Function at 0x414830
Capabilities:
Get graphical window text

Disassembly:
push ebp
lea ebp, [esp - 0x70]
sub esp, 0x70
push 0xffffffffffffffff
push 0x48565a
mov eax, dword fs:[0]
push eax
sub esp, 0x2e0
push ebx
push esi
push edi
mov eax, dword [0x4abf70]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ebx, ecx
mov dword [ebp + 0x54], ebx
call fcn.004524ff
mov eax, dword [ebx + 0x100]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
push 0x1024
push eax
call esi
mov ecx, dword [ebx + 0x100]
push 0x14b48c
push 0
push 0x1026
push ecx
call esi
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x48ea88
lea edi, [ebx + 0xe0]
push 0
mov ecx, edi
call fcn.00459ce4
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x48eb2c
push 1
mov ecx, edi
call fcn.00459ce4
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x48f1d0
push 2
mov ecx, edi
call fcn.00459ce4
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x48f1c4
push 3
mov ecx, edi
call fcn.00459ce4
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x48f864
push 4
mov ecx, edi
call fcn.00459ce4
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x48f858
push 5
mov ecx, edi
call fcn.00459ce4
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x48eb24
push 6
mov ecx, edi
call fcn.00459ce4
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x49007c
push 7
mov ecx, edi
call fcn.00459ce4
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x48eb0c
push 8
mov ecx, edi
call fcn.00459ce4
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x48eaf4
push 9
mov ecx, edi
call fcn.00459ce4
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x48eae8
push 0xa
mov ecx, edi
call fcn.00459ce4
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x48eb00
push 0xb
mov ecx, edi
call fcn.00459ce4
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x48f844
push 0xc
mov ecx, edi
call fcn.00459ce4
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x48f83c
push 0xd
mov ecx, edi
call fcn.00459ce4
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x48f830
push 0xe
mov ecx, edi
call fcn.00459ce4
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x48e8bc
push 0xf
mov ecx, edi
call fcn.00459ce4
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x48eac0
push 0x10
mov ecx, edi
call fcn.00459ce4
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x48ead8
push 0x11
mov ecx, edi
call fcn.00459ce4
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x48f1bc
push 0x12
mov ecx, edi
call fcn.00459ce4
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x48f814
push 0x13
mov ecx, edi
call fcn.00459ce4
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x48eacc
push 0x14
mov ecx, edi
call fcn.00459ce4
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0x48eab4
push 0x15
mov ecx, edi
call fcn.00459ce4
mov eax, dword [ebx + 0x100]
lea edx, [ebp - 0x18c]
push edx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov ecx, dword [ebp - 0x184]
sub ecx, dword [ebp - 0x18c]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [ebx + 0x100]
movzx edi, cx
push edi
push 0
push 0x101e
push edx
mov dword [ebp + 0x6c], 0
call esi
mov eax, dword [ebx + 0x100]
push edi
push 1
push 0x101e
push eax
call esi
mov ecx, dword [ebx + 0x100]
push edi
push 2
push 0x101e
push ecx
call esi
mov edx, dword [ebx + 0x100]
push edi
push 3
push 0x101e
push edx
call esi
mov eax, dword [ebx + 0x100]
push edi
push 4
push 0x101e
push eax
call esi
mov ecx, dword [ebx + 0x100]
push edi
push 5
push 0x101e
push ecx
call esi
mov edx, dword [ebx + 0x100]
push edi
push 6
push 0x101e
push edx
call esi
mov eax, dword [ebx + 0x100]
push edi
push 7
push 0x101e
push eax
call esi
mov ecx, dword [ebx + 0x100]
push edi
push 8
push 0x101e
push ecx
call esi
mov edx, dword [ebx + 0x100]
push edi
push 9
push 0x101e
push edx
call esi
mov eax, dword [ebx + 0x100]
push edi
push 0xa
push 0x101e
push eax
call esi
mov ecx, dword [ebx + 0x100]
push edi
push 0xb
push 0x101e
push ecx
call esi
mov edx, dword [ebx + 0x100]
push edi
push 0xc
push 0x101e
push edx
call esi
mov eax, dword [ebx + 0x100]
push edi
push 0xd
push 0x101e
push eax
call esi
mov ecx, dword [ebx + 0x100]
push edi
push 0xe
push 0x101e
push ecx
call esi
mov edx, dword [ebx + 0x100]
push edi
push 0xf
push 0x101e
push edx
call esi
mov eax, dword [ebx + 0x100]
push edi
push 0x10
push 0x101e
push eax
call esi
mov ecx, dword [ebx + 0x100]
push edi
push 0x11
push 0x101e
push ecx
call esi
mov edx, dword [ebx + 0x100]
push edi
push 0x12
push 0x101e
push edx
call esi
mov eax, dword [ebx + 0x100]
push edi
push 0x13
push 0x101e
push eax
call esi
mov ecx, dword [ebx + 0x100]
push edi
push 0x14
push 0x101e
push ecx
call esi
mov edx, dword [ebx + 0x100]
push edi
push 0x15
push 0x101e
push edx
call esi
mov eax, dword [ebx + 0x100]
push 0x20
push 0
push 0x1036
push eax
call esi
mov eax, dword [ebx + 0x74]
push 0x48e90c
push eax
call fcn.0046dbab
add esp, 8
test eax, eax
