [esp + 0x24], esi
cmp esi, 1
jne 0x40f06a
mov dword [esp + 0x6c], edi
cmp byte [0x4c30fc], 0
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
mov eax, dword [eax]
mov dword [esp + 0x30], eax
jne 0x47c28a
cmp dword [0x4c30f0], 0
je 0x40ecff
cmp byte [0x4c30f9], 0
jne 0x47bf74
mov esi, dword [0x4c30f4]
cmp dword [esi], 0
je 0x40ecff
mov ecx, dword [0x4c31f0]
mov byte [esp + 0x1f], 0
test cl, 1
je 0x47bf85
mov dword [0x4c3210], 0
mov dword [0x4c320c], 0
mov dword [esp + 0x40], 0x4c31f4
mov dword [esp + 0x68], 0x4c31f4
mov edx, dword [esi]
mov eax, dword [eax + 4]
mov ecx, dword [edx + 4]
mov dword [esp + 0x38], edx
mov dword [esp + 0x60], eax
test eax, eax
je 0x47bfae
test ecx, ecx
je 0x47bfb6
cmp eax, ecx
jb 0x40ec13
mov ecx, dword [edx]
mov edx, dword [esp + 0x30]
mov dword [esp + 0x3c], eax
mov edx, dword [edx]
test eax, eax
je 0x40ea44
lea esp, [esp]
mov ax, word [edx]
cmp ax, word [ecx]
jne 0x40ea48
add edx, 2
add ecx, 2
dec dword [esp + 0x3c]
jne 0x40ea30
xor eax, eax
jmp 0x40ea54
movzx eax, word [edx]
cmp ax, word [ecx]
sbb eax, eax
and eax, 0xfffffffe
inc eax
test eax, eax
js 0x40eadb
jle 0x40e7c8
mov eax, dword [esp + 0x60]
mov edx, dword [esp + 0x38]
mov ecx, dword [edx + 0x1c]
test ecx, ecx
je 0x40e7cd
mov edx, dword [ecx + 4]
cmp edx, eax
ja 0x40f0c5
mov ebx, dword [esp + 0x30]
mov dword [esp + 0x48], edx
mov ebx, dword [ebx]
mov dword [esp + 0x3c], ebx
mov ebx, dword [ecx]
mov dword [esp + 0x44], ebx
mov ebx, dword [esp + 0x34]
test edx, edx
je 0x40eace
mov eax, dword [esp + 0x44]
mov ebx, dword [esp + 0x3c]
mov ax, word [eax]
cmp ax, word [ebx]
mov ebx, dword [esp + 0x34]
mov eax, dword [esp + 0x44]
jne 0x40eb70
add dword [esp + 0x3c], 2
add eax, 2
dec dword [esp + 0x48]
mov dword [esp + 0x44], eax
jne 0x40eaa0
mov eax, dword [esp + 0x60]
cmp edx, eax
jb 0x40eb7c
jmp 0x40eb97
mov eax, dword [esp + 0x60]
mov edx, dword [esp + 0x38]
mov ecx, dword [edx + 0x18]
test ecx, ecx
je 0x40e7cd
mov edx, dword [ecx + 4]
cmp eax, edx
ja 0x40f104
mov ebx, dword [esp + 0x30]
mov edx, dword [ecx]
mov ebx, dword [ebx]
mov dword [esp + 0x44], ebx
mov ebx, dword [esp + 0x34]
mov dword [esp + 0x3c], eax
test eax, eax
je 0x40ee26
mov eax, dword [esp + 0x44]
lea esp, [esp]
mov ax, word [eax]
cmp ax, word [edx]
mov eax, dword [esp + 0x44]
je 0x40ee0e
mov ax, word [eax]
cmp ax, word [edx]
jae 0x40eb53
mov eax, dword [ecx + 0x1c]
mov edx, dword [esp + 0x38]
mov dword [edx + 0x18], eax
mov eax, dword [esi]
mov dword [ecx + 0x1c], eax
mov dword [esi], ecx
cmp dword [ecx + 0x18], 0
je 0x40e7cd
mov eax, dword [esi]
mov ecx, dword [esp + 0x40]
mov dword [ecx + 0x18], eax
mov eax, dword [esi]
mov dword [esp + 0x40], eax
mov eax, dword [eax + 0x18]
mov dword [esi], eax
mov eax, dword [esp + 0x30]
jmp 0x40e9f4
mov edx, dword [esp + 0x3c]
mov ax, word [eax]
cmp ax, word [edx]
jae 0x40eb97
mov eax, dword [ecx + 0x18]
mov edx, dword [esp + 0x38]
mov dword [edx + 0x1c], eax
mov eax, dword [esi]
mov dword [ecx + 0x18], eax
mov dword [esi], ecx
cmp dword [ecx + 0x1c], 0
je 0x40e7cd
mov eax, dword [esi]
mov ecx, dword [esp + 0x68]
mov dword [ecx + 0x1c], eax
mov eax, dword [esi]
mov dword [esp + 0x68], eax
mov eax, dword [eax + 0x1c]
mov dword [esi], eax
mov eax, dword [esp + 0x30]
jmp 0x40e9f4
cmp eax, 6
ja case.0x40ebb9.3
jmp dword [eax*4 + 0x40fff4]
test cl, cl
jne 0x40f13b
push 8
call fcn.00420f2a
add esp, 4
test eax, eax
je 0x40fee8
mov dword [eax], esi
mov dword [eax + 4], ebx
mov ebx, eax
mov dword [esp + 0x34], ebx
mov dword [esp + 0x58], ebx
inc dword [esp + 0x54]
cmp esi, 7
je 0x40f985
cmp esi, 8
je 0x40f985
mov esi, dword [ebp + 0xc]
mov eax, dword [esp + 0x28]
mov edi, dword [esp + 0x20]
mov dword [esp + 0x10], eax
jmp 0x40e838
mov eax, dword [esp + 0x30]
mov edx, dword [edx]
mov eax, dword [eax]
mov dword [esp + 0x3c], eax
test ecx, ecx
je 0x40ea44
jmp 0x40ec30
mov ax, word [eax]
cmp ax, word [edx]
mov eax, dword [esp + 0x3c]
je 0x40f8b4
movzx eax, word [eax]
cmp ax, word [edx]
jmp 0x40ea4e
mov esi, dword [esp + 0x24]
mov dword [esp + 0x18], 0x16
test esi, esi
jne 0x40f147
cmp edi, 0x4c3220
je 0x40eca5
cmp dword [edi + 0xc], 4
je 0x40f0cc
mov esi, dword [edi + 8]
test esi, esi
jne 0x40f0de
mov eax, dword [edi + 0xc]
cmp eax, 5
jge 0x47bc3e
push 0x4c3220
mov ecx, edi
mov dword [edi + 0xc], 1
mov dword [edi], 0
call fcn.00410090
mov esi, dword [esp + 0x24]
mov edx, dword [esp + 0x10]
mov eax, dword [ebp + 0xc]
inc esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [esp + 0x24], esi
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
cmp esi, 1
jne 0x40f193
mov esi, edi
mov ecx, dword [esi + 8]
mov eax, dword [eax]
mov dword [esp + 0x48], eax
test ecx, ecx
jne 0x47bd0d
mov eax, dword [esi + 0xc]
cmp eax, 5
jge 0x47bd1f
mov eax, dword [esp + 0x48]
mov dword [esi + 0xc], 1
mov dword [esi], eax
mov esi, dword [ebp + 0xc]
inc dword [esi]
jmp 0x40e838
mov eax, dword [esp + 0x30]
mov esi, dword [0x4c30e0]
test esi, esi
je 0x47c28a
mov ecx, dword [0x4c31f0]
mov byte [esp + 0x1f], 0
test cl, 1
je 0x47bfc3
mov dword [0x4c3210], 0
mov dword [0x4c320c], 0
mov dword [esp + 0x3c], 0x4c31f4
mov dword [esp + 0x68], 0x4c31f4
mov edx, dword [eax + 4]
mov ecx, dword [esi + 4]
mov dword [esp + 0x44], edx
test edx, edx
je 0x47bff2
test ecx, ecx
je 0x47bffa
cmp edx, ecx
jb 0x40eefd
mov ecx, dword [esi]
mov eax, edx
mov edx, dword [esp + 0x30]
mov dword [esp + 0x48], eax
mov edx, dword [edx]
test eax, eax
je 0x40ed98
lea esp, [esp]
mov ax, word [edx]
cmp ax, word [ecx]
jne 0x40ef4d
add edx, 2
add ecx, 2
dec dword [esp + 0x48]
jne 0x40ed80
xor eax, eax
mov edx, dword [esp + 0x44]
test eax, eax
js 0x40ef5e
jg 0x40ee3c
mov byte [esp + 0x1f], 1
cmp byte [esp + 0x1f], 0
mov eax, dword [esi + 0x18]
mov ecx, dword [esp + 0x68]
mov dword [ecx + 0x1c], eax
mov eax, dword [0x4c30e0]
mov ecx, dword [esp + 0x3c]
mov eax, dword [eax + 0x1c]
mov dword [ecx + 0x18], eax
