Function at 0x40a1b0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push edi
xor edx, edx
lea edi, [esp + 8]
and esp, 0xfffffff8
push dword [edi - 4]
push ebp
mov ebp, esp
push edi
push esi
lea edi, [ebp - 0x8ac]
mov esi, str.___Generated_.IDL_file__by_the_OLE_COM_Object_Viewer__n___n___typelib_filename:
push ebx
lea ebx, [ebp - 0x8ae]
mov ecx, ebx
sub ecx, edi
sub esp, 0xb38
mov eax, dword [str.___Generated_.IDL_file__by_the_OLE_COM_Object_Viewer__n___n___typelib_filename:]
sub esi, ecx
add ecx, 0x9e
shr ecx, 2
mov dword [ebp - 0x8ae], eax
mov eax, dword [0x40e23a]
mov dword [ebp - 0x814], eax
xor eax, eax
rep movsd dword es:[edi], dword [esi]
xor esi, esi
xor edi, edi
mov dword [ebp - 0xa8c], 0x730025
mov dword [ebp - 0xa88], 0x280020
mov dword [ebp - 0xa84], 0x730025
mov dword [ebp - 0xa80], 0x29
mov dword [ebp - 0x982], 0x650076
mov dword [ebp - 0x97e], 0x730072
mov dword [ebp - 0x97a], 0x6f0069
mov dword [ebp - 0x976], 0x28006e
mov dword [ebp - 0x972], 0x6c0025
mov dword [ebp - 0x96e], 0x2e0064
mov dword [ebp - 0x96a], 0x6c0025
mov dword [ebp - 0x966], 0x290064
mov word [ebp - 0x962], si
mov dword [ebp - 0x9fa], 0x790074
mov dword [ebp - 0x9f6], 0x650070
mov dword [ebp - 0x9f2], 0x650064
mov dword [ebp - 0x9ee], 0x200066
mov dword [ebp - 0x9ea], 0x6e0065
mov dword [ebp - 0x9e6], 0x6d0075
mov word [ebp - 0x9c2], ax
xor eax, eax
mov word [ebp - 0xa4c], ax
xor eax, eax
mov dword [ebp - 0x9e2], 0x20
mov dword [ebp - 0x9a2], 0x790074
mov dword [ebp - 0x99e], 0x650070
mov dword [ebp - 0x99a], 0x650064
mov dword [ebp - 0x996], 0x200066
mov dword [ebp - 0x992], 0x740073
mov dword [ebp - 0x98e], 0x750072
mov dword [ebp - 0x98a], 0x740063
mov dword [ebp - 0x986], 0x20
mov dword [ebp - 0xa7c], 0x6f006d
mov dword [ebp - 0xa78], 0x750064
mov dword [ebp - 0xa74], 0x65006c
mov dword [ebp - 0xa70], 0x20
mov dword [ebp - 0xa26], 0x6e0069
mov dword [ebp - 0xa22], 0x650074
mov dword [ebp - 0xa1e], 0x660072
mov dword [ebp - 0xa1a], 0x630061
mov dword [ebp - 0xa16], 0x200065
mov word [ebp - 0xa12], di
mov dword [ebp - 0x9de], 0x690064
mov dword [ebp - 0x9da], 0x700073
mov dword [ebp - 0x9d6], 0x6e0069
mov dword [ebp - 0x9d2], 0x650074
mov dword [ebp - 0x9ce], 0x660072
mov dword [ebp - 0x9ca], 0x630061
mov dword [ebp - 0x9c6], 0x200065
mov dword [ebp - 0xa5c], 0x6f0063
mov dword [ebp - 0xa58], 0x6c0063
mov dword [ebp - 0xa54], 0x730061
mov dword [ebp - 0xa50], 0x200073
mov dword [ebp - 0xa4a], 0x790074
mov word [ebp - 0xa3a], ax
xor eax, eax
mov word [ebp - 0x9a4], ax
xor eax, eax
mov word [ebp - 0xa28], ax
lea eax, [ebp - 0x810]
mov dword [ebp - 0x920], eax
lea eax, [ebp - 0xadc]
mov word [ebp - 0x9fc], dx
mov dword [ebp - 0xa46], 0x650070
mov dword [ebp - 0xa42], 0x650064
mov dword [ebp - 0xa3e], 0x200066
mov dword [ebp - 0x9c0], 0x790074
mov dword [ebp - 0x9bc], 0x650070
mov dword [ebp - 0x9b8], 0x650064
