Function at 0x42f62d
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x46acf2
push eax
mov dword fs:[0], esp
sub esp, 0xf0
push ebx
push ebp
push esi
mov esi, ecx
xor ebx, ebx
push edi
mov al, byte [esi + 0x9c]
test al, al
jne 0x42f66b
mov edi, dword [esi + 0x94]
lea ecx, [esp + 0x3c]
push ecx
push edi
mov eax, dword [edi]
call dword [eax + 0x54]
cmp eax, ebx
jge 0x42f65e
push 0x4791d8
push edi
push eax
call fcn.0045c300
cmp dword [esp + 0x3c], ebx
jne 0x42f66b
xor al, al
jmp 0x4309fe
mov al, byte [esi + 0x9d]
test al, al
jne 0x4309f1
mov edi, dword [esi + 0x94]
lea eax, [esp + 0x1a]
mov byte [esi + 0x9d], 1
mov dword [esi + 0x70], ebx
mov edx, dword [edi]
push eax
push edi
call dword [edx + 0xc4]
cmp eax, ebx
jge 0x42f6a7
push 0x4791d8
push edi
push eax
call fcn.0045c300
movsx ebp, word [esp + 0x1a]
lea ecx, [ebp*4]
push ecx
call fcn.0045cff5
mov dword [esi + 0x6c], eax
add esp, 4
xor eax, eax
cmp ebp, ebx
jle 0x42f6d1
mov edx, dword [esi + 0x6c]
inc eax
cmp eax, ebp
mov dword [edx + eax*4 - 4], ebx
jl 0x42f6c5
push ebp
call fcn.0045cff5
mov ecx, ebp
mov edi, eax
mov edx, ecx
xor eax, eax
shr ecx, 2
mov dword [esi + 0x60], edi
add esp, 4
rep stosd dword es:[edi], eax
mov ecx, edx
mov dword [esp + 0x30], 0x461c4000
and ecx, 3
cmp ebp, ebx
rep stosb byte es:[edi], al
mov dword [esp + 0x2c], 0xc7c35000
jle 0x42fd1d
mov dword [esp + 0x28], ebp
jmp 0x42f711
xor ebx, ebx
mov edi, dword [esi + 0x94]
lea ecx, [esp + 0x1a]
push ecx
push edi
mov eax, dword [edi]
mov byte [esp + 0x18], 0
call dword [eax + 0xc4]
cmp eax, ebx
jge 0x42f73a
push 0x4791d8
push edi
push eax
call fcn.0045c300
movsx eax, word [esp + 0x1a]
mov ecx, dword [esi + 0x94]
lea edx, [esp + 0x1c]
push eax
push edx
call fcn.00430e70
mov ecx, dword [eax]
mov dword [esp + 0x108], ebx
cmp ecx, ebx
je 0x42f766
call fcn.004187b0
mov ebp, eax
jmp 0x42f768
xor ebp, ebp
mov al, byte [esp + 0x12]
push ebx
lea ecx, [esp + 0x94]
mov byte [esp + 0x94], al
call fcn.00401a10
mov edi, ebp
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push ebp
lea ecx, [esp + 0x98]
call fcn.00401a60
mov ecx, dword [esp + 0x1c]
mov byte [esp + 0x108], 2
cmp ecx, ebx
je 0x42f7b3
call fcn.00402060
mov dword [esp + 0x1c], ebx
mov cl, byte [esp + 0x12]
push ebx
mov byte [esp + 0x84], cl
lea ecx, [esp + 0x84]
call fcn.00401a10
mov edi, str.none
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.none
lea ecx, [esp + 0x88]
call fcn.00401a60
mov dl, byte [esp + 0x12]
push ebx
lea ecx, [esp + 0xd0]
mov byte [esp + 0x10c], 3
mov byte [esp + 0xd0], dl
call fcn.00401a10
mov edi, 0x47f834
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x47f834
lea ecx, [esp + 0xd4]
call fcn.00401a60
mov edi, dword [esi + 0x94]
lea ecx, [esp + 0x3c]
push ecx
push edi
mov eax, dword [edi]
mov byte [esp + 0x110], 4
call dword [eax + 0xb8]
cmp eax, ebx
jge 0x42f859
push 0x4791d8
push edi
push eax
call fcn.0045c300
mov edx, dword [esp + 0x3c]
and edx, 0xff
mov dword [esp + 0x48], edx
jne 0x42f873
mov byte [esp + 0x11], 0
jmp 0x42f931
mov edi, dword [esi + 0x94]
lea ecx, [esp + 0x22]
push ecx
push edi
mov eax, dword [edi]
mov byte [esp + 0x19], 1
call dword [eax + 0xc4]
cmp eax, ebx
jge 0x42f89c
push 0x4791d8
push edi
push eax
call fcn.0045c300
movsx eax, word [esp + 0x22]
mov ecx, dword [esi + 0x94]
lea edx, [esp + 0x40]
push eax
push edx
call fcn.00430e70
mov ecx, dword [eax]
mov byte [esp + 0x108], 5
cmp ecx, ebx
je 0x42f8c9
call fcn.004187b0