mov ecx, dword [0x4c30e0]
mov eax, dword [0x4c3210]
mov dword [ecx + 0x18], eax
mov ecx, dword [0x4c30e0]
mov eax, dword [0x4c320c]
mov dword [ecx + 0x1c], eax
je 0x47c28a
mov eax, dword [0x4c30e0]
test eax, eax
je 0x47c28a
mov eax, dword [eax + 0x14]
test eax, eax
jne 0x40e819
jmp 0x47c28a
add eax, 2
add edx, 2
dec dword [esp + 0x3c]
mov dword [esp + 0x44], eax
jne 0x40eb20
mov eax, dword [esp + 0x60]
cmp eax, dword [ecx + 4]
jae 0x40eb53
jmp 0x40eb38
mov eax, dword [ebx + 4]
jmp 0x40e8ae
lea eax, [esi + 0x1c]
mov dword [esp + 0x38], eax
mov eax, dword [eax]
test eax, eax
je 0x40edb1
mov ecx, dword [eax + 4]
mov dword [esp + 0x40], ecx
cmp ecx, edx
jbe 0x40ee5e
mov ecx, edx
mov dword [esp + 0x40], edx
mov edx, dword [eax]
mov eax, dword [esp + 0x40]
mov dword [esp + 0x48], ecx
mov ecx, dword [esp + 0x30]
mov ecx, dword [ecx]
test eax, eax
je 0x40ee8a
mov ax, word [edx]
cmp ax, word [ecx]
jne 0x40ee92
add edx, 2
add ecx, 2
dec dword [esp + 0x48]
jne 0x40ee72
mov eax, dword [esp + 0x40]
cmp eax, dword [esp + 0x44]
jb 0x40ee94
jmp 0x40eeb7
jae 0x40eeb7
mov ecx, dword [esp + 0x38]
mov esi, dword [ecx]
mov eax, dword [esi + 0x18]
mov dword [ecx], eax
mov eax, dword [0x4c30e0]
mov dword [esi + 0x18], eax
mov dword [0x4c30e0], esi
cmp dword [esi + 0x1c], 0
je 0x40edb1
mov ecx, dword [esp + 0x68]
mov dword [ecx + 0x1c], esi
mov eax, dword [0x4c30e0]
mov dword [esp + 0x68], eax
mov esi, dword [eax + 0x1c]
mov eax, dword [esp + 0x30]
mov dword [0x4c30e0], esi
jmp 0x40ed45
lea eax, [esp + 0x20]
push eax
lea eax, [esp + 0x58]
push eax
call fcn.00410310
test eax, eax
js 0x40ff0c
mov ebx, dword [esp + 0x58]
mov dword [esp + 0x34], ebx
jmp 0x40e8a0
mov eax, dword [esi]
mov ebx, dword [esp + 0x30]
mov dword [esp + 0x38], eax
mov eax, dword [ebx]
mov ebx, dword [esp + 0x34]
mov dword [esp + 0x40], eax
test ecx, ecx
je 0x40f122
lea esp, [esp]
mov ebx, dword [esp + 0x38]
mov ax, word [eax]
cmp ax, word [ebx]
mov ebx, dword [esp + 0x34]
mov eax, dword [esp + 0x40]
je 0x40f10f
movzx eax, word [eax]
mov ecx, dword [esp + 0x38]
cmp ax, word [ecx]
sbb eax, eax
and eax, 0xfffffffe
inc eax
jmp 0x40ed9e
movzx eax, word [edx]
cmp ax, word [ecx]
sbb eax, eax
and eax, 0xfffffffe
inc eax
jmp 0x40ed9a
mov ecx, dword [esi + 0x18]
lea eax, [esi + 0x18]
mov dword [esp + 0x44], eax
test ecx, ecx
je 0x40edb1
mov eax, dword [ecx + 4]
cmp edx, eax
ja 0x40f8cc
mov eax, dword [ecx]
mov ebx, dword [esp + 0x30]
mov dword [esp + 0x38], eax
mov eax, dword [ebx]
mov ebx, dword [esp + 0x34]
mov dword [esp + 0x48], edx
mov dword [esp + 0x40], eax
test edx, edx
je 0x40f017
jmp 0x40efa0
mov ebx, dword [esp + 0x38]
mov ax, word [eax]
cmp ax, word [ebx]
mov ebx, dword [esp + 0x34]
mov eax, dword [esp + 0x40]
je 0x40f005
mov edx, dword [esp + 0x38]
mov ax, word [eax]
cmp ax, word [edx]
jae 0x40efe3
mov esi, ecx
mov ecx, dword [esp + 0x44]
mov eax, dword [esi + 0x1c]
mov dword [ecx], eax
mov eax, dword [0x4c30e0]
mov dword [esi + 0x1c], eax
mov dword [0x4c30e0], esi
cmp dword [esi + 0x18], 0
je 0x40edb1
mov ecx, dword [esp + 0x3c]
mov dword [ecx + 0x18], esi
mov eax, dword [0x4c30e0]
mov dword [esp + 0x3c], eax
mov esi, dword [eax + 0x18]
mov eax, dword [esp + 0x30]
mov dword [0x4c30e0], esi
jmp 0x40ed45
add dword [esp + 0x38], 2
add eax, 2
dec dword [esp + 0x48]
mov dword [esp + 0x40], eax
jne 0x40efa0
cmp edx, dword [ecx + 4]
jae 0x40efe3
jmp 0x40efc0
cmp byte [esp + 0x2d], 0
jne 0x40f6a4
push 0x18
call fcn.00420f2a
mov esi, eax
add esp, 4
test esi, esi
je 0x40fed5
push 0x4c3220
mov ecx, esi
mov dword [esi + 8], 0
call fcn.00410090
mov eax, dword [esp + 0x10]
mov dword [esi + 0x10], eax
mov eax, esi
mov esi, dword [esp + 0x24]
mov dword [esp + 0x10], eax
mov dword [esp + 0x28], eax
jmp 0x40e960
cmp byte [esp + 0x2d], 0
jne 0x40fedc
mov dword [esp + 0x6c], eax
jmp 0x40e972
mov ebx, dword [esp + 0x10]
mov ecx, dword [ebx + 8]
mov esi, dword [ebx + 0x10]
mov dword [esp + 0x48], ecx
test ecx, ecx
jne 0x40fa70
mov eax, dword [ebx + 0xc]
cmp eax, 5
jge 0x40fbe7
push ebx
mov dword [ebx + 0xc], 1
mov dword [ebx], 0
call fcn.00420f9e
add esp, 4
mov ebx, esi
test esi, esi
jne 0x40f082
mov ebx, dword [esp + 0x34]
jmp 0x40e8e1
mov edx, eax
jmp 0x40ea80
cmp dword [0x4c322c], 4
jne 0x40ec71
jmp 0x47bc11
mov eax, dword [esi + 0xc]
dec dword [eax]
mov eax, dword [esi + 0xc]
cmp dword [eax], 0
je 0x47bc24
push esi
call fcn.00420f9e
add esp, 4
mov dword [edi + 8], 0
jmp 0x40ec7c
mov eax, edx
mov dword [esp + 0x60], edx
jmp 0x40eaf9
add dword [esp + 0x38], 2
add eax, 2
mov dword [esp + 0x40], eax
dec ecx
jne 0x40ef20
xor eax, eax
jmp 0x40ed9e
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov esi, 0xd
mov dword [ecx], eax
jmp 0x40e898
mov dword [ebx], esi
mov byte [esp + 0x5d], 0
jmp 0x40ebe9
cmp byte [esp + 0x2d], 0
jne 0x40f852
push 0x18
call fcn.00420f2a
mov esi, eax
add esp, 4
test esi, esi
je 0x40fec6
push 0x4c3220
mov ecx, esi
mov dword [esi + 8], 0
call fcn.00410090
mov eax, dword [esp + 0x10]
mov edx, esi
mov dword [esi + 0x10], eax
mov esi, dword [esp + 0x24]
mov dword [esp + 0x10], edx
mov dword [esp + 0x28], edx
jmp 0x40eca9
cmp byte [esp + 0x2d], 0
jne 0x40fecd
mov esi, edx
jmp 0x40ecc7
test cl, cl
je 0x40f6f5
mov eax, dword [ebx + 4]
cmp dword [eax], 0x12
je 0x40f235
test cl, cl
jne 0x40f84a
mov eax, ebx
cmp dword [eax], 0x14
je 0x40ff15
lea eax, [esp + 0x20]
push eax
lea eax, [esp + 0x58]
push eax
call fcn.00410310
test eax, eax
js 0x40ff0c
mov ebx, dword [esp + 0x58]
mov cl, byte [esp + 0x5d]
mov dword [esp + 0x34], ebx
jmp case.0x40ebb9.2
test ecx, ecx
je 0x40f211
mov eax, dword [esi + ecx*4 - 4]
movzx eax, word [eax + 8]
cmp ax, 0x48
je 0x47b827
cmp ax, 0x4f
je 0x47b827
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov esi, 0x12
mov dword [ecx], eax
jmp 0x40e898
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov esi, 0x13
mov dword [ecx], eax
jmp 0x40e898