sete al
test al, al
je 0x416705
push 0x17
xor esi, esi
push esi
lea edi, [ebx + 0x80]
push 0x48e8fc
mov ecx, edi
call fcn.004018c0
lea ecx, [ebp + 0x5c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [0x4ad504]
mov edx, 9
mov dword [ebp - 4], esi
mov byte [ebp - 4], 1
mov word [ebp - 0x34], dx
mov dword [ebp - 0x2c], eax
cmp eax, esi
je 0x414c7d
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov eax, 8
push str.SELECT__FROM_checkinregtable
mov byte [ebp - 4], 2
mov word [ebp - 0x20], ax
call fcn.00482a00
mov dword [ebp - 0x18], eax
mov ecx, dword [edi]
mov byte [ebp - 4], 3
cmp ecx, esi
jne 0x414cab
push 0x80004003
call fcn.00482960
push 1
push 3
push 2
lea edx, [ebp - 0x34]
push edx
lea eax, [ebp - 0x20]
push eax
call fcn.004011f0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [ebp - 0x20]
push ecx
call edi
lea edx, [ebp - 0x34]
push edx
call edi
mov dword [ebp - 4], esi
jmp 0x414cf7
mov esi, dword [ebx + 0x80]
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov byte [ebp - 4], 5
test esi, esi
jne 0x414d15
push 0x80004003
call fcn.00482960
mov eax, dword [esi]
mov edx, dword [eax + 0x34]
lea ecx, [ebp + 0x58]
push ecx
push esi
mov dword [ebp + 0x58], 0
call edx
test eax, eax
jge 0x414d38
push 0x48e864
push esi
push eax
call fcn.00482980
cmp word [ebp + 0x58], 0
jne 0x416667
mov esi, dword [ebx + 0x80]
test esi, esi
jne 0x414d57
push 0x80004003
call fcn.00482960
mov eax, dword [esi]
mov ecx, dword [eax + 0x98]
push esi
call ecx
test eax, eax
jge 0x414d72
push 0x48e864
push esi
push eax
call fcn.00482980
mov esi, dword [ebx + 0x80]
test esi, esi
jne 0x414d86
push 0x80004003
call fcn.00482960
mov edx, dword [esi]
mov ecx, dword [edx + 0x50]
lea eax, [ebp + 0x58]
push eax
push esi
mov dword [ebp + 0x58], 0
call ecx
test eax, eax
jge 0x414da9
push 0x48e864
push esi
push eax
call fcn.00482980
cmp word [ebp + 0x58], 0
jne 0x41665e
mov edx, 8
push 0x48ea88
mov word [ebp - 0x34], dx
call fcn.00482a00
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebx + 0x80]
mov byte [ebp - 4], 6
test ecx, ecx
jne 0x414de2
push 0x80004003
call fcn.00482960
lea eax, [ebp - 0x34]
push eax
lea edx, [ebp - 0x29c]
push edx
call fcn.004012e0
push eax
lea eax, [ebp + 0x5c]
push eax
mov byte [ebp - 4], 7
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x414e0b
push eax
call fcn.00482960
lea ecx, [ebp - 0x29c]
push ecx
call edi
lea edx, [ebp - 0x34]
push edx
mov byte [ebp - 4], 5
call edi
cmp word [ebp + 0x5c], 1
je 0x414e8a
lea eax, [ebp + 0x5c]
push eax
lea ecx, [ebp + 0x28]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 8
test esi, esi
je 0x414e51
cmp dword [esi + 4], 0
jne 0x414e4c
mov ecx, dword [esi]
push ecx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x414e53
xor esi, esi
lea edi, [ebx + 0x8c]
test esi, esi
jne 0x414e61
xor eax, eax
jmp 0x414e6f
mov eax, esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x414e66
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
lea ecx, [ebp + 0x28]
mov byte [ebp - 4], 5
call fcn.00401ad0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebx + 0x8c]
lea esi, [ebx + 0x8c]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x414eb4
push 0x32
mov ecx, esi
call fcn.00401800
mov esi, dword [esi]
mov edx, dword [ebp + 0x6c]
push 0
push 0
push 0
push 0
push esi
push edx
lea ecx, [ebx + 0xe0]
push 1
call fcn.00459d30
mov eax, 8
push 0x48eb2c
mov word [ebp - 0x20], ax
call fcn.00482a00
mov dword [ebp - 0x18], eax
mov ecx, dword [ebx + 0x80]
mov byte [ebp - 4], 9
test ecx, ecx
jne 0x414efe
push 0x80004003
call fcn.00482960
lea edx, [ebp - 0x20]
push edx
lea eax, [ebp - 0x1bc]
push eax
call fcn.004012e0
push eax
lea ecx, [ebp + 0x5c]
push ecx
mov byte [ebp - 4], 0xa
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x414f27
push eax
call fcn.00482960
lea edx, [ebp - 0x1bc]
push edx
call edi
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 4], 5
call edi
cmp word [ebp + 0x5c], 1
je 0x414fa6
lea ecx, [ebp + 0x5c]
push ecx
lea ecx, [ebp + 4]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 0xb
test esi, esi
je 0x414f6d
cmp dword [esi + 4], 0
jne 0x414f68
mov edx, dword [esi]
push edx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x414f6f
xor esi, esi
lea edi, [ebx + 0x90]
test esi, esi
jne 0x414f7d
xor eax, eax
jmp 0x414f8b
mov eax, esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x414f82
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
lea ecx, [ebp + 4]
mov byte [ebp - 4], 5
call fcn.00401ad0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebx + 0x90]
lea esi, [ebx + 0x90]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x414fd0
push 0x32
mov ecx, esi
call fcn.00401800
mov eax, dword [esi]
push eax
mov eax, dword [ebp + 0x6c]
push 1
push eax
lea ecx, [ebx + 0xe0]
call fcn.00459c19
mov ecx, 8
push 0x48f1d0
mov word [ebp - 0xf8], cx
call fcn.00482a00
mov dword [ebp - 0xf0], eax
mov ecx, dword [ebx + 0x80]
mov byte [ebp - 4], 0xc