mov edx, eax
jmp 0x42f8cb
xor edx, edx
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
lea ecx, [esp + 0xd4]
call fcn.00401a60
mov ecx, dword [esp + 0x40]
mov byte [esp + 0x108], 4
cmp ecx, ebx
je 0x42f8fe
call fcn.00402060
mov dword [esp + 0x40], ebx
mov eax, dword [0x46f234]
lea ecx, [esi + 0x38]
push eax
push ebx
push ecx
lea ecx, [esp + 0x8c]
call fcn.00402510
mov edx, dword [0x46f234]
lea eax, [esp + 0xcc]
push edx
push ebx
push eax
lea ecx, [esp + 0x8c]
call fcn.0040d140
mov edi, dword [esi + 0x94]
lea edx, [esp + 0x18]
push edx
push edi
mov ecx, dword [edi]
call dword [ecx + 0xb8]
cmp eax, ebx
jge 0x42f955
push 0x4791d8
push edi
push eax
call fcn.0045c300
mov al, byte [esp + 0x18]
mov edi, dword [esi + 0x94]
lea ecx, [esp + 0x4c]
test al, al
mov eax, dword [edi]
push ecx
push edi
setne bl
call dword [eax + 0xb8]
test eax, eax
jge 0x42f982
push 0x4791d8
push edi
push eax
call fcn.0045c300
mov edx, dword [esp + 0x4c]
mov edi, str.none
and edx, 0xff
setne byte [esp + 0x12]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov eax, dword [esp + 0x98]
mov dword [esp + 0x48], edx
not ecx
dec ecx
push ecx
push str.none
push eax
push 0
lea ecx, [esp + 0xa0]
call fcn.004186c0
test eax, eax
jne 0x42f9f4
mov edi, str.none
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
mov ecx, dword [esp + 0x8c]
push str.none
push ecx
push eax
lea ecx, [esp + 0x90]
call fcn.004186c0
test eax, eax
je 0x42fcc0
mov dl, byte [esp + 0x90]
push 0
lea ecx, [esp + 0x74]
mov byte [esp + 0x74], dl
call fcn.00401a10
mov eax, dword [0x46f234]
lea ecx, [esp + 0x90]
push eax
push 0
push ecx
lea ecx, [esp + 0x7c]
call fcn.00402510
mov dl, byte [esi + 0x38]
lea edi, [esi + 0x38]
push 0
lea ecx, [esp + 0x60]
mov byte [esp + 0x10c], 6
mov byte [esp + 0x60], dl
call fcn.00401a10
mov eax, dword [0x46f234]
lea ecx, [esp + 0x5c]
push eax
push 0
push edi
call fcn.00402510
mov ecx, dword [0x46f234]
lea edx, [esp + 0x90]
push ecx
push 0
push edx
lea ecx, [esp + 0x68]
mov byte [esp + 0x114], 7
call fcn.0040d140
mov eax, dword [esi + 0x70]
xor edi, edi
test eax, eax
jle 0x42fad1
mov eax, dword [esi + 0x6c]
mov eax, dword [eax + edi*4]
test eax, eax
je 0x42fabd
lea ecx, [eax + 0x28]
mov eax, dword [esp + 0x60]
test eax, eax
jne 0x42fa97
mov eax, 0x46f230
mov edx, dword [esp + 0x64]
push edx
push eax
mov eax, dword [ecx + 8]
push eax
push 0
call fcn.004186c0
test eax, eax
jne 0x42fabd
mov eax, dword [esi + 0x6c]
mov ecx, dword [esi + 0x70]
mov byte [esp + 0x10], 1
mov edx, dword [eax + edi*4]
mov dword [eax + ecx*4], edx
mov eax, dword [esi + 0x70]
inc edi
cmp edi, eax
jl 0x42fa7d
mov al, byte [esp + 0x10]
test al, al
jne 0x42fc88
mov edi, str.none
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov eax, dword [esp + 0x78]
not ecx
dec ecx
push ecx
push str.none
push eax
push 0
lea ecx, [esp + 0x80]
call fcn.004186c0
test eax, eax
jne 0x42fb91
push 0x8c
call fcn.0045cff5
mov edi, eax
add esp, 4
mov dword [esp + 0x44], edi
test edi, edi
mov byte [esp + 0x108], 8
je 0x42fb43
push 1
push 0
sub esp, 0x10
lea edx, [esp + 0x98]
mov ecx, esp
mov dword [esp + 0x68], esp
push edx
call fcn.004023f0
mov ecx, edi
call fcn.0041a310
jmp 0x42fb45
xor eax, eax
mov ecx, dword [esi + 0x7c]
push 1
push eax
mov byte [esp + 0x110], 7
call fcn.004187f0
mov ecx, dword [esi + 0x70]
mov edx, dword [esi + 0x6c]
push 0
mov dword [edx + ecx*4], eax
mov eax, dword [esi + 0x70]
mov ecx, dword [esi + 0x6c]