test cl, cl
je 0x40f253
mov esi, dword [ebx + 4]
push ebx
call fcn.00420f9e
mov ebx, esi
mov esi, dword [esp + 0x1c]
add esp, 4
mov dword [esp + 0x34], ebx
mov dword [esp + 0x58], ebx
cmp byte [esp + 0x5c], 0
je 0x47c007
mov byte [esp + 0x5d], 1
dec dword [esp + 0x54]
jmp case.0x40ebb9.3
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov esi, 1
mov dword [ecx], eax
jmp 0x40e898
cmp dword [esp + 0x24], 0
mov dword [esp + 0x18], 0x16
je 0x40fade
cmp byte [esp + 0x2d], 0
jne 0x40fb65
push 0x18
call fcn.00420f2a
mov esi, eax
add esp, 4
test esi, esi
je 0x40fe98
push 0x4c3220
mov ecx, esi
mov dword [esi + 8], 0
call fcn.00410090
mov eax, dword [esp + 0x10]
mov dword [esi + 0x10], eax
mov eax, esi
mov dword [esp + 0x10], eax
mov dword [esp + 0x28], eax
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov edx, dword [eax + 4]
mov ecx, dword [esi]
inc dword [esp + 0x24]
mov eax, dword [edx + ecx*4 + 4]
cmp word [eax + 8], 0x47
jne 0x47b4f4
cmp dword [esp + 0x24], 1
je 0x40faef
cmp byte [esp + 0x2d], 0
mov eax, dword [esp + 0x10]
jne 0x40fe9f
mov dword [esp + 0x30], eax
mov dword [esp + 0x70], 0x49ec4c
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov eax, dword [edx + ecx*4]
mov ecx, dword [eax]
movsx eax, word [eax + 0xa]
mov dword [esp + 0x40], eax
mov eax, dword [0x4c3214]
mov dword [esp + 0x60], ecx
test al, 1
je 0x40fdc8
cmp ecx, dword [0x4c3218]
je 0x47b510
mov eax, dword [ebp + 8]
inc dword [esi]
mov ecx, dword [esi]
mov edx, dword [eax + 4]
mov eax, dword [edx + ecx*4]
cmp word [eax + 8], 0x47
jne 0x47c114
lea eax, [ecx + 1]
mov dword [esi], eax
mov dword [esp + 0x48], eax
xor esi, esi
mov dword [esp + 0x80], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [edx + ecx*4]
movsx eax, word [eax + 8]
sub eax, 0x47
je 0x40f894
dec eax
je 0x40f3af
sub eax, 0x37
je 0x40fef7
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
jmp 0x40f384
test esi, esi
jne 0x40f886
mov edx, dword [ebp + 0xc]
mov dword [esp + 0x6c], esi
mov ecx, dword [edx]
mov dword [esp + 0x38], ecx
lea eax, [ecx + 1]
mov dword [edx], eax
cmp dword [esp + 0x48], ecx
jae 0x40f4de
jmp 0x40f3e0
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x98], 0
mov dword [esp + 0xa0], 0
mov dword [esp + 0xa4], 1
cmp dword [esp + 0x78], eax
jne 0x40f446
add eax, eax
cmp eax, 8
jae 0x40f417
mov eax, 8
xor ecx, ecx
mov dword [esp + 0x7c], eax
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00420f2a
mov esi, eax
mov eax, dword [esp + 0x78]
add esp, 4
test eax, eax
jne 0x47b540
mov dword [esp + 0x74], esi
push 0x10
call fcn.00420f2a
mov esi, eax
add esp, 4
test esi, esi
je 0x40fea7
lea eax, [esp + 0x98]
push eax
mov ecx, esi
mov dword [esi + 8], 0
call fcn.00410090
mov ecx, dword [esp + 0x78]
mov eax, dword [esp + 0x74]
push dword [esp + 0x38]
mov dword [eax + ecx*4], esi
mov ecx, dword [esp + 0x7c]
mov eax, dword [esp + 0x78]
inc ecx
mov dword [esp + 0x7c], ecx
push dword [eax + ecx*4 - 4]
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x88]
push eax
push dword [ebp + 8]
call fcn.0040e730
test eax, eax
js 0x47c0f3
mov esi, dword [esp + 0x6c]
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x38]
inc esi
mov dword [esp + 0x6c], esi
cmp ecx, edx
jne 0x40fa96
mov dword [esp + 0xa4], 1
mov dword [esp + 0x98], 0
mov ecx, dword [esp + 0x14]
push dword [esp + 0x60]
add ecx, 0x49c
call fcn.00413400
cmp esi, dword [eax + 0x18]
jl 0x40ff01
mov ecx, dword [esp + 0x14]
push dword [esp + 0x60]
lea ecx, [ecx + 0x49c]
call fcn.00413400
cmp esi, dword [eax + 0x1c]
jg 0x40ff01
mov esi, dword [esp + 0x30]
mov ecx, dword [esi + 8]
test ecx, ecx
jne 0x47b56b
mov eax, dword [esi + 0xc]
cmp eax, 5
jge 0x47b57d
mov edx, dword [esp + 0x14]
mov dword [esi + 0xc], 1
mov dword [esi], 1
mov eax, dword [edx]
mov ecx, dword [eax + 4]
mov eax, dword [ecx + edx + 8]
add ecx, edx
cmp byte [ecx + 0xd], 0
jne 0x40feae
mov dword [eax + 0x14], 0
cmp byte [ecx + 0xd], 0
mov eax, dword [ecx + 8]
jne 0x40feb6
mov byte [eax + 0x18], 0
mov eax, dword [edx]
mov esi, dword [eax + 4]
add esi, edx
mov dword [esp + 0x48], esi
cmp byte [esi + 0xd], 0
jne 0x47b62c
mov esi, dword [esi + 8]
mov ecx, dword [esi + 0x28]
test ecx, ecx
jne 0x47b637
mov eax, dword [esi + 0x2c]
cmp eax, 5
jge 0x47b64d
mov eax, dword [esp + 0x48]
mov dword [esi + 0x2c], 1
mov dword [esi + 0x20], 0
cmp byte [eax + 0xd], 0
mov eax, dword [eax + 8]
jne 0x40febe
push dword [esp + 0x60]
lea ecx, [edx + 0x49c]
mov byte [eax + 0x30], 0
call fcn.00413400
mov edx, dword [eax + 0x10]
mov ecx, dword [eax + 0x14]
mov esi, dword [eax + 0xc]
push dword [esp + 0x30]
lea eax, [esp + 0x74]
push eax
mov eax, dword [esp + 0x1c]
mov eax, dword [eax]
mov ecx, dword [ecx + eax]
add ecx, edx
add ecx, dword [esp + 0x1c]
call esi
test eax, eax
js 0x47c12e
xor esi, esi
mov dword [esp + 0x70], 0x49ec4c
cmp dword [esp + 0x78], esi
jbe 0x40f642
jmp 0x40f610
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + esi*4]
mov dword [esp + 0x48], ecx
test ecx, ecx
je 0x40f634
call fcn.00413120
push dword [esp + 0x48]
call fcn.00420f9e
mov eax, dword [esp + 0x78]
add esp, 4
mov dword [eax + esi*4], 0
inc esi
cmp esi, dword [esp + 0x78]
jb 0x40f610
push dword [esp + 0x74]
mov dword [esp + 0x7c], 0
call fcn.00420f9e
add esp, 4
mov eax, dword [esp + 0x14]
cmp dword [eax + 0xfc], 1
je 0x47b534
mov esi, dword [ebp + 0xc]
jmp 0x40e838
mov eax, dword [esp + 0x18]
cmp eax, 0x16
jne 0x40f8e5
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov dword [esp + 0x18], 0xb
mov esi, dword [esp + 0x18]
mov dword [ecx], eax
jmp 0x40e8a0
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
xor esi, esi
mov dword [ecx], eax
jmp 0x40e898
mov eax, dword [esp + 0x10]
cmp eax, 0x4c3220
je 0x40f6eb
cmp dword [eax + 0xc], 4
je 0x40fd41
mov ecx, dword [eax + 8]
test ecx, ecx
jne 0x40fd53
mov eax, dword [eax + 0xc]
cmp eax, 5
jge 0x47bea3
mov ecx, dword [esp + 0x10]