test ecx, ecx
jne 0x415018
push 0x80004003
call fcn.00482960
lea edx, [ebp - 0xf8]
push edx
lea eax, [ebp - 0x25c]
push eax
call fcn.004012e0
push eax
lea ecx, [ebp + 0x5c]
push ecx
mov byte [ebp - 4], 0xd
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x415044
push eax
call fcn.00482960
lea edx, [ebp - 0x25c]
push edx
call edi
lea eax, [ebp - 0xf8]
push eax
mov byte [ebp - 4], 5
call edi
cmp word [ebp + 0x5c], 1
je 0x4150c6
lea ecx, [ebp + 0x5c]
push ecx
lea ecx, [ebp + 0x48]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 0xe
test esi, esi
je 0x41508d
cmp dword [esi + 4], 0
jne 0x415088
mov edx, dword [esi]
push edx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x41508f
xor esi, esi
lea edi, [ebx + 0xb4]
test esi, esi
jne 0x41509d
xor eax, eax
jmp 0x4150ab
mov eax, esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4150a2
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
lea ecx, [ebp + 0x48]
mov byte [ebp - 4], 5
call fcn.00401ad0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebx + 0xb4]
lea esi, [ebx + 0xb4]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x4150f0
push 0x32
mov ecx, esi
call fcn.00401800
mov esi, dword [esi]
mov eax, dword [ebp + 0x6c]
push esi
push 2
push eax
lea ecx, [ebx + 0xe0]
call fcn.00459c19
mov ecx, 8
push 0x48f1c4
mov word [ebp - 0x78], cx
call fcn.00482a00
mov dword [ebp - 0x70], eax
mov ecx, dword [ebx + 0x80]
mov byte [ebp - 4], 0xf
test ecx, ecx
jne 0x415132
push 0x80004003
call fcn.00482960
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0x1dc]
push eax
call fcn.004012e0
push eax
lea ecx, [ebp + 0x5c]
push ecx
mov byte [ebp - 4], 0x10
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x41515b
push eax
call fcn.00482960
lea edx, [ebp - 0x1dc]
push edx
call edi
lea eax, [ebp - 0x78]
push eax
mov byte [ebp - 4], 5
call edi
cmp word [ebp + 0x5c], 1
je 0x4151da
lea ecx, [ebp + 0x5c]
push ecx
lea ecx, [ebp + 8]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 0x11
test esi, esi
je 0x4151a1
cmp dword [esi + 4], 0
jne 0x41519c
mov edx, dword [esi]
push edx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x4151a3
xor esi, esi
lea edi, [ebx + 0xa4]
test esi, esi
jne 0x4151b1
xor eax, eax
jmp 0x4151bf
mov eax, esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4151b6
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
lea ecx, [ebp + 8]
mov byte [ebp - 4], 5
call fcn.00401ad0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebx + 0xa4]
lea esi, [ebx + 0xa4]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x415204
push 0x32
mov ecx, esi
call fcn.00401800
mov esi, dword [esi]
mov eax, dword [ebp + 0x6c]
push esi
push 3
push eax
lea ecx, [ebx + 0xe0]
call fcn.00459c19
mov ecx, 8
push 0x48f864
mov word [ebp - 0x16c], cx
call fcn.00482a00
mov dword [ebp - 0x164], eax
mov ecx, dword [ebx + 0x80]
mov byte [ebp - 4], 0x12
test ecx, ecx
jne 0x41524c
push 0x80004003
call fcn.00482960
lea edx, [ebp - 0x16c]
push edx
lea eax, [ebp - 0x2dc]
push eax
call fcn.004012e0
push eax
lea ecx, [ebp + 0x5c]
push ecx
mov byte [ebp - 4], 0x13
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x415278
push eax
call fcn.00482960
lea edx, [ebp - 0x2dc]
push edx
call edi
lea eax, [ebp - 0x16c]
push eax
mov byte [ebp - 4], 5
call edi
cmp word [ebp + 0x5c], 1
je 0x4152fa
lea ecx, [ebp + 0x5c]
push ecx
lea ecx, [ebp + 0x40]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 0x14
test esi, esi
je 0x4152c1
cmp dword [esi + 4], 0
jne 0x4152bc
mov edx, dword [esi]
push edx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x4152c3
xor esi, esi
lea edi, [ebx + 0x94]
test esi, esi
jne 0x4152d1
xor eax, eax
jmp 0x4152df
mov eax, esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4152d6
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
lea ecx, [ebp + 0x40]
mov byte [ebp - 4], 5
call fcn.00401ad0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebx + 0x94]
lea esi, [ebx + 0x94]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x415324
push 0x32
mov ecx, esi
call fcn.00401800
mov esi, dword [esi]
mov eax, dword [ebp + 0x6c]
push esi
push 4
push eax
lea ecx, [ebx + 0xe0]
call fcn.00459c19
mov ecx, 8
push 0x48f858
mov word [ebp - 0x98], cx
call fcn.00482a00
mov dword [ebp - 0x90], eax
mov ecx, dword [ebx + 0x80]
mov byte [ebp - 4], 0x15
test ecx, ecx
jne 0x41536c
push 0x80004003
call fcn.00482960
lea edx, [ebp - 0x98]
push edx
lea eax, [ebp - 0x1fc]
push eax
call fcn.004012e0
push eax
lea ecx, [ebp + 0x5c]
push ecx
mov byte [ebp - 4], 0x16
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x415398
push eax
call fcn.00482960
lea edx, [ebp - 0x1fc]
push edx
call edi
lea eax, [ebp - 0x98]
push eax
mov byte [ebp - 4], 5
call edi
cmp word [ebp + 0x5c], 1
je 0x41541a
lea ecx, [ebp + 0x5c]
push ecx
lea ecx, [ebp + 0x18]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 0x17
test esi, esi
je 0x4153e1
cmp dword [esi + 4], 0
jne 0x4153dc