mov edx, dword [ecx + eax*4]
mov edi, dword [edx + 0x4c]
push edi
mov eax, dword [edi]
call dword [eax + 0x180]
test eax, eax
jge 0x42fc88
push 0x479c58
push edi
push eax
call fcn.0045c300
jmp 0x42fc88
test bl, bl
push 0x8c
je 0x42fbdb
call fcn.0045cff5
mov edi, eax
add esp, 4
mov dword [esp + 0x44], edi
test edi, edi
mov byte [esp + 0x108], 9
je 0x42fc15
push 0
push 0
push 0xff
push 0
sub esp, 0x10
lea edx, [esp + 0x7c]
mov ecx, esp
mov dword [esp + 0x70], esp
push edx
call fcn.004023f0
mov ecx, edi
call fcn.0041a8b0
jmp 0x42fc17
call fcn.0045cff5
mov edi, eax
add esp, 4
mov dword [esp + 0x44], edi
test edi, edi
mov byte [esp + 0x108], 0xa
je 0x42fc15
push 0
push 0
sub esp, 0x10
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x68], esp
push eax
call fcn.004023f0
mov ecx, edi
call fcn.0041a310
jmp 0x42fc17
xor eax, eax
mov ecx, dword [esi + 0x7c]
push 1
push eax
mov byte [esp + 0x110], 7
call fcn.004187f0
mov ecx, dword [esi + 0x70]
mov edx, dword [esi + 0x6c]
push 0
mov dword [edx + ecx*4], eax
mov eax, dword [esi + 0x70]
mov ecx, dword [esi + 0x6c]
mov edx, dword [ecx + eax*4]
mov edi, dword [edx + 0x4c]
push edi
mov eax, dword [edi]
call dword [eax + 0x180]
test eax, eax
jge 0x42fc5a
push 0x479c58
push edi
push eax
call fcn.0045c300
mov al, byte [esp + 0x11]
test al, al
je 0x42fc88
push 0
lea edx, [esp + 0x84]
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x58], esp
push edx
call fcn.004023f0
mov eax, dword [esi + 0x70]
mov ecx, dword [esi + 0x6c]
mov ecx, dword [ecx + eax*4]
call fcn.0041abb0
mov al, byte [esp + 0x12]
test al, al
je 0x42fc9a
mov edx, dword [esi + 0x70]
mov eax, dword [esi + 0x60]
mov byte [edx + eax], 1
push 1
lea ecx, [esp + 0x60]
mov byte [esp + 0x10c], 6
call fcn.00401a10
push 1
lea ecx, [esp + 0x74]
mov byte [esp + 0x10c], 4
call fcn.00401a10
mov ebx, dword [esi + 0x70]
push 1
inc ebx
lea ecx, [esp + 0xd0]
mov dword [esi + 0x70], ebx
mov byte [esp + 0x10c], 3
call fcn.00401a10
push 1
lea ecx, [esp + 0x84]
mov byte [esp + 0x10c], 2
call fcn.00401a10
push 1
lea ecx, [esp + 0x94]
mov dword [esp + 0x10c], 0xffffffff
call fcn.00401a10
mov eax, dword [esp + 0x28]
dec eax
mov dword [esp + 0x28], eax
jne 0x42f70f
xor ebx, ebx
mov edi, dword [esi + 0x94]
lea edx, [esp + 0x1a]
push edx
push edi
mov ecx, dword [edi]
call dword [ecx + 0xc4]
cmp eax, ebx
jge 0x42fd41
push 0x4791d8
push edi
push eax
call fcn.0045c300
movsx eax, word [esp + 0x1a]
cmp eax, ebx
mov dword [esp + 0x3c], ebx
jle 0x430949
mov ecx, esi
call fcn.0042f560
mov ecx, dword [0x47f9b4]
lea eax, [esp + 0xa0]
push eax
call fcn.00430d80
mov edi, dword [eax]
mov ebx, dword [esi + 0x1c]
test edi, edi
mov dword [esp + 0x108], 0xb
je 0x42fd86
mov ecx, dword [edi]
push edi
call dword [ecx + 4]
mov eax, dword [ebx]
test eax, eax
je 0x42fd92
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov dword [ebx], edi
mov eax, dword [esp + 0xa0]
or ebp, 0xffffffff
test eax, eax
mov dword [esp + 0x108], ebp
je 0x42fdaf
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x47f9b4]
lea edx, [esp + 0xc4]
push edx
call fcn.00401730
mov edi, dword [esi + 0x1c]
mov ebx, dword [eax]
add edi, 4
mov dword [esp + 0x108], 0xc
test ebx, ebx
je 0x42fddf
mov eax, dword [ebx]
push ebx
call dword [eax + 4]
mov eax, dword [edi]
test eax, eax
je 0x42fdeb
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [edi], ebx
mov eax, dword [esp + 0xc4]
test eax, eax
mov dword [esp + 0x108], ebp
je 0x42fe05