push 0x4c3220
mov dword [ecx + 0xc], 1
mov dword [ecx], 0
call fcn.00410090
mov byte [esp + 0x2d], 0
jmp 0x40e95c
mov eax, ebx
jmp 0x40f1b0
cmp dword [0x4c322c], 4
jne 0x40e928
jmp 0x47bdce
mov eax, dword [esi + 0xc]
dec dword [eax]
mov eax, dword [esi + 0xc]
cmp dword [eax], 0
je 0x40fc69
push esi
call fcn.00420f9e
add esp, 4
mov dword [edi + 8], 0
jmp 0x40e933
mov esi, dword [esp + 0x24]
mov dword [esp + 0x18], 0x16
test esi, esi
jne 0x40f931
cmp edi, 0x4c3220
je 0x40f76d
cmp dword [edi + 0xc], 4
je 0x47b370
mov ecx, edi
call fcn.00411260
push 0x4c3220
mov ecx, edi
call fcn.00410090
mov edx, dword [esp + 0x10]
mov eax, dword [ebp + 0xc]
inc esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [esp + 0x24], esi
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
cmp esi, 1
jne 0x40f973
mov esi, edi
cmp dword [esi + 0xc], 4
mov eax, dword [eax]
mov ecx, dword [esi + 8]
mov dword [esp + 0x48], eax
je 0x47b3a3
test ecx, ecx
jne 0x47b3ae
mov eax, dword [esi + 0xc]
cmp eax, 5
jge 0x47b3c0
push 0x10
mov dword [esi], 0
mov dword [esi + 0xc], 4
call fcn.00420f2a
mov edx, eax
add esp, 4
test edx, edx
je 0x40fe91
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
mov dword [edx], ecx
mov ecx, dword [eax + 4]
mov dword [edx + 4], ecx
mov ecx, dword [eax + 8]
mov dword [edx + 8], ecx
mov eax, dword [eax + 0xc]
mov dword [edx + 0xc], eax
inc dword [eax]
mov dword [esi + 8], edx
mov esi, dword [ebp + 0xc]
mov eax, dword [esp + 0x14]
inc dword [esi]
cmp byte [eax + 0x101], 0
jne 0x47b46f
cmp byte [eax + 0x102], 0
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
je 0x40e83e
jmp 0x47b487
mov eax, dword [esp + 0x18]
cmp eax, 0x16
jne 0x40fa50
mov dword [esp + 0x18], 0xc
mov esi, dword [esp + 0x18]
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
jmp 0x40e8a0
mov eax, dword [ebx + 4]
jmp 0x40f1c3
mov eax, dword [esp + 0x10]
cmp eax, 0x4c3220
je 0x40f87c
cmp dword [eax + 0xc], 4
je 0x47bced
mov ecx, eax
call fcn.00411260
mov ecx, dword [esp + 0x10]
push 0x4c3220
call fcn.00410090
mov byte [esp + 0x2d], 0
jmp 0x40eca5
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
dec esi
mov dword [ecx], eax
jmp 0x40f384
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
inc esi
mov dword [ecx], eax
jmp 0x40f384
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov esi, 0xe
mov dword [ecx], eax
jmp 0x40e898
add eax, 2
add edx, 2
mov dword [esp + 0x3c], eax
dec ecx
jne 0x40ec30
xor eax, eax
jmp 0x40ea54
mov edx, eax
jmp 0x40ef7b
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov esi, 9
mov dword [ecx], eax
jmp 0x40e898
cmp eax, 0x13
je 0x40f67c
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov dword [esp + 0x18], 0x11
mov esi, dword [esp + 0x18]
mov dword [ecx], eax
jmp 0x40e8a0
dec eax
cmp eax, 0x29
ja case.0x40f918.4
movzx eax, byte [eax + 0x410030]
jmp dword [eax*4 + 0x410010]
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov esi, 7
mov dword [ecx], eax
jmp 0x40e898
cmp byte [esp + 0x2d], 0
je 0x40fb0a
mov eax, dword [esp + 0x10]
cmp eax, 0x4c3220
je 0x40f969
cmp dword [0x4c322c], 4
je 0x40fd32
mov ecx, eax
call fcn.00411260
mov ecx, dword [esp + 0x10]
push 0x4c3220
call fcn.00410090
mov byte [esp + 0x2d], 0
jmp 0x40f76d
cmp byte [esp + 0x2d], 0
jne 0x40fe89
mov esi, edx
jmp 0x40f78f
mov esi, dword [esp + 0x24]
mov eax, dword [esp + 0x28]
mov edi, dword [esp + 0x20]
mov dword [esp + 0x10], eax
test esi, esi
je 0x40feef
cmp esi, 1
jne 0x47c02b
mov eax, edi
push eax
lea ecx, [esp + 0xf4]
mov dword [esp + 0xfc], 0
call fcn.00410090
lea ecx, [esp + 0xf0]
call fcn.00406ca8
mov ecx, dword [esp + 0x18]
test al, al
jne 0x40fc83
cmp ecx, 7
jne 0x40fa36
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0041e043
test eax, eax
js 0x47c2f9
cmp dword [esp + 0x18], 8
je 0x47c03e
cmp esi, 1
jne 0x47c062
mov esi, edi
mov ecx, esi
call fcn.00411260
mov dword [esi + 0xc], 9
mov byte [esi], 0
cmp byte [esp + 0x5d], 0
jne 0x47c07e
cmp byte [esp + 0x5c], 0
je 0x47c099
mov byte [esp + 0x5d], 1
dec dword [esp + 0x54]
lea ecx, [esp + 0xf0]
call fcn.00411260
mov esi, dword [ebp + 0xc]
mov eax, dword [ebp + 0x14]
mov edx, dword [ebp + 8]
jmp 0x40e83e
cmp eax, 0x13
je 0x40f831
jmp 0x47b793
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov esi, 5
mov dword [ecx], eax
jmp 0x40e898
mov eax, dword [ecx + 0xc]
dec dword [eax]
mov eax, dword [ecx + 0xc]
cmp dword [eax], 0
je 0x40fbc5
push ecx
call fcn.00420f9e
add esp, 4
mov dword [ebx + 8], 0
jmp 0x40f094
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
cmp word [eax + 8], 0x40
jne 0x47c0b9
lea eax, [ecx + 1]
cmp eax, edx
je 0x47c0b9
lea ecx, [esp + 0x98]
mov dword [esp + 0x80], eax
call fcn.00411260
mov ecx, dword [esp + 0x38]
cmp dword [esp + 0x80], ecx
jb 0x40f3e0
jmp 0x40f4de
push 0x4c3220
mov ecx, edi
call fcn.0040c581
jmp 0x40f2d4
mov dword [esp + 0x30], edi
jmp 0x40f310
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov esi, 2
mov dword [ecx], eax
jmp 0x40e898
push 0x18
call fcn.00420f2a
mov esi, eax
add esp, 4
test esi, esi
je 0x40fe82
push 0x4c3220
mov ecx, esi
mov dword [esi + 8], 0
call fcn.00410090
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x40fc99
mov edx, esi
mov dword [esi + 0x10], eax
mov esi, dword [esp + 0x24]
mov dword [esp + 0x10], edx
mov dword [esp + 0x28], edx
jmp 0x40f771
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov esi, 4
mov dword [ecx], eax
jmp 0x40e898
mov ecx, dword [esp + 0x10]
push 0x4c3220
call fcn.0040c581
mov byte [esp + 0x2d], 0
jmp 0x40f2d4
push 0x4c3220
lea ecx, [esp + 0x24]
mov dword [esp + 0x1c], 0x16
call fcn.0040b322
lea ecx, [esp + 0x20]
call fcn.0041f02d
mov esi, eax
mov ecx, esi
call fcn.00411260
mov eax, dword [esp + 0x28]
mov edi, dword [esp + 0x20]
mov dword [esi + 0xc], 9
mov byte [esi], 0
mov esi, dword [ebp + 0xc]
mov dword [esp + 0x10], eax
inc dword [esi]
jmp 0x40e838
push dword [ecx]
call fcn.00420f9e