mov edx, dword [esi]
push edx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x4153e3
xor esi, esi
lea edi, [ebx + 0xa8]
test esi, esi
jne 0x4153f1
xor eax, eax
jmp 0x4153ff
mov eax, esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4153f6
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
lea ecx, [ebp + 0x18]
mov byte [ebp - 4], 5
call fcn.00401ad0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebx + 0xa8]
lea esi, [ebx + 0xa8]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x415444
push 0x32
mov ecx, esi
call fcn.00401800
mov esi, dword [esi]
mov eax, dword [ebp + 0x6c]
push esi
push 5
push eax
lea ecx, [ebx + 0xe0]
call fcn.00459c19
mov ecx, 8
push 0x48eb24
mov word [ebp - 0x118], cx
call fcn.00482a00
mov dword [ebp - 0x110], eax
mov ecx, dword [ebx + 0x80]
mov byte [ebp - 4], 0x18
test ecx, ecx
jne 0x41548c
push 0x80004003
call fcn.00482960
lea edx, [ebp - 0x118]
push edx
lea eax, [ebp - 0x27c]
push eax
call fcn.004012e0
push eax
lea ecx, [ebp + 0x5c]
push ecx
mov byte [ebp - 4], 0x19
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x4154b8
push eax
call fcn.00482960
lea edx, [ebp - 0x27c]
push edx
call edi
lea eax, [ebp - 0x118]
push eax
mov byte [ebp - 4], 5
call edi
cmp word [ebp + 0x5c], 1
je 0x41553a
lea ecx, [ebp + 0x5c]
push ecx
lea ecx, [ebp + 0x38]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 0x1a
test esi, esi
je 0x415501
cmp dword [esi + 4], 0
jne 0x4154fc
mov edx, dword [esi]
push edx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x415503
xor esi, esi
lea edi, [ebx + 0xb0]
test esi, esi
jne 0x415511
xor eax, eax
jmp 0x41551f
mov eax, esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x415516
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
lea ecx, [ebp + 0x38]
mov byte [ebp - 4], 5
call fcn.00401ad0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebx + 0xb0]
lea esi, [ebx + 0xb0]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x415564
push 0x32
mov ecx, esi
call fcn.00401800
mov esi, dword [esi]
mov eax, dword [ebp + 0x6c]
push esi
push 6
push eax
lea ecx, [ebx + 0xe0]
call fcn.00459c19
mov ecx, 8
push 0x48eb18
mov word [ebp - 0xb8], cx
call fcn.00482a00
mov dword [ebp - 0xb0], eax
mov ecx, dword [ebx + 0x80]
mov byte [ebp - 4], 0x1b
test ecx, ecx
jne 0x4155ac
push 0x80004003
call fcn.00482960
lea edx, [ebp - 0xb8]
push edx
lea eax, [ebp - 0x21c]
push eax
call fcn.004012e0
push eax
lea ecx, [ebp + 0x5c]
push ecx
mov byte [ebp - 4], 0x1c
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x4155d8
push eax
call fcn.00482960
lea edx, [ebp - 0x21c]
push edx
call edi
lea eax, [ebp - 0xb8]
push eax
mov byte [ebp - 4], 5
call edi
cmp word [ebp + 0x5c], 1
je 0x41565a
lea ecx, [ebp + 0x5c]
push ecx
lea ecx, [ebp - 0x24]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 0x1d
test esi, esi
je 0x415621
cmp dword [esi + 4], 0
jne 0x41561c
mov edx, dword [esi]
push edx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x415623
xor esi, esi
lea edi, [ebx + 0xa0]
test esi, esi
jne 0x415631
xor eax, eax
jmp 0x41563f
mov eax, esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x415636
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 5
call fcn.00401ad0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebx + 0xa0]
lea esi, [ebx + 0xa0]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x415684
push 0x32
mov ecx, esi
call fcn.00401800
mov esi, dword [esi]
mov eax, dword [ebp + 0x6c]
push esi
push 7
push eax
lea ecx, [ebx + 0xe0]
call fcn.00459c19
mov ecx, 8
push 0x48eb0c
mov word [ebp - 0x44], cx
call fcn.00482a00
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebx + 0x80]
mov byte [ebp - 4], 0x1e
test ecx, ecx
jne 0x4156c6
push 0x80004003
call fcn.00482960
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x2bc]
push eax
call fcn.004012e0
push eax
lea ecx, [ebp + 0x5c]
push ecx
mov byte [ebp - 4], 0x1f
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x4156ef
push eax
call fcn.00482960
lea edx, [ebp - 0x2bc]
push edx
call edi
lea eax, [ebp - 0x44]
push eax
mov byte [ebp - 4], 5
call edi
cmp word [ebp + 0x5c], 1
je 0x415774
lea ecx, [ebp + 0x5c]
push ecx
lea ecx, [ebp + 0x30]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 0x20
test esi, esi
je 0x415735
cmp dword [esi + 4], 0
jne 0x415730
mov edx, dword [esi]
push edx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x415737
xor esi, esi
lea edi, [ebx + 0x88]
test esi, esi
jne 0x415745
xor eax, eax
jmp 0x415759
mov eax, esi
lea ecx, [eax + 1]
lea ebx, [ebx]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x415750
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
lea ecx, [ebp + 0x30]
mov byte [ebp - 4], 5
call fcn.00401ad0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebx + 0x88]
lea esi, [ebx + 0x88]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x41579e
push 0x32
mov ecx, esi
call fcn.00401800
mov esi, dword [esi]
mov eax, dword [ebp + 0x6c]