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [esi + 0x1c]
mov eax, dword [eax]
mov dword [esp + 0x28], 0
test eax, eax
je 0x42fe25
mov ecx, dword [eax]
lea edx, [esp + 0x28]
push edx
push 0x479168
push eax
call dword [ecx]
mov eax, dword [esi + 0x1c]
mov edx, dword [esp + 0x28]
push edx
mov dword [esp + 0x10c], 0xd
mov edi, dword [eax + 4]
push edi
mov ecx, dword [edi]
call dword [ecx + 0xf4]
xor ebx, ebx
cmp eax, ebx
jge 0x42fe56
push 0x4790f8
push edi
push eax
call fcn.0045c300
mov eax, dword [esp + 0x28]
mov dword [esp + 0x108], ebp
cmp eax, ebx
je 0x42fe6b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov edx, dword [esi + 0x1c]
mov eax, dword [edx + 4]
mov dword [esp + 0x40], ebx
cmp eax, ebx
je 0x42fe88
mov ecx, dword [eax]
lea edx, [esp + 0x40]
push edx
push 0x479108
push eax
call dword [ecx]
mov edi, dword [esi + 0x98]
mov edx, dword [esp + 0x40]
lea ecx, [esp + 0xe4]
mov dword [esp + 0x108], 0xe
mov eax, dword [edi]
push ecx
push edx
push edi
call dword [eax + 0x1a0]
cmp eax, ebx
jge 0x42febf
push 0x4790f8
push edi
push eax
call fcn.0045c300
mov eax, dword [esp + 0x40]
mov dword [esp + 0x108], ebp
cmp eax, ebx
je 0x42fed4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov edx, dword [esi + 0x1c]
push ebx
push ebx
push ebx
mov edi, dword [edx + 4]
push edi
mov eax, dword [edi]
call dword [eax + 0xb4]
cmp eax, ebx
jge 0x42fef6
push 0x4790f8
push edi
push eax
call fcn.0045c300
mov edi, dword [esi + 0x94]
lea edx, [esp + 0x4c]
push edx
push edi
mov ecx, dword [edi]
call dword [ecx + 0xc0]
cmp eax, ebx
jge 0x42ff1a
push 0x4791d8
push edi
push eax
call fcn.0045c300
mov edi, dword [esi + 0x94]
lea ecx, [esp + 0x44]
push ecx
push edi
mov eax, dword [edi]
call dword [eax + 0xc0]
cmp eax, ebx
jge 0x42ff3e
push 0x4791d8
push edi
push eax
call fcn.0045c300
mov edi, dword [esi + 0x94]
lea eax, [esp + 0x50]
push eax
push edi
mov edx, dword [edi]
call dword [edx + 0xc0]
cmp eax, ebx
jge 0x42ff62
push 0x4791d8
push edi
push eax
call fcn.0045c300
mov edi, dword [esi + 0x94]
lea edx, [esp + 0xa4]
push edx
push edi
mov ecx, dword [edi]
call dword [ecx + 0xc0]
cmp eax, ebx
jge 0x42ff89
push 0x4791d8
push edi
push eax
call fcn.0045c300
mov eax, dword [esi + 0x1c]
mov ecx, dword [esp + 0xa4]
mov dword [eax + 0xc], ecx
mov edi, dword [esi + 0x94]
lea eax, [esp + 0xe8]
mov edx, dword [edi]
push eax
push edi
call dword [edx + 0xc0]
cmp eax, ebx
jge 0x42ffbd
push 0x4791d8
push edi
push eax
call fcn.0045c300
mov edi, dword [esi + 0x94]
lea edx, [esp + 0xb8]
push edx
push edi
mov ecx, dword [edi]
call dword [ecx + 0xc0]
cmp eax, ebx
jge 0x42ffe4
push 0x4791d8
push edi
push eax
call fcn.0045c300
mov eax, dword [esi + 0x1c]
mov ecx, dword [esp + 0xb8]
mov dword [eax + 0x10], ecx
mov edi, dword [esi + 0x94]
lea eax, [esp + 0xc0]
mov edx, dword [edi]
push eax
push edi
call dword [edx + 0xc0]
cmp eax, ebx
jge 0x430018
push 0x4791d8
push edi
push eax
call fcn.0045c300
mov ecx, dword [esi + 0x1c]
mov edx, dword [esp + 0xc0]
mov dword [ecx + 0x14], edx
mov edi, dword [esi + 0x94]
lea ecx, [esp + 0xdc]
mov eax, dword [edi]
push ecx
push edi
call dword [eax + 0xc0]
cmp eax, ebx
jge 0x43004c
push 0x4791d8
push edi
push eax
call fcn.0045c300
mov edi, dword [esi + 0x94]
lea eax, [esp + 0xc8]
push eax
push edi
mov edx, dword [edi]
call dword [edx + 0xc0]
cmp eax, ebx
jge 0x430073
push 0x4791d8
push edi
push eax
call fcn.0045c300
mov ecx, dword [esi + 0x1c]
mov edx, dword [esp + 0xc8]