mov eax, dword [esp + 0x4c]
add esp, 4
push dword [eax + 0xc]
call fcn.00420f9e
mov ecx, dword [esp + 0x4c]
add esp, 4
jmp 0x40fa81
sub eax, 5
cmp eax, 0xa
ja case.0x40fbf3.6
jmp dword [eax*4 + 0x41005c]
push 0x4c3220
lea ecx, [esp + 0x24]
mov dword [esp + 0x1c], 0x16
call fcn.0040b322
mov byte [esp + 0xa8], 1
push dword [esp + 0xa8]
lea ecx, [esp + 0x24]
call fcn.0041f02d
mov ecx, eax
call fcn.0041f33c
mov esi, dword [ebp + 0xc]
mov eax, dword [esp + 0x28]
inc dword [esi]
mov edi, dword [esp + 0x20]
mov dword [esp + 0x10], eax
jmp 0x40e838
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov esi, 3
mov dword [ecx], eax
jmp 0x40e898
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov esi, 8
mov dword [ecx], eax
jmp 0x40e898
push dword [esi]
call fcn.00420f9e
add esp, 4
push dword [esi + 0xc]
call fcn.00420f9e
add esp, 4
jmp 0x40f71f
cmp ecx, 8
je 0x40f9dd
test al, al
jne 0x40fa36
jmp 0x40f9d8
mov edx, esi
mov dword [esi + 0x10], eax
mov esi, dword [esp + 0x24]
mov dword [esp + 0x10], edx
mov dword [esp + 0x28], edx
jmp 0x40f771
or eax, 1
push 0x47289f
mov dword [0x4c321c], eax
mov dword [0x4c3220], 0
mov dword [0x4c3228], 0
mov dword [0x4c322c], 1
call fcn.0042294a
add esp, 4
jmp 0x40e750
push 0x4c3220
lea ecx, [esp + 0x24]
mov dword [esp + 0x1c], 0x16
call fcn.0040b322
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov edx, dword [esi]
lea ecx, [esp + 0x20]
lea eax, [edx + 1]
mov dword [esi], eax
mov eax, dword [edi + 4]
mov edx, dword [eax + edx*4]
call fcn.0041f02d
mov ecx, dword [esp + 0x14]
push eax
push dword [edx]
call fcn.0041f044
test eax, eax
jns 0x40ec02
jmp 0x47c16f
cmp dword [eax + 0xc], 4
jne 0x40f954
jmp 0x47b390
cmp dword [0x4c322c], 4
jne 0x40f6b9
jmp 0x47be90
push ecx
call fcn.0040b60d
mov eax, dword [esp + 0x10]
mov dword [eax + 8], 0
jmp 0x40f6c4
push 0x4c3220
lea ecx, [esp + 0x24]
mov dword [esp + 0x1c], 0x16
call fcn.0040b322
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
lea ecx, [esp + 0x20]
fld qword [eax]
fstp qword [esp + 0x48]
call fcn.0041f02d
mov esi, eax
mov ecx, esi
call fcn.00411260
fld qword [esp + 0x48]
mov eax, dword [esp + 0x28]
fstp qword [esi]
mov edi, dword [esp + 0x20]
mov dword [esi + 0xc], 3
mov esi, dword [ebp + 0xc]
mov dword [esp + 0x10], eax
inc dword [esi]
jmp 0x40e838
or eax, 1
push str.CALL
lea ecx, [esp + 0x11c]
mov dword [0x4c3214], eax
call fcn.0040b800
mov ecx, dword [0x4c3104]
push dword [eax]
mov edx, dword [ecx]
call dword [edx + 4]
lea ecx, [esp + 0x118]
mov dword [0x4c3218], eax
call fcn.004061e5
mov ecx, dword [esp + 0x60]
jmp 0x40f34e
push 0x4c3220
lea ecx, [esp + 0x24]
mov dword [esp + 0x1c], 0x16
call fcn.0040b322
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov ecx, dword [esi]
mov edx, dword [edi + 4]
mov eax, dword [edx + ecx*4 + 4]
cmp word [eax + 8], 0x47
jne 0x47b721
lea eax, [esp + 0x87]
push eax
lea ecx, [esp + 0x24]
call fcn.0041f02d
push eax
push esi
push edi
mov edi, dword [esp + 0x24]
push 0
mov ecx, edi
call fcn.00412370
test eax, eax
js 0x40fe6a
cmp dword [edi + 0xfc], 1
jne 0x40ec02
mov edi, dword [esp + 0x28]
mov dword [esp + 0x10], edi
jmp 0x47b534
xor ebx, ebx
mov dword [esp + 0x34], ebx
jmp 0x40e795
xor esi, esi
jmp 0x40fb31
mov esi, dword [edx + 0x10]
jmp 0x40f78f
xor edx, edx
jmp 0x40f7f3
xor esi, esi
jmp 0x40f2c3
mov eax, dword [eax + 0x10]
jmp 0x40f30c
xor esi, esi
jmp 0x40f470
mov eax, dword [eax + 0x38]
jmp 0x40f557
mov eax, dword [eax + 0x38]
jmp 0x40f56b
mov eax, dword [eax + 0x38]
jmp 0x40f5bd
xor esi, esi
jmp 0x40f179
mov esi, dword [edx + 0x10]
jmp 0x40ecc7
xor esi, esi
jmp 0x40f050
mov eax, dword [eax + 0x10]
mov dword [esp + 0x6c], eax
jmp 0x40e972
xor eax, eax
jmp 0x40ebdc
mov esi, dword [ebp + 0xc]
jmp 0x40e838
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
jmp 0x47c114
push dword [esp + 0x40]
push 0x70
jmp 0x47c125
push dword [esp + 0x64]
jmp 0x47c1fd
push dword [esp + 0x64]
push 0x6d
jmp 0x47c182
push dword [esp + 0x64]
push 0x6e
jmp 0x47c182
cmp dword [0x4c322c], 4
jne 0x40f75a
push dword [0x4c3228]
mov ecx, dword [edi + 8]
call fcn.0040bfa5
jmp 0x40f76d
push dword [0x4c3228]
mov ecx, dword [eax + 8]
call fcn.0040bfa5
jmp 0x40f969
push eax
call fcn.0040bfa5
jmp 0x40f7f6
push ecx
call fcn.0040b60d
mov dword [esi + 8], 0
jmp 0x40f7aa
sub eax, 5
cmp eax, 0xa
ja case.0x47b3cc.6
jmp dword [eax*4 + 0x47c3bc]
mov eax, dword [esi]
test eax, eax
je case.0x47b3cc.6
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [esi]
call fcn.00420f9e
add esp, 4
jmp case.0x47b3cc.6
mov ecx, dword [esi]
test ecx, ecx
je case.0x47b3cc.6
push ecx
call fcn.004463b9
jmp case.0x47b3cc.6
mov ecx, esi
call fcn.0041f3e0
jmp case.0x47b3cc.6
mov eax, dword [esi]
push dword [eax + 4]
call fcn.00420f9e
add esp, 4
push dword [esi]
call fcn.00420f9e
add esp, 4
jmp case.0x47b3cc.6
mov ecx, dword [esi]
test ecx, ecx
je case.0x47b3cc.6
push ecx
call fcn.0043b20f
jmp case.0x47b3cc.6
mov ecx, dword [esi]
test ecx, ecx
je case.0x47b3cc.6
push ecx
call fcn.0043b239
jmp case.0x47b3cc.6
mov ecx, dword [esi]
test ecx, ecx
je case.0x47b3cc.6
push ecx
call fcn.0040b60d
jmp case.0x47b3cc.6
lea ecx, [esp + 0x20]
call fcn.0041f02d
push eax
call fcn.0045fedb
mov eax, dword [esp + 0x14]
jmp 0x40f80c
lea ecx, [esp + 0x20]
call fcn.0041f02d
mov ecx, dword [esp + 0x14]
push eax
call fcn.00460026
jmp 0x40fa45
push 0x4c3220
lea ecx, [esp + 0x24]
mov dword [esp + 0x1c], 0x16
call fcn.0040b322
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
lea ecx, [esp + 0x20]
mov edi, dword [eax]
mov ebx, dword [eax + 4]
call fcn.0041f02d
mov esi, eax
mov ecx, esi
call fcn.00411260
mov dword [esi + 4], ebx
mov ebx, dword [esp + 0x34]
mov dword [esi + 0xc], 2
mov dword [esi], edi
mov esi, dword [ebp + 0xc]
inc dword [esi]
jmp 0x40ec02
mov eax, dword [edx + ecx*4]
lea ecx, [esp + 0x20]
push dword [eax]
call fcn.0041f02d
mov ecx, eax
call fcn.0044c00b
inc dword [esi]