push esi
push 8
push eax
lea ecx, [ebx + 0xe0]
call fcn.00459c19
mov ecx, 8
push 0x48eaf4
mov word [ebp - 0xd8], cx
call fcn.00482a00
mov dword [ebp - 0xd0], eax
mov ecx, dword [ebx + 0x80]
mov byte [ebp - 4], 0x21
test ecx, ecx
jne 0x4157e6
push 0x80004003
call fcn.00482960
lea edx, [ebp - 0xd8]
push edx
lea eax, [ebp - 0x23c]
push eax
call fcn.004012e0
push eax
lea ecx, [ebp + 0x5c]
push ecx
mov byte [ebp - 4], 0x22
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x415812
push eax
call fcn.00482960
lea edx, [ebp - 0x23c]
push edx
call edi
lea eax, [ebp - 0xd8]
push eax
mov byte [ebp - 4], 5
call edi
cmp word [ebp + 0x5c], 1
je 0x415894
lea ecx, [ebp + 0x5c]
push ecx
lea ecx, [ebp + 0x10]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 0x23
test esi, esi
je 0x41585b
cmp dword [esi + 4], 0
jne 0x415856
mov edx, dword [esi]
push edx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x41585d
xor esi, esi
lea edi, [ebx + 0xb8]
test esi, esi
jne 0x41586b
xor eax, eax
jmp 0x415879
mov eax, esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x415870
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 5
call fcn.00401ad0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebx + 0xb8]
lea esi, [ebx + 0xb8]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x4158be
push 0x32
mov ecx, esi
call fcn.00401800
mov esi, dword [esi]
mov eax, dword [ebp + 0x6c]
push esi
push 9
push eax
lea ecx, [ebx + 0xe0]
call fcn.00459c19
mov ecx, 8
push 0x48eae8
mov word [ebp - 0x138], cx
call fcn.00482a00
mov dword [ebp - 0x130], eax
mov ecx, dword [ebx + 0x80]
mov byte [ebp - 4], 0x24
test ecx, ecx
jne 0x415906
push 0x80004003
call fcn.00482960
lea edx, [ebp - 0x138]
push edx
lea eax, [ebp - 0x19c]
push eax
call fcn.004012e0
push eax
lea ecx, [ebp + 0x5c]
push ecx
mov byte [ebp - 4], 0x25
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x415932
push eax
call fcn.00482960
lea edx, [ebp - 0x19c]
push edx
call edi
lea eax, [ebp - 0x138]
push eax
mov byte [ebp - 4], 5
call edi
cmp word [ebp + 0x5c], 1
je 0x4159b4
lea ecx, [ebp + 0x5c]
push ecx
lea ecx, [ebp + 0x50]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 0x26
test esi, esi
je 0x41597b
cmp dword [esi + 4], 0
jne 0x415976
mov edx, dword [esi]
push edx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x41597d
xor esi, esi
lea edi, [ebx + 0xc4]
test esi, esi
jne 0x41598b
xor eax, eax
jmp 0x415999
mov eax, esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x415990
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
lea ecx, [ebp + 0x50]
mov byte [ebp - 4], 5
call fcn.00401ad0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebx + 0xc4]
lea esi, [ebx + 0xc4]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x4159de
push 0x32
mov ecx, esi
call fcn.00401800
mov esi, dword [esi]
mov eax, dword [ebp + 0x6c]
push esi
push 0xa
push eax
lea ecx, [ebx + 0xe0]
call fcn.00459c19
mov ecx, 8
push 0x48eb00
mov word [ebp - 0x54], cx
call fcn.00482a00
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebx + 0x80]
mov byte [ebp - 4], 0x27
test ecx, ecx
jne 0x415a20
push 0x80004003
call fcn.00482960
lea edx, [ebp - 0x54]
push edx
lea eax, [ebp - 0x1ac]
push eax
call fcn.004012e0
push eax
lea ecx, [ebp + 0x5c]
push ecx
mov byte [ebp - 4], 0x28
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x415a49
push eax
call fcn.00482960
lea edx, [ebp - 0x1ac]
push edx
call edi
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 5
call edi
cmp word [ebp + 0x5c], 1
je 0x415ac8
lea ecx, [ebp + 0x5c]
push ecx
lea ecx, [ebp]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 0x29
test esi, esi
je 0x415a8f
cmp dword [esi + 4], 0
jne 0x415a8a
mov edx, dword [esi]
push edx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x415a91
xor esi, esi
lea edi, [ebx + 0xd0]
test esi, esi
jne 0x415a9f
xor eax, eax
jmp 0x415aad
mov eax, esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x415aa4
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
lea ecx, [ebp]
mov byte [ebp - 4], 5
call fcn.00401ad0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebx + 0xd0]
lea esi, [ebx + 0xd0]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x415af2
push 0x32
mov ecx, esi
call fcn.00401800
mov esi, dword [esi]
mov eax, dword [ebp + 0x6c]
push esi
push 0xb
push eax
lea ecx, [ebx + 0xe0]
call fcn.00459c19
mov ecx, 8
push 0x48f844
mov word [ebp - 0x68], cx
call fcn.00482a00
mov dword [ebp - 0x60], eax
mov ecx, dword [ebx + 0x80]
mov byte [ebp - 4], 0x2a
test ecx, ecx
jne 0x415b34
push 0x80004003
call fcn.00482960
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x1cc]
push eax
call fcn.004012e0
push eax
lea ecx, [ebp + 0x5c]
push ecx
mov byte [ebp - 4], 0x2b
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x415b5d
push eax
call fcn.00482960
lea edx, [ebp - 0x1cc]
push edx
call edi
lea eax, [ebp - 0x68]
push eax
mov byte [ebp - 4], 5
call edi
cmp word [ebp + 0x5c], 1
je 0x415bdc