mov dword [ebp - 0x9b4], 0x200066
mov dword [ebp - 0x9b0], 0x6e0075
mov dword [ebp - 0x9ac], 0x6f0069
mov dword [ebp - 0x9a8], 0x20006e
mov dword [ebp - 0xa38], 0x69006c
mov dword [ebp - 0xa34], 0x720062
mov dword [ebp - 0xa30], 0x720061
mov dword [ebp - 0xa2c], 0x200079
mov dword [ebp - 0xaa4], 0x610074
mov dword [ebp - 0xaa0], 0x67
mov dword [ebp - 0xa10], 0x720070
mov dword [ebp - 0xa0c], 0x70006f
mov dword [ebp - 0xa08], 0x720065
mov dword [ebp - 0xa04], 0x690074
mov dword [ebp - 0xa00], 0x730065
mov dword [ebp - 0xa6c], 0x65006d
mov dword [ebp - 0xa68], 0x680074
mov dword [ebp - 0xa64], 0x64006f
mov dword [ebp - 0xa60], 0x73
mov dword [ebp - 0x930], 5
mov dword [ebp - 0x91c], 0x100
mov dword [ebp - 0x934], 0xffff0002
mov dword [ebp - 0x938], 0xffff0000
mov dword [esp + 4], eax
mov dword [esp], 0x41b690
call dword [sym.imp.oleaut32.dll_LoadTypeLib]
sub esp, 8
test eax, eax
js 0x40c4d5
mov eax, dword [ebp - 0xadc]
lea esi, [ebp - 0xabc]
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 0xc]
mov dword [ebp - 0xb10], eax
mov eax, dword [ebp - 0xadc]
sub esp, 4
mov edx, dword [eax]
mov dword [esp + 0xc], esi
lea esi, [ebp - 0xac0]
mov dword [esp + 8], esi
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 4], 0xffffffff
mov dword [esp], eax
call dword [edx + 0x24]
mov eax, dword [ebp - 0xadc]
lea ecx, [ebp - 0xad8]
sub esp, 0x18
mov edx, dword [eax]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0x1c]
mov eax, dword [sym.imp.ucrtbase.dll_calloc]
sub esp, 8
mov dword [esp + 4], 0x210
mov dword [esp], 1
mov dword [ebp - 0xb00], eax
call eax
mov dword [esp], 2
mov esi, eax
mov eax, dword [sym.imp.ucrtbase.dll_malloc]
mov dword [ebp - 0xb04], eax
call eax
xor ecx, ecx
mov edx, ebx
mov dword [ebp - 0x90c], esi
mov word [eax], cx
mov ebx, 4
mov dword [esi], eax
mov eax, esi
call fcn.00407610
mov edx, 0x41b690
mov eax, esi
call fcn.00407610
mov edx, 0x410560
mov eax, esi
call fcn.00407610
lea esi, [esi]
nop
mov edx, 0x41045e
mov eax, esi
call fcn.00407610
sub ebx, 1
jne 0x40a650
mov edx, str.uuid
mov eax, esi
call fcn.00407610
mov edx, 0x410444
mov eax, esi
call fcn.00407610
lea eax, [ebp - 0x810]
mov dword [esp + 8], 0x100
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xad8]
mov dword [esp], eax
mov eax, dword [sym.imp.ole32.dll_StringFromGUID2]
mov dword [ebp - 0xb20], eax
call eax
sub esp, 0xc
cmp word [ebp - 0x810], 0
je 0x40c613
lea eax, [ebp - 0x810]
lea esi, [esi]
nop
add eax, 2
cmp word [eax], 0
jne 0x40a6c0
lea ebx, [ebp - 0x810]
sub eax, ebx
sar eax, 1
sub eax, 1
xor edx, edx
mov ebx, 4
mov word [ebp + eax*2 - 0x810], dx
lea edx, [ebp - 0x80e]
mov eax, esi
call fcn.00407610
mov edx, 0x41056a
mov eax, esi
call fcn.00407610
nop
mov edx, 0x41045e
mov eax, esi
call fcn.00407610
sub ebx, 1
jne 0x40a700
mov eax, dword [ebp - 0xad8]
mov edi, dword [sym.imp.user32.dll_wsprintfW]