jmp 0x40e838
push dword [esp + 0x30]
mov ecx, dword [esp + 0x18]
push esi
push dword [ebp + 8]
call fcn.0045f79c
lea ecx, [esp + 0x70]
mov esi, eax
call fcn.00441169
test esi, esi
jns 0x40f656
mov eax, dword [esp + 0x10]
or edi, 0xffffffff
jmp 0x40e8d9
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x40f442
shl ecx, 2
push ecx
push eax
push esi
call fcn.004208c0
add esp, 0xc
push dword [esp + 0x74]
call fcn.00420f9e
add esp, 4
jmp 0x40f442
push ecx
call fcn.0040b60d
mov dword [esi + 8], 0
jmp 0x40f525
sub eax, 5
cmp eax, 0xa
ja case.0x47b589.6
jmp dword [eax*4 + 0x47c3e8]
mov eax, dword [esi]
test eax, eax
je case.0x47b589.6
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [esi]
call fcn.00420f9e
add esp, 4
jmp case.0x47b589.6
mov ecx, dword [esi]
test ecx, ecx
je case.0x47b589.6
push ecx
call fcn.004463b9
jmp case.0x47b589.6
mov ecx, esi
call fcn.0041f3e0
jmp case.0x47b589.6
mov eax, dword [esi]
push dword [eax + 4]
call fcn.00420f9e
add esp, 4
push dword [esi]
call fcn.00420f9e
add esp, 4
jmp case.0x47b589.6
mov ecx, dword [esi]
test ecx, ecx
je case.0x47b589.6
push ecx
call fcn.0043b20f
jmp case.0x47b589.6
mov ecx, dword [esi]
test ecx, ecx
je case.0x47b589.6
push ecx
call fcn.0043b239
jmp case.0x47b589.6
mov ecx, dword [esi]
test ecx, ecx
je case.0x47b589.6
push ecx
call fcn.0040b60d
jmp case.0x47b589.6
mov eax, dword [esi + 8]
mov esi, dword [eax + 0x38]
jmp 0x40f587
push ecx
call fcn.0040b60d
mov edx, dword [esp + 0x14]
mov dword [esi + 0x28], 0
jmp 0x40f592
sub eax, 5
cmp eax, 0xa
ja case.0x47b659.6
jmp dword [eax*4 + 0x47c414]
mov eax, dword [esi + 0x20]
test eax, eax
je case.0x47b659.6
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [esi + 0x20]
call fcn.00420f9e
mov edx, dword [esp + 0x18]
add esp, 4
jmp case.0x47b659.6
mov ecx, dword [esi + 0x20]
test ecx, ecx
je case.0x47b659.6
push ecx
call fcn.004463b9
mov edx, dword [esp + 0x14]
jmp case.0x47b659.6
lea ecx, [esi + 0x20]
call fcn.0041f3e0
mov edx, dword [esp + 0x14]
jmp case.0x47b659.6
mov eax, dword [esi + 0x20]
push dword [eax + 4]
call fcn.00420f9e
add esp, 4
push dword [esi + 0x20]
call fcn.00420f9e
mov edx, dword [esp + 0x18]
add esp, 4
jmp case.0x47b659.6
mov ecx, dword [esi + 0x20]
test ecx, ecx
je case.0x47b659.6
push ecx
call fcn.0043b20f
mov edx, dword [esp + 0x14]
jmp case.0x47b659.6
mov ecx, dword [esi + 0x20]
test ecx, ecx
je case.0x47b659.6
push ecx
call fcn.0043b239
mov edx, dword [esp + 0x14]
jmp case.0x47b659.6
mov ecx, dword [esi + 0x20]
test ecx, ecx
je case.0x47b659.6
push ecx
call fcn.0040b60d
mov edx, dword [esp + 0x14]
jmp case.0x47b659.6
mov eax, dword [edx + ecx*4]
mov ecx, dword [eax]
mov eax, dword [ecx]
mov dword [esp + 0xb0], eax
mov eax, dword [ecx + 4]
mov dword [esp + 0xb4], eax
mov eax, dword [ecx + 8]
mov dword [esp + 0xb8], eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [esp + 0x14]
inc dword [eax]
mov dword [esp + 0xbc], eax
lea eax, [esp + 0xb0]
push eax
call fcn.0041a799
test eax, eax
je 0x47c143
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x24]
call fcn.0041f02d
mov ecx, eax
call fcn.0044ca48
inc dword [esi]
lea ecx, [esp + 0xb0]
call fcn.004061e5
jmp 0x40ec02
mov dword [esp + 0x18], 0x10
jmp 0x40f839
cmp dword [esp + 0x24], 0
mov dword [esp + 0x18], 0x16
je 0x47c1c0
lea eax, [esp + 0xd0]
push eax
lea ecx, [esp + 0x24]
mov dword [esp + 0xd4], 0
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], 1
call fcn.0041f02d
mov esi, dword [ebp + 0xc]
mov ecx, dword [esp + 0x18]
push eax
push esi
push dword [ebp + 8]
call fcn.0040e3c0
test eax, eax
js 0x47c190
lea eax, [esp + 0xd0]
push eax
lea ecx, [esp + 0x24]
call fcn.0041f02d
mov ecx, eax
call fcn.0040c581
lea ecx, [esp + 0xd0]
call fcn.00411260
jmp 0x40e838
cmp dword [esp + 0x24], 0
je 0x47c1c0
lea eax, [esp + 0xc0]
push eax
lea ecx, [esp + 0x24]
mov dword [esp + 0xc4], 0
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], 1
call fcn.0041f02d
mov esi, dword [ebp + 0xc]
mov ecx, dword [esp + 0x18]
push eax
push esi
push dword [ebp + 8]
call fcn.0040e3c0
test eax, eax
js 0x47c1a8
lea eax, [esp + 0xc0]
push eax
lea ecx, [esp + 0x24]
call fcn.0041f02d
mov ecx, eax
call fcn.0040c581
lea ecx, [esp + 0xc0]
call fcn.00411260
jmp 0x40e838
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov esi, 6
mov dword [ecx], eax
jmp 0x40e898
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov esi, 0xf
mov dword [ecx], eax
jmp 0x40e898
lea ecx, [esp + 0x54]
call fcn.00403b90
mov eax, dword [eax]
cmp eax, 0x14
je 0x47b8f7
cmp eax, 0x12
je 0x47b8f7
lea eax, [esp + 0x20]
push eax
lea eax, [esp + 0x58]
push eax
call fcn.00410310
test eax, eax
jns case.0x40e878.87
jmp 0x40ff0c
cmp dword [esp + 0x24], 0
je 0x47c1ea
lea ecx, [esp + 0x20]
call fcn.0041f02d
mov ecx, eax
call fcn.0044b7a5
lea ecx, [esp + 0x20]
test al, al
je 0x47b978
call fcn.0041e3a1
mov ebx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
inc dword [ebx]
mov edx, dword [ebx]
mov esi, dword [eax + 4]
mov ecx, 1
mov eax, dword [esi + edx*4]
movzx eax, word [eax + 8]
cmp ax, 0x57
jne 0x47b941
inc ecx
jmp 0x47b95a
cmp ax, 0x58
jne 0x47b94a
dec ecx
jmp 0x47b95a
cmp ax, 0x7f
je 0x47b961
cmp ax, 0x40
jne 0x47b95a
test ecx, ecx
je 0x47b961
inc edx
mov dword [ebx], edx
test ecx, ecx
jne 0x47b931
mov esi, ebx
mov ebx, dword [esp + 0x58]
mov dword [esp + 0x18], 0x12
mov dword [esp + 0x34], ebx
jmp 0x40ec02
call fcn.0041e3a1
mov esi, dword [ebp + 0xc]
mov ebx, dword [esp + 0x58]
inc dword [esi]
mov dword [esp + 0x18], 0x12
mov dword [esp + 0x34], ebx
jmp 0x40ec02
cmp dword [esp + 0x24], 0
mov eax, dword [ebp + 0xc]
je 0x47c1c3
lea edx, [ecx + 1]
mov dword [esp + 0x18], 0x16
mov dword [eax], edx
mov ecx, 1
mov ebx, eax
mov eax, dword [esi + edx*4]
movzx eax, word [eax + 8]
cmp ax, 0x47
jne 0x47b9c9
inc ecx
jmp 0x47b9e3
cmp ax, 0x48
jne 0x47b9d2
dec ecx
jmp 0x47b9e3
cmp ax, 0x7f
je 0x47b9ea
cmp ax, 0x40