lea ecx, [ebp + 0x5c]
push ecx
lea ecx, [ebp + 0x20]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 0x2c
test esi, esi
je 0x415ba3
cmp dword [esi + 4], 0
jne 0x415b9e
mov edx, dword [esi]
push edx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x415ba5
xor esi, esi
lea edi, [ebx + 0x9c]
test esi, esi
jne 0x415bb3
xor eax, eax
jmp 0x415bc1
mov eax, esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x415bb8
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
lea ecx, [ebp + 0x20]
mov byte [ebp - 4], 5
call fcn.00401ad0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebx + 0x90]
lea esi, [ebx + 0x90]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x415c06
push 0x32
mov ecx, esi
call fcn.00401800
mov eax, dword [esi]
push eax
mov eax, dword [ebp + 0x6c]
push 0xc
push eax
lea ecx, [ebx + 0xe0]
call fcn.00459c19
mov ecx, 8
push 0x48f83c
mov word [ebp - 0x88], cx
call fcn.00482a00
mov dword [ebp - 0x80], eax
mov ecx, dword [ebx + 0x80]
mov byte [ebp - 4], 0x2d
test ecx, ecx
jne 0x415c4b
push 0x80004003
call fcn.00482960
lea edx, [ebp - 0x88]
push edx
lea eax, [ebp - 0x1ec]
push eax
call fcn.004012e0
push eax
lea ecx, [ebp + 0x5c]
push ecx
mov byte [ebp - 4], 0x2e
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x415c77
push eax
call fcn.00482960
lea edx, [ebp - 0x1ec]
push edx
call edi
lea eax, [ebp - 0x88]
push eax
mov byte [ebp - 4], 5
call edi
cmp word [ebp + 0x5c], 1
je 0x415cf9
lea ecx, [ebp + 0x5c]
push ecx
lea ecx, [ebp + 0x4c]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 0x2f
test esi, esi
je 0x415cc0
cmp dword [esi + 4], 0
jne 0x415cbb
mov edx, dword [esi]
push edx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x415cc2
xor esi, esi
lea edi, [ebx + 0xd4]
test esi, esi
jne 0x415cd0
xor eax, eax
jmp 0x415cde
mov eax, esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x415cd5
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
lea ecx, [ebp + 0x4c]
mov byte [ebp - 4], 5
call fcn.00401ad0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebx + 0xd4]
lea esi, [ebx + 0xd4]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x415d23
push 0x32
mov ecx, esi
call fcn.00401800
mov esi, dword [esi]
mov eax, dword [ebp + 0x6c]
push esi
push 0xd
push eax
lea ecx, [ebx + 0xe0]
call fcn.00459c19
mov ecx, 8
push 0x48f830
mov word [ebp - 0xa8], cx
call fcn.00482a00
mov dword [ebp - 0xa0], eax
mov ecx, dword [ebx + 0x80]
mov byte [ebp - 4], 0x30
test ecx, ecx
jne 0x415d6b
push 0x80004003
call fcn.00482960
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0x20c]
push eax
call fcn.004012e0
push eax
lea ecx, [ebp + 0x5c]
push ecx
mov byte [ebp - 4], 0x31
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x415d97
push eax
call fcn.00482960
lea edx, [ebp - 0x20c]
push edx
call edi
lea eax, [ebp - 0xa8]
push eax
mov byte [ebp - 4], 5
call edi
cmp word [ebp + 0x5c], 1
je 0x415e19
lea ecx, [ebp + 0x5c]
push ecx
lea ecx, [ebp + 0x44]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 0x32
test esi, esi
je 0x415de0
cmp dword [esi + 4], 0
jne 0x415ddb
mov edx, dword [esi]
push edx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x415de2
xor esi, esi
lea edi, [ebx + 0xd8]
test esi, esi
jne 0x415df0
xor eax, eax
jmp 0x415dfe
mov eax, esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x415df5
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
lea ecx, [ebp + 0x44]
mov byte [ebp - 4], 5
call fcn.00401ad0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebx + 0xd8]
lea esi, [ebx + 0xd8]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x415e43
push 0x32
mov ecx, esi
call fcn.00401800
mov esi, dword [esi]
mov eax, dword [ebp + 0x6c]
push esi
push 0xe
push eax
lea ecx, [ebx + 0xe0]
call fcn.00459c19
mov ecx, 8
push 0x48e8bc
mov word [ebp - 0xc8], cx
call fcn.00482a00
mov dword [ebp - 0xc0], eax
mov ecx, dword [ebx + 0x80]
mov byte [ebp - 4], 0x33
test ecx, ecx
jne 0x415e8b
push 0x80004003
call fcn.00482960
lea edx, [ebp - 0xc8]
push edx
lea eax, [ebp - 0x22c]
push eax
call fcn.004012e0
push eax
lea ecx, [ebp + 0x5c]
push ecx
mov byte [ebp - 4], 0x34
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x415eb7
push eax
call fcn.00482960
lea edx, [ebp - 0x22c]
push edx
call edi
lea eax, [ebp - 0xc8]
push eax
mov byte [ebp - 4], 5
call edi
cmp word [ebp + 0x5c], 1
je 0x415f39
lea ecx, [ebp + 0x5c]
push ecx
lea ecx, [ebp + 0x3c]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 0x35
test esi, esi
je 0x415f00
cmp dword [esi + 4], 0
jne 0x415efb
mov edx, dword [esi]
push edx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x415f02
xor esi, esi
lea edi, [ebx + 0xdc]
test esi, esi
jne 0x415f10
xor eax, eax
jmp 0x415f1e
mov eax, esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x415f15
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
lea ecx, [ebp + 0x3c]
mov byte [ebp - 4], 5
call fcn.00401ad0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebx + 0xdc]