mov dword [ecx + 0x18], edx
mov edi, dword [esi + 0x94]
lea ecx, [esp + 0x12]
mov eax, dword [edi]
push ecx
push edi
call dword [eax + 0xc4]
cmp eax, ebx
jge 0x4300a4
push 0x4791d8
push edi
push eax
call fcn.0045c300
movsx edi, word [esp + 0x12]
mov dword [esi + 0x90], edi
lea edx, [edi + edi*2]
shl edx, 2
push edx
call fcn.0045cff5
add esp, 4
cmp edi, ebx
mov ebp, eax
jle 0x430222
lea ebx, [ebp + 8]
mov dword [esp + 0x1c], edi
mov edi, dword [esi + 0x94]
lea ecx, [esp + 0x38]
push ecx
push edi
mov eax, dword [edi]
call dword [eax + 0xc0]
test eax, eax
jge 0x4300f3
push 0x4791d8
push edi
push eax
call fcn.0045c300
mov edi, dword [esi + 0x94]
lea eax, [esp + 0x34]
push eax
push edi
mov edx, dword [edi]
call dword [edx + 0xc0]
test eax, eax
jge 0x430117
push 0x4791d8
push edi
push eax
call fcn.0045c300
mov edi, dword [esi + 0x94]
lea edx, [esp + 0x24]
push edx
push edi
mov ecx, dword [edi]
call dword [ecx + 0xc0]
test eax, eax
jge 0x43013b
push 0x4791d8
push edi
push eax
call fcn.0045c300
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x24]
mov dword [ebx - 8], eax
mov dword [ebx - 4], ecx
mov dword [ebx], edx
mov eax, dword [esi + 0x1c]
lea edx, [esp + 0xec]
push edx
mov edx, dword [esp + 0x38]
mov edi, dword [eax]
mov eax, dword [esp + 0x28]
push eax
mov eax, dword [esp + 0x40]
mov ecx, dword [edi]
push edx
push eax
push edi
add ebx, 0xc
call dword [ecx + 0x17c]
test eax, eax
jge 0x430187
push 0x479e60
push edi
push eax
call fcn.0045c300
fld dword [esp + 0x38]
fcomp dword [esp + 0x2c]
fnstsw ax
test ah, 0x41
jne 0x43019e
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x2c], ecx
fld dword [esp + 0x38]
fcomp dword [esp + 0x30]
fnstsw ax
test ah, 1
je 0x4301b5
mov edx, dword [esp + 0x38]
mov dword [esp + 0x30], edx
fld dword [esp + 0x34]
fcomp dword [esp + 0x2c]
fnstsw ax
test ah, 0x41
jne 0x4301cc
mov eax, dword [esp + 0x34]
mov dword [esp + 0x2c], eax
fld dword [esp + 0x34]
fcomp dword [esp + 0x30]
fnstsw ax
test ah, 1
je 0x4301e3
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x30], ecx
fld dword [esp + 0x24]
fcomp dword [esp + 0x2c]
fnstsw ax
test ah, 0x41
jne 0x4301fa
mov edx, dword [esp + 0x24]
mov dword [esp + 0x2c], edx
fld dword [esp + 0x24]
fcomp dword [esp + 0x30]
fnstsw ax
test ah, 1
je 0x430211
mov eax, dword [esp + 0x24]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x1c]
dec eax
mov dword [esp + 0x1c], eax
jne 0x4300cf
xor ebx, ebx
push ebp
call fcn.0045c5a9
mov edi, dword [esi + 0x94]
add esp, 4
lea edx, [esp + 0x18]
mov byte [esp + 0x10], 0
mov ecx, dword [edi]
push edx
push edi
call dword [ecx + 0xc4]
cmp eax, ebx
jge 0x430254
push 0x4791d8
push edi
push eax
call fcn.0045c300
mov eax, dword [esi + 0x54]
movsx edi, word [esp + 0x18]
cmp eax, ebx
je 0x430269
push eax
call fcn.0045c5a9
add esp, 4
lea eax, [edi + edi*2]
mov dword [esi + 0x54], ebx
shl eax, 2
push eax
call fcn.0045cff5
mov dword [esi + 0x54], eax
mov eax, dword [esi + 0x58]
add esp, 4
cmp eax, ebx
je 0x43028e
push eax
call fcn.0045c5a9
add esp, 4
lea ecx, [edi*4]
mov dword [esi + 0x58], ebx
push ecx
call fcn.0045cff5
add esp, 4
cmp edi, ebx
mov dword [esi + 0x58], eax
mov dword [esi + 0x8c], edi
mov dword [esp + 0x14], ebx
jle 0x4303c4
mov ebx, 8
mov edi, dword [esi + 0x94]
lea eax, [esp + 0x22]
push eax
push edi
mov edx, dword [edi]
call dword [edx + 0xc4]
test eax, eax
jge 0x4302df
push 0x4791d8
push edi
push eax
call fcn.0045c300