jne 0x47b9e3
cmp ecx, 1
je 0x47b9ea
inc edx
mov dword [ebx], edx
test ecx, ecx
jne 0x47b9b9
mov edx, ebx
mov ebx, dword [esp + 0x34]
mov edx, dword [edx]
mov eax, dword [esi + edx*4 - 4]
mov esi, dword [ebp + 0xc]
cmp word [eax + 8], 0x48
mov eax, dword [ebp + 0x14]
jne 0x40fa48
test ecx, ecx
jne 0x40fa48
lea eax, [edx - 1]
mov dword [esi], eax
jmp 0x40e838
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov esi, 0xa
mov dword [ecx], eax
jmp 0x40e898
sub esp, 0x10
mov ecx, esp
push str.Default
mov dword [esp + 0x2c], 0x16
call fcn.0040b800
push 0xffffffffffffffff
push 0x29
jmp 0x47ba63
sub esp, 0x10
mov ecx, esp
push 0x49ec00
mov dword [esp + 0x2c], 0x16
call fcn.0040b800
push 0
push 0x2a
lea ecx, [esp + 0x118]
call fcn.0044a9d3
push 0x4c3220
lea ecx, [esp + 0x24]
call fcn.0040b322
lea eax, [esp + 0x100]
push eax
lea ecx, [esp + 0x24]
call fcn.0041f02d
mov ecx, eax
call fcn.0044b68c
mov esi, dword [ebp + 0xc]
lea ecx, [esp + 0x108]
inc dword [esi]
call fcn.004061e5
jmp 0x40ec02
mov dword [esp + 0x88], 0
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], 1
mov byte [esp + 0x1f], 1
test ecx, ecx
je 0x47bb04
mov eax, dword [esi + ecx*4 - 4]
movzx eax, word [eax + 8]
cmp ax, 0x48
je 0x47bae9
cmp ax, 0x4f
jne 0x47bb04
lea ecx, [esp + 0x20]
call fcn.0041f02d
push eax
lea ecx, [esp + 0x8c]
call fcn.0040c581
mov byte [esp + 0x1f], 0
lea ecx, [esp + 0x88]
call fcn.0045e081
test al, al
jne 0x47bb81
cmp byte [esp + 0x1f], al
je 0x47c215
mov esi, dword [esp + 0x14]
lea ecx, [esi + 0x16c]
call fcn.0045fb20
push eax
lea ecx, [esp + 0x8c]
call fcn.0040c581
lea ecx, [esp + 0x88]
call fcn.0045e081
test al, al
jne 0x47bb81
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
mov ecx, esi
movsx eax, word [eax + 0xa]
push eax
push 0xa7
call fcn.0044e569
lea ecx, [esp + 0x88]
call fcn.00411260
mov eax, dword [esp + 0x10]
or edi, 0xffffffff
jmp 0x40e8d9
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0xe0]
push eax
lea eax, [esp + 0x8c]
push eax
push esi
push edi
mov dword [esp + 0xf0], 0
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 1
call fcn.004603d8
test eax, eax
js 0x47c24e
cmp byte [esp + 0x1f], 0
mov dword [esp + 0x18], 0x16
jne 0x47bbe3
lea ecx, [esp + 0x20]
call fcn.0041e3a1
lea eax, [esp + 0xe0]
push eax
lea ecx, [esp + 0x24]
call fcn.0040b322
lea ecx, [esp + 0xe0]
call fcn.00411260
lea ecx, [esp + 0x88]
call fcn.00411260
jmp 0x40ec02
push dword [0x4c3228]
mov ecx, dword [edi + 8]
call fcn.0040bfa5
jmp 0x40eca5
push dword [esi]
call fcn.00420f9e
add esp, 4
push dword [esi + 0xc]
call fcn.00420f9e
add esp, 4
jmp 0x40f0ef
sub eax, 5
cmp eax, 0xa
ja case.0x47bc4a.6
jmp dword [eax*4 + 0x47c440]
mov eax, dword [edi]
test eax, eax
je case.0x47bc4a.6
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [edi]
call fcn.00420f9e
add esp, 4
jmp case.0x47bc4a.6
mov ecx, dword [edi]
test ecx, ecx
je case.0x47bc4a.6
push ecx
call fcn.004463b9
jmp case.0x47bc4a.6
mov ecx, edi
call fcn.0041f3e0
jmp case.0x47bc4a.6
mov eax, dword [edi]
push dword [eax + 4]
call fcn.00420f9e
add esp, 4
push dword [edi]
call fcn.00420f9e
add esp, 4
jmp case.0x47bc4a.6
mov ecx, dword [edi]
test ecx, ecx
je case.0x47bc4a.6
push ecx
call fcn.0043b20f
jmp case.0x47bc4a.6
mov ecx, dword [edi]
test ecx, ecx
je case.0x47bc4a.6
push ecx
call fcn.0043b239
jmp case.0x47bc4a.6
mov ecx, dword [edi]
test ecx, ecx
je case.0x47bc4a.6
push ecx
call fcn.0040b60d
jmp case.0x47bc4a.6
cmp dword [0x4c322c], 4
jne 0x40f867
push dword [0x4c3228]
mov ecx, dword [eax + 8]
call fcn.0040bfa5
jmp 0x40f87c
push ecx
call fcn.0040b60d
mov dword [esi + 8], 0
jmp 0x40ecd8
sub eax, 5
cmp eax, 0xa
ja case.0x47bd2b.6
jmp dword [eax*4 + 0x47c46c]
mov eax, dword [esi]
test eax, eax
je case.0x47bd2b.6
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [esi]
call fcn.00420f9e
add esp, 4
jmp case.0x47bd2b.6
mov ecx, dword [esi]
test ecx, ecx
je case.0x47bd2b.6
push ecx
call fcn.004463b9
jmp case.0x47bd2b.6
mov ecx, esi
call fcn.0041f3e0
jmp case.0x47bd2b.6
mov eax, dword [esi]
push dword [eax + 4]
call fcn.00420f9e
add esp, 4
push dword [esi]
call fcn.00420f9e
add esp, 4
jmp case.0x47bd2b.6
mov ecx, dword [esi]
test ecx, ecx
je case.0x47bd2b.6
push ecx
call fcn.0043b20f
jmp case.0x47bd2b.6
mov ecx, dword [esi]
test ecx, ecx
je case.0x47bd2b.6
push ecx
call fcn.0043b239
jmp case.0x47bd2b.6
mov ecx, dword [esi]
test ecx, ecx
je case.0x47bd2b.6
push ecx
call fcn.0040b60d
jmp case.0x47bd2b.6
push dword [0x4c3228]
mov ecx, dword [edi + 8]
call fcn.0040bfa5
jmp 0x40e95c
sub eax, 5
cmp eax, 0xa
ja case.0x47bded.6
jmp dword [eax*4 + 0x47c498]
mov eax, dword [edi]
test eax, eax
je case.0x47bded.6
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [edi]
call fcn.00420f9e
add esp, 4
jmp case.0x47bded.6
mov ecx, dword [edi]
test ecx, ecx
je case.0x47bded.6
push ecx
call fcn.004463b9
jmp case.0x47bded.6
mov ecx, edi
call fcn.0041f3e0
jmp case.0x47bded.6
mov eax, dword [edi]
push dword [eax + 4]
call fcn.00420f9e
add esp, 4
push dword [edi]
call fcn.00420f9e
add esp, 4
jmp case.0x47bded.6
mov ecx, dword [edi]
test ecx, ecx
je case.0x47bded.6
push ecx
call fcn.0043b20f
jmp case.0x47bded.6
mov ecx, dword [edi]
test ecx, ecx
je case.0x47bded.6
push ecx
call fcn.0043b239
jmp case.0x47bded.6
mov ecx, dword [edi]
test ecx, ecx
je case.0x47bded.6
push ecx
call fcn.0040b60d
jmp case.0x47bded.6
push dword [0x4c3228]
mov ecx, dword [eax + 8]
call fcn.0040bfa5
jmp 0x40f6eb
sub eax, 5
cmp eax, 0xa
ja case.0x47beaf.6
jmp dword [eax*4 + 0x47c4c4]
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
test eax, eax
je case.0x47beaf.6
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [esp + 0x10]
push dword [eax]
call fcn.00420f9e
add esp, 4
jmp case.0x47beaf.6
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
test ecx, ecx
je case.0x47beaf.6
push ecx
call fcn.004463b9
jmp case.0x47beaf.6