lea esi, [ebx + 0xdc]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x415f63
push 0x32
mov ecx, esi
call fcn.00401800
mov esi, dword [esi]
mov eax, dword [ebp + 0x6c]
push esi
push 0xf
push eax
lea ecx, [ebx + 0xe0]
call fcn.00459c19
mov ecx, 8
push 0x48eac0
mov word [ebp - 0xe8], cx
call fcn.00482a00
mov dword [ebp - 0xe0], eax
mov ecx, dword [ebx + 0x80]
mov byte [ebp - 4], 0x36
test ecx, ecx
jne 0x415fab
push 0x80004003
call fcn.00482960
lea edx, [ebp - 0xe8]
push edx
lea eax, [ebp - 0x24c]
push eax
call fcn.004012e0
push eax
lea ecx, [ebp + 0x5c]
push ecx
mov byte [ebp - 4], 0x37
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x415fd7
push eax
call fcn.00482960
lea edx, [ebp - 0x24c]
push edx
call edi
lea eax, [ebp - 0xe8]
push eax
mov byte [ebp - 4], 5
call edi
cmp word [ebp + 0x5c], 1
je 0x416059
lea ecx, [ebp + 0x5c]
push ecx
lea ecx, [ebp + 0x34]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 0x38
test esi, esi
je 0x416020
cmp dword [esi + 4], 0
jne 0x41601b
mov edx, dword [esi]
push edx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x416022
xor esi, esi
lea edi, [ebx + 0xbc]
test esi, esi
jne 0x416030
xor eax, eax
jmp 0x41603e
mov eax, esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x416035
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
lea ecx, [ebp + 0x34]
mov byte [ebp - 4], 5
call fcn.00401ad0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebx + 0xbc]
lea esi, [ebx + 0xbc]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x416083
push 0x32
mov ecx, esi
call fcn.00401800
mov esi, dword [esi]
mov eax, dword [ebp + 0x6c]
push esi
push 0x10
push eax
lea ecx, [ebx + 0xe0]
call fcn.00459c19
mov ecx, 8
push 0x48ead8
mov word [ebp - 0x108], cx
call fcn.00482a00
mov dword [ebp - 0x100], eax
mov ecx, dword [ebx + 0x80]
mov byte [ebp - 4], 0x39
test ecx, ecx
jne 0x4160cb
push 0x80004003
call fcn.00482960
lea edx, [ebp - 0x108]
push edx
lea eax, [ebp - 0x26c]
push eax
call fcn.004012e0
push eax
lea ecx, [ebp + 0x5c]
push ecx
mov byte [ebp - 4], 0x3a
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x4160f7
push eax
call fcn.00482960
lea edx, [ebp - 0x26c]
push edx
call edi
lea eax, [ebp - 0x108]
push eax
mov byte [ebp - 4], 5
call edi
cmp word [ebp + 0x5c], 1
je 0x416179
lea ecx, [ebp + 0x5c]
push ecx
lea ecx, [ebp + 0x2c]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 0x3b
test esi, esi
je 0x416140
cmp dword [esi + 4], 0
jne 0x41613b
mov edx, dword [esi]
push edx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x416142
xor esi, esi
lea edi, [ebx + 0xc8]
test esi, esi
jne 0x416150
xor eax, eax
jmp 0x41615e
mov eax, esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x416155
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
lea ecx, [ebp + 0x2c]
mov byte [ebp - 4], 5
call fcn.00401ad0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebx + 0xc8]
lea esi, [ebx + 0xc8]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x4161a3
push 0x32
mov ecx, esi
call fcn.00401800
mov esi, dword [esi]
mov eax, dword [ebp + 0x6c]
push esi
push 0x11
push eax
lea ecx, [ebx + 0xe0]
call fcn.00459c19
mov ecx, 8
push 0x48f1bc
mov word [ebp - 0x128], cx
call fcn.00482a00
mov dword [ebp - 0x120], eax
mov ecx, dword [ebx + 0x80]
mov byte [ebp - 4], 0x3c
test ecx, ecx
jne 0x4161eb
push 0x80004003
call fcn.00482960
lea edx, [ebp - 0x128]
push edx
lea eax, [ebp - 0x28c]
push eax
call fcn.004012e0
push eax
lea ecx, [ebp + 0x5c]
push ecx
mov byte [ebp - 4], 0x3d
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x416217
push eax
call fcn.00482960
lea edx, [ebp - 0x28c]
push edx
call edi
lea eax, [ebp - 0x128]
push eax
mov byte [ebp - 4], 5
call edi
cmp word [ebp + 0x5c], 1
je 0x416299
lea ecx, [ebp + 0x5c]
push ecx
lea ecx, [ebp + 0x24]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 0x3e
test esi, esi
je 0x416260
cmp dword [esi + 4], 0
jne 0x41625b
mov edx, dword [esi]
push edx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x416262
xor esi, esi
lea edi, [ebx + 0x98]
test esi, esi
jne 0x416270
xor eax, eax
jmp 0x41627e
mov eax, esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x416275
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
lea ecx, [ebp + 0x24]
mov byte [ebp - 4], 5
call fcn.00401ad0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebx + 0x98]
lea esi, [ebx + 0x98]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x4162c3
push 0x32
mov ecx, esi
call fcn.00401800
mov esi, dword [esi]
mov eax, dword [ebp + 0x6c]
push esi
push 0x12
push eax
lea ecx, [ebx + 0xe0]
call fcn.00459c19
mov ecx, 8
push 0x48f814
mov word [ebp - 0x148], cx
call fcn.00482a00
mov dword [ebp - 0x140], eax
mov ecx, dword [ebx + 0x80]
mov byte [ebp - 4], 0x3f
test ecx, ecx
jne 0x41630b
push 0x80004003
call fcn.00482960
lea edx, [ebp - 0x148]
push edx
lea eax, [ebp - 0x2ac]
push eax
call fcn.004012e0
push eax
lea ecx, [ebp + 0x5c]
push ecx
mov byte [ebp - 4], 0x40