mov edi, dword [esi + 0x94]
lea edx, [esp + 0x5a]
push edx
push edi
mov ecx, dword [edi]
call dword [ecx + 0xc4]
test eax, eax
jge 0x430303
push 0x4791d8
push edi
push eax
call fcn.0045c300
mov edi, dword [esi + 0x94]
lea ecx, [esp + 0x58]
push ecx
push edi
mov eax, dword [edi]
call dword [eax + 0xc4]
test eax, eax
jge 0x430327
push 0x4791d8
push edi
push eax
call fcn.0045c300
mov edi, dword [esi + 0x94]
lea eax, [esp + 0x56]
movsx ebp, word [esp + 0x58]
mov edx, dword [edi]
push eax
push edi
call dword [edx + 0xc4]
test eax, eax
jge 0x430350
push 0x4791d8
push edi
push eax
call fcn.0045c300
movsx eax, word [esp + 0x22]
mov edx, dword [esi + 0x54]
mov edi, dword [esp + 0x14]
movsx ecx, word [esp + 0x56]
mov dword [ebx + edx - 8], eax
mov edx, dword [esi + 0x54]
movsx eax, word [esp + 0x5a]
mov dword [ebx + edx - 4], eax
mov edx, dword [esi + 0x54]
mov dword [ebx + edx], ebp
mov edx, dword [esi + 0x58]
add ebx, 0xc
mov dword [edx + edi*4], ecx
mov ecx, dword [esi + 0x1c]
mov edi, dword [ecx]
lea ecx, [esp + 0xe0]
push ecx
push ebp
mov edx, dword [edi]
push eax
movsx eax, word [esp + 0x2e]
push eax
push edi
call dword [edx + 0x18c]
test eax, eax
jge 0x4303ae
push 0x479e60
push edi
push eax
call fcn.0045c300
mov eax, dword [esp + 0x14]
movsx ecx, word [esp + 0x18]
inc eax
cmp eax, ecx
mov dword [esp + 0x14], eax
jl 0x4302bb
lea edx, [esp + 0xf0]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
movsx eax, word [esp + 0x18]
mov dword [esp + 0xf8], eax
lea eax, [esp + 0xf0]
push eax
mov word [esp + 0xf4], 0x16
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [esi + 0x50]
xor ebx, ebx
cmp eax, ebx
je 0x430408
push eax
call fcn.0045c5a9
add esp, 4
movsx edi, word [esp + 0x12]
mov dword [esi + 0x50], ebx
lea ecx, [edi*4]
push ecx
call fcn.0045cff5
mov dword [esi + 0x50], eax
mov eax, dword [esi + 0x5c]
add esp, 4
cmp eax, ebx
je 0x430433
push eax
call fcn.0045c5a9
add esp, 4
lea edx, [edi*8]
mov dword [esi + 0x5c], ebx
push edx
call fcn.0045cff5
add esp, 4
cmp edi, ebx
mov dword [esi + 0x5c], eax
jle 0x43055e
xor ebp, ebp
mov edi, dword [esi + 0x94]
lea ecx, [esp + 0x6c]
push ecx
push edi
mov eax, dword [edi]
call dword [eax + 0xc0]
test eax, eax
jge 0x430477
push 0x4791d8
push edi
push eax
call fcn.0045c300
mov edi, dword [esi + 0x94]
lea eax, [esp + 0xac]
push eax
push edi
mov edx, dword [edi]
call dword [edx + 0xc0]
test eax, eax
jge 0x43049e
push 0x4791d8
push edi
push eax
call fcn.0045c300
fld dword [esp + 0xac]
fmul dword [0x46f368]
fadd dword [0x46f24c]
fst dword [esp + 0x14]
fcomp dword [0x46f50c]
fnstsw ax
test ah, 0x41
jne 0x4304dd
fld dword [esp + 0x14]
fcomp dword [0x46f508]
fnstsw ax
test ah, 1
je 0x4304dd
mov dword [esp + 0x14], 0x3c23d70a
jmp 0x430507
fld dword [esp + 0x14]
fcomp dword [0x46f504]
fnstsw ax
test ah, 1
je 0x430507
fld dword [esp + 0x14]
fcomp dword [0x46f500]
fnstsw ax
test ah, 0x41
jne 0x430507
mov dword [esp + 0x14], 0x3f7d70a4
mov ecx, dword [esi + 0x50]
fld dword [esp + 0x6c]
mov dword [ecx + ebx*4], ebx
mov edx, dword [esi + 0x5c]
fstp dword [edx + ebp]
mov eax, dword [esi + 0x5c]
fld dword [esp + 0x14]
fstp dword [eax + ebp + 4]
mov ecx, dword [esi + 0x1c]
mov eax, dword [esp + 0x14]
push eax
mov edi, dword [ecx]
mov ecx, dword [esp + 0x70]
push ecx
push ebx
mov edx, dword [edi]
push edi
call dword [edx + 0x150]
test eax, eax
jge 0x43054b
push 0x479e60
push edi
push eax
call fcn.0045c300
movsx eax, word [esp + 0x12]
add ebp, 8