mov ecx, dword [esp + 0x10]
call fcn.0041f3e0
jmp case.0x47beaf.6
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
push dword [eax + 4]
call fcn.00420f9e
mov eax, dword [esp + 0x14]
add esp, 4
push dword [eax]
call fcn.00420f9e
add esp, 4
jmp case.0x47beaf.6
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
test ecx, ecx
je case.0x47beaf.6
push ecx
call fcn.0043b20f
jmp case.0x47beaf.6
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
test ecx, ecx
je case.0x47beaf.6
push ecx
call fcn.0043b239
jmp case.0x47beaf.6
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
test ecx, ecx
je case.0x47beaf.6
push ecx
call fcn.0040b60d
jmp case.0x47beaf.6
mov eax, dword [0x4c30f4]
mov esi, dword [eax + 8]
mov eax, dword [esp + 0x30]
jmp 0x40e9b3
or ecx, 1
mov dword [0x4c31f0], ecx
mov ecx, 0x4c31f4
call fcn.0040c499
push 0x472895
call fcn.0042294a
mov eax, dword [esp + 0x34]
add esp, 4
jmp 0x40e9d0
test ecx, ecx
jne 0x40eae3
test eax, eax
jne 0x40ea6a
jmp 0x40ea14
or ecx, 1
mov dword [0x4c31f0], ecx
mov ecx, 0x4c31f4
call fcn.0040c499
push 0x472895
call fcn.0042294a
mov esi, dword [0x4c30e0]
mov eax, dword [esp + 0x34]
add esp, 4
jmp 0x40ed21
test ecx, ecx
jne 0x40ef5e
test edx, edx
jne 0x40ee3c
jmp 0x40ed5f
mov esi, dword [ebx + 4]
push ebx
call fcn.00420f9e
mov ebx, esi
mov esi, dword [esp + 0x1c]
add esp, 4
mov dword [esp + 0x34], ebx
mov dword [esp + 0x58], ebx
mov byte [esp + 0x5d], 0
jmp 0x40f263
cmp byte [esp + 0x2d], 0
je 0x40f9a8
mov eax, dword [eax + 0x10]
jmp 0x40f9a8
mov byte [esp + 0xac], 1
push dword [esp + 0xac]
lea ecx, [esp + 0x24]
call fcn.0041f02d
mov ecx, eax
call fcn.0041f33c
jmp 0x40fa17
cmp byte [esp + 0x2d], 0
je 0x47c075
mov eax, dword [esp + 0x10]
mov esi, dword [eax + 0x10]
jmp 0x40fa06
mov esi, dword [esp + 0x10]
jmp 0x40fa06
mov esi, dword [ebx + 4]
push ebx
call fcn.00420f9e
mov ebx, esi
add esp, 4
mov dword [esp + 0x34], ebx
mov dword [esp + 0x58], ebx
jmp 0x40fa22
mov esi, dword [ebx + 4]
push ebx
call fcn.00420f9e
mov ebx, esi
add esp, 4
mov dword [esp + 0x34], ebx
mov dword [esp + 0x58], ebx
mov byte [esp + 0x5d], 0
jmp 0x40fa32
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
mov ecx, dword [esp + 0x14]
movsx eax, word [eax + 0xa]
push eax
push 0x6f
call fcn.0044e569
lea ecx, [esp + 0x98]
call fcn.00411260
lea ecx, [esp + 0x70]
call fcn.00441169
mov eax, dword [esp + 0x10]
or edi, 0xffffffff
jmp 0x40e8d9
lea ecx, [esp + 0x98]
call fcn.00413120
lea ecx, [esp + 0x70]
call fcn.00441169
mov eax, dword [esp + 0x10]
or edi, 0xffffffff
jmp 0x40e8d9
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4 - 4]
movsx eax, word [eax + 0xa]
push eax
push 0x6f
mov ecx, dword [esp + 0x1c]
call fcn.0044e569
lea ecx, [esp + 0x70]
call fcn.00441169
mov eax, dword [esp + 0x10]
or edi, 0xffffffff
jmp 0x40e8d9
mov ecx, dword [esi]
mov eax, dword [edi + 4]
mov eax, dword [eax + ecx*4]
mov ecx, dword [esp + 0x14]
movsx eax, word [eax + 0xa]
push eax
push 0x85
call fcn.0044e569
lea ecx, [esp + 0xb0]
call fcn.004061e5
jmp 0x40fe6a
mov ecx, dword [esi]
mov eax, dword [edi + 4]
mov eax, dword [eax + ecx*4 - 4]
movsx eax, word [eax + 0xa]
push eax
push 0x86
mov ecx, dword [esp + 0x1c]
call fcn.0044e569
jmp 0x40fe6a
lea ecx, [esp + 0xd0]
call fcn.00411260
mov eax, dword [esp + 0x10]
or edi, 0xffffffff
jmp 0x40e8d9
lea ecx, [esp + 0xc0]
call fcn.00411260
mov eax, dword [esp + 0x10]
or edi, 0xffffffff
jmp 0x40e8d9
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
mov ecx, dword [esp + 0x14]
movsx eax, word [eax + 0xa]
push eax
push 0x6e
call fcn.0044e569
mov eax, dword [esp + 0x10]
or edi, 0xffffffff
jmp 0x40e8d9
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
movsx eax, word [eax + 0xa]
push eax
mov ecx, dword [esp + 0x18]
push 0x6e
call fcn.0044e569
mov ebx, dword [esp + 0x58]
mov dword [esp + 0x34], ebx
jmp 0x40fe6a
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
mov ecx, dword [esp + 0x14]
movsx eax, word [eax + 0xa]
push eax
push 0xa9
call fcn.0044e569
lea ecx, [esp + 0x88]
call fcn.00411260
mov eax, dword [esp + 0x10]
or edi, 0xffffffff
jmp 0x40e8d9
mov ecx, dword [esi]
mov eax, dword [edi + 4]
mov eax, dword [eax + ecx*4]
mov ecx, dword [esp + 0x14]
movsx eax, word [eax + 0xa]
push eax
push 0x6e
call fcn.0044e569
lea ecx, [esp + 0xe0]
call fcn.00411260
lea ecx, [esp + 0x88]
call fcn.00411260
mov eax, dword [esp + 0x10]
or edi, 0xffffffff
jmp 0x40e8d9
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
mov ecx, dword [esp + 0x14]
movsx eax, word [eax + 0xa]
push eax
push 0x79
call fcn.0044e569
mov eax, dword [esp + 0x10]
or edi, 0xffffffff
jmp 0x40e8d9
push dword [esp + 0x64]
mov ecx, dword [esp + 0x18]
push 0x6b
call fcn.0044e569
or edi, 0xffffffff
jmp 0x40e8d1
push dword [esp + 0x64]
mov ecx, dword [esp + 0x18]
push 0x6c
call fcn.0044e569
or edi, 0xffffffff
jmp 0x40e8d1
push dword [esp + 0x64]
mov ecx, dword [esp + 0x18]
push 0x6d
call fcn.0044e569
or edi, 0xffffffff
jmp 0x40e8d1
push dword [esp + 0x64]
mov ecx, dword [esp + 0x18]
push 0x6e
call fcn.0044e569
lea ecx, [esp + 0xf0]
or edi, 0xffffffff
call fcn.00411260
mov eax, dword [esp + 0x10]
jmp 0x40e8d9
mov eax, dword [ebx]
test eax, eax
je case.0x40fbf3.6
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [ebx]
call fcn.00420f9e
add esp, 4
jmp case.0x40fbf3.6
mov ecx, dword [ebx]
test ecx, ecx
je case.0x40fbf3.6
push ecx
call fcn.004463b9
jmp case.0x40fbf3.6
mov ecx, ebx
call fcn.0041f3e0
jmp case.0x40fbf3.6
mov eax, dword [ebx]
push dword [eax + 4]
call fcn.00420f9e
add esp, 4
push dword [ebx]
call fcn.00420f9e
add esp, 4
jmp case.0x40fbf3.6
mov ecx, dword [ebx]
test ecx, ecx
je case.0x40fbf3.6
push ecx
call fcn.0043b20f
jmp case.0x40fbf3.6
mov ecx, dword [ebx]
test ecx, ecx
je case.0x40fbf3.6
push ecx
call fcn.0043b239
jmp case.0x40fbf3.6
mov ecx, dword [ebx]
test ecx, ecx
je case.0x40fbf3.6
push ecx
call fcn.0040b60d
jmp case.0x40fbf3.6