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x416337
push eax
call fcn.00482960
lea edx, [ebp - 0x2ac]
push edx
call edi
lea eax, [ebp - 0x148]
push eax
mov byte [ebp - 4], 5
call edi
cmp word [ebp + 0x5c], 1
je 0x4163b9
lea ecx, [ebp + 0x5c]
push ecx
lea ecx, [ebp + 0x1c]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 0x41
test esi, esi
je 0x416380
cmp dword [esi + 4], 0
jne 0x41637b
mov edx, dword [esi]
push edx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x416382
xor esi, esi
lea edi, [ebx + 0xac]
test esi, esi
jne 0x416390
xor eax, eax
jmp 0x41639e
mov eax, esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x416395
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 5
call fcn.00401ad0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebx + 0xac]
lea esi, [ebx + 0xac]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x4163e3
push 0x32
mov ecx, esi
call fcn.00401800
mov esi, dword [esi]
mov eax, dword [ebp + 0x6c]
push esi
push 0x13
push eax
lea ecx, [ebx + 0xe0]
call fcn.00459c19
mov ecx, 8
push 0x48eacc
mov word [ebp - 0x15c], cx
call fcn.00482a00
mov dword [ebp - 0x154], eax
mov ecx, dword [ebx + 0x80]
mov byte [ebp - 4], 0x42
test ecx, ecx
jne 0x41642b
push 0x80004003
call fcn.00482960
lea edx, [ebp - 0x15c]
push edx
lea eax, [ebp - 0x2cc]
push eax
call fcn.004012e0
push eax
lea ecx, [ebp + 0x5c]
push ecx
mov byte [ebp - 4], 0x43
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x416457
push eax
call fcn.00482960
lea edx, [ebp - 0x2cc]
push edx
call edi
lea eax, [ebp - 0x15c]
push eax
mov byte [ebp - 4], 5
call edi
cmp word [ebp + 0x5c], 1
je 0x4164d9
lea ecx, [ebp + 0x5c]
push ecx
lea ecx, [ebp + 0x14]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 0x44
test esi, esi
je 0x4164a0
cmp dword [esi + 4], 0
jne 0x41649b
mov edx, dword [esi]
push edx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x4164a2
xor esi, esi
lea edi, [ebx + 0xcc]
test esi, esi
jne 0x4164b0
xor eax, eax
jmp 0x4164be
mov eax, esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4164b5
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], 5
call fcn.00401ad0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebx + 0xcc]
lea esi, [ebx + 0xcc]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x416503
push 0x32
mov ecx, esi
call fcn.00401800
mov esi, dword [esi]
mov eax, dword [ebp + 0x6c]
push esi
push 0x14
push eax
lea ecx, [ebx + 0xe0]
call fcn.00459c19
mov ecx, 8
push 0x48eab4
mov word [ebp - 0x17c], cx
call fcn.00482a00
mov dword [ebp - 0x174], eax
mov ecx, dword [ebx + 0x80]
mov byte [ebp - 4], 0x45
test ecx, ecx
jne 0x41654b
push 0x80004003
call fcn.00482960
lea edx, [ebp - 0x17c]
push edx
lea eax, [ebp - 0x2ec]
push eax
call fcn.004012e0
push eax
lea ecx, [ebp + 0x5c]
push ecx
mov byte [ebp - 4], 0x46
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x416577
push eax
call fcn.00482960
lea edx, [ebp - 0x2ec]
push edx
call edi
lea eax, [ebp - 0x17c]
push eax
mov byte [ebp - 4], 5
call edi
cmp word [ebp + 0x5c], 1
je 0x4165f9
lea ecx, [ebp + 0x5c]
push ecx
lea ecx, [ebp + 0xc]
call fcn.00401be0
mov esi, dword [eax]
mov byte [ebp - 4], 0x47
test esi, esi
je 0x4165c0
cmp dword [esi + 4], 0
jne 0x4165bb
mov edx, dword [esi]
push edx
call fcn.00482b80
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x4165c2
xor esi, esi
lea edi, [ebx + 0xc0]
test esi, esi
jne 0x4165d0
xor eax, eax
jmp 0x4165de
mov eax, esi
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4165d5
sub eax, ecx
push eax
push esi
mov ecx, edi
call fcn.004019c0
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 5
call fcn.00401ad0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebx + 0xc0]
lea esi, [ebx + 0xc0]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x32
or eax, ecx
jge 0x416623
push 0x32
mov ecx, esi
call fcn.00401800
mov esi, dword [esi]
mov eax, dword [ebp + 0x6c]
push esi
push 0x15
push eax
lea ecx, [ebx + 0xe0]
call fcn.00459c19
mov esi, dword [ebx + 0x80]
inc dword [ebp + 0x6c]
test esi, esi
jne 0x41664e
push 0x80004003
call fcn.00482960
mov ecx, dword [esi]
mov edx, dword [ecx + 0x90]
push esi
call edx
jmp 0x414d62
mov dword [ebp - 4], 0
jmp 0x4166a7
push 0
push 0
push 0x48ea78
call fcn.00451fe9
lea eax, [ebp + 0x5c]
push eax
call edi
xor eax, eax
jmp 0x41671a
mov esi, dword [ebx + 0x80]
test esi, esi
jne 0x4166bb
push 0x80004003
call fcn.00482960
mov ecx, dword [esi]
mov edx, dword [ecx + 0x80]
push esi
call edx
test eax, eax
jge 0x4166d6
push 0x48e864
push esi
push eax
call fcn.00482980
mov eax, dword [ebx + 0x80]
test eax, eax
je 0x4166f2
mov dword [ebx + 0x80], 0
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
lea eax, [ebp + 0x5c]
push eax
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x41670c
mov ecx, ebx
call fcn.004126a0
push 0
mov ecx, ebx
call fcn.0044d72f
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
add ebp, 0x70
mov esp, ebp
pop ebp
ret