inc ebx
cmp ebx, eax
jl 0x430453
xor ebx, ebx
movsx eax, word [esp + 0x12]
cmp eax, ebx
mov dword [esp + 0x14], ebx
jle 0x4306f1
mov edi, dword [esi + 0x94]
lea eax, [esp + 0xb0]
push eax
push edi
mov edx, dword [edi]
call dword [edx + 0xb8]
test eax, eax
jge 0x430596
push 0x4791d8
push edi
push eax
call fcn.0045c300
mov ebx, dword [esi + 0x94]
mov edi, dword [esp + 0xb0]
lea edx, [esp + 0xa8]
and edi, 0xff
mov ecx, dword [ebx]
push edx
push ebx
call dword [ecx + 0xb8]
test eax, eax
jge 0x4305ca
push 0x4791d8
push ebx
push eax
call fcn.0045c300
mov ebp, dword [esi + 0x94]
mov ebx, dword [esp + 0xa8]
lea ecx, [esp + 0xbc]
and ebx, 0xff
mov eax, dword [ebp]
push ecx
push ebp
call dword [eax + 0xb8]
test eax, eax
jge 0x4305ff
push 0x4791d8
push ebp
push eax
call fcn.0045c300
mov eax, dword [esp + 0xbc]
and eax, 0xff
test edi, edi
jge 0x430615
add edi, 0x100
test ebx, ebx
jge 0x43061f
add ebx, 0x100
test eax, eax
jge 0x430628
add eax, 0x100
mov ecx, dword [esi + 0x80]
mov ebp, dword [esi + 0x84]
mov edx, dword [esi + 0x88]
add edi, ecx
add ebx, ebp
add eax, edx
cmp edi, 0xff
mov dword [esp + 0x1c], eax
jle 0x430651
mov edi, 0xff
cmp ebx, 0xff
jle 0x43065e
mov ebx, 0xff
cmp eax, 0xff
jle 0x43066e
mov eax, 0xff
mov dword [esp + 0x1c], eax
cmp edi, 0xff
jne 0x4306ab
test ebx, ebx
jne 0x4306ab
cmp eax, edi
jne 0x4306ab
mov edx, dword [esi + 0x1c]
mov ecx, dword [esp + 0x14]
push ebx
push edi
mov ebp, dword [edx]
push edi
push edi
push ecx
mov eax, dword [ebp]
push ebp
mov byte [esp + 0x28], 1
call dword [eax + 0x148]
test eax, eax
jge 0x4306ab
push 0x479e60
push ebp
push eax
call fcn.0045c300
mov edx, dword [esi + 0x1c]
mov ecx, dword [esp + 0x1c]
push 0xff
push ecx
mov ebp, dword [edx]
mov edx, dword [esp + 0x1c]
push ebx
push edi
mov eax, dword [ebp]
push edx
push ebp
call dword [eax + 0x148]
test eax, eax
jge 0x4306db
push 0x479e60
push ebp
push eax
call fcn.0045c300
mov eax, dword [esp + 0x14]
movsx ecx, word [esp + 0x12]
inc eax
cmp eax, ecx
mov dword [esp + 0x14], eax
jl 0x43056f
lea eax, [esp + 0x70]
mov byte [esp + 0x11], 0
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
movsx eax, word [esp + 0x18]
xor ebp, ebp
mov word [esp + 0x70], 0x16
test eax, eax
mov dword [esp + 0x78], 5
mov dword [esp + 0x14], ebp
jle 0x430821
mov ebx, 8
mov dword [esp + 0x1c], ebx
mov ecx, dword [esi + 0x58]
mov edx, dword [esi + 0x6c]
mov eax, dword [ecx + ebp*4]
mov dword [esp + 0x48], eax
mov eax, dword [edx + eax*4]
test eax, eax
je 0x430808
mov ecx, dword [esi + 0x1c]
mov dl, byte [ecx + 0x21]
test dl, dl
je 0x430768
mov dl, byte [eax + 0x6b]
test dl, dl
jne 0x430768
mov dl, byte [eax + 0x7d]
test dl, dl
jne 0x430768
mov dl, byte [eax + 0x7c]
test dl, dl
jne 0x430768
mov byte [esp + 0x11], 1
mov eax, dword [eax + 0x4c]
mov edi, dword [ecx]
push eax
push ebp
mov ecx, dword [edi]
push edi
call dword [ecx + 0x170]
test eax, eax
jge 0x430788
push 0x479e60
push edi
push eax
call fcn.0045c300
mov edx, dword [esi + 0x60]
mov eax, dword [esp + 0x48]
cmp byte [eax + edx], 0
je 0x430808
mov ecx, dword [esi + 0x1c]
mov eax, dword [esi + 0x54]
lea ebp, [esp + 0xb4]
mov edi, dword [ecx]
mov ecx, dword [ebx + eax - 8]
mov edx, dword [ebx + eax - 4]
mov eax, dword [ebx + eax]
mov ebx, dword [edi]
push ebp
push ecx
push edx
push eax
push edi
call dword [ebx + 0x18c]
test eax, eax
jge 0x4307cc
push 0x479e60
push edi
push eax
call fcn.0045c300
mov edx, dword [esi + 0x6c]
mov eax, dword [esp + 0x48]
mov ecx, dword [edx + eax*4]
mov edx, dword [esi + 0x1c]
mov eax, dword [ecx + 0x4c]
mov edi, dword [edx]
mov edx, dword [esp + 0xb4]
push eax
mov ecx, dword [edi]
push edx
push edi
call dword [ecx + 0x170]
test eax, eax
jge 0x430800
push 0x479e60
push edi
push eax
call fcn.0045c300
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
movsx eax, word [esp + 0x18]
add ebx, 0xc
inc ebp
cmp ebp, eax
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x14], ebp
jl 0x43072c
mov eax, dword [esi + 0x1c]
mov cl, byte [esp + 0x11]
push 1
mov byte [eax + 0x21], cl
mov edx, dword [esi + 0x1c]
mov edi, dword [edx]
push edi
mov eax, dword [edi]
call dword [eax + 0x11c]
test eax, eax
jge 0x43084b
push 0x479e60
push edi
push eax
call fcn.0045c300
mov ecx, dword [esi + 0x1c]
mov ebx, dword [esp + 0x50]
mov ebp, dword [esp + 0x44]
mov eax, dword [esp + 0x4c]
mov edi, dword [ecx + 4]
push ebx
push ebp
push eax
mov edx, dword [edi]
push edi
call dword [edx + 0xb4]
test eax, eax
jge 0x430879
push 0x4790f8
push edi
push eax
call fcn.0045c300
mov ecx, dword [esp + 0x4c]
mov edx, dword [esi + 0x1c]
push ebx
push ebp
push ecx
mov ecx, dword [edx + 0x1c]
call fcn.00453c70
mov al, byte [esp + 0x10]
test al, al
je 0x430928
lea eax, [esp + 0x5c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea ecx, [esp + 0x70]
lea edx, [esp + 0x5c]
push ecx
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jge 0x4308bc
push eax
call fcn.0045c2f2
mov eax, dword [esi + 0x1c]
sub esp, 0x10
mov edx, esp
mov dword [esp + 0x118], 0xf
mov edi, dword [eax + 4]
mov eax, dword [esp + 0x6c]
mov dword [edx], eax
mov eax, dword [esp + 0x70]
mov ecx, dword [edi]
push 0
mov dword [edx + 4], eax
mov eax, dword [esp + 0x78]
push edi
mov dword [edx + 8], eax
mov eax, dword [esp + 0x80]
mov dword [edx + 0xc], eax
call dword [ecx + 0x5c]
test eax, eax
jge 0x430908
push 0x4790f8
push edi
push eax
call fcn.0045c300
lea ecx, [esp + 0x5c]
mov dword [esp + 0x108], 0xffffffff
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
test eax, eax
jge 0x430928
push eax
call fcn.0045c2f2
lea edx, [esp + 0x70]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [esp + 0x3c]
movsx ecx, word [esp + 0x1a]
inc eax
cmp eax, ecx
mov dword [esp + 0x3c], eax
jl 0x42fd52
mov byte [esi + 0x9c], 1
mov eax, dword [esi + 0x94]
xor edi, edi
cmp eax, edi
je 0x430968
mov dword [esi + 0x94], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esi + 0x4c]
cmp eax, edi
je 0x430978
push eax
call fcn.0045c5a9
add esp, 4
mov eax, dword [esi + 0x50]
cmp eax, edi
je 0x430988
push eax
call fcn.0045c5a9
add esp, 4
mov eax, dword [esi + 0x54]
cmp eax, edi
je 0x430998
push eax
call fcn.0045c5a9
add esp, 4
mov eax, dword [esi + 0x5c]
cmp eax, edi
je 0x4309a8
push eax
call fcn.0045c5a9
add esp, 4
mov eax, dword [esi + 0x60]
cmp eax, edi
je 0x4309b8
push eax
call fcn.0045c5a9
add esp, 4
mov eax, dword [esi + 0x64]
cmp eax, edi
je 0x4309c8
push eax
call fcn.0045c5a9
add esp, 4
mov eax, dword [esi + 0x6c]
cmp eax, edi
je 0x4309d8
push eax
call fcn.0045c5a9
add esp, 4
mov dword [esi + 0x4c], edi
mov dword [esi + 0x50], edi
mov dword [esi + 0x54], edi
mov dword [esi + 0x5c], edi
mov dword [esi + 0x60], edi
mov dword [esi + 0x64], edi
mov dword [esi + 0x6c], edi
xor al, al
jmp 0x4309fe
mov ecx, dword [esi + 0x7c]
call fcn.00418840
test al, al
setne al
mov ecx, dword [esp + 0x100]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0xfc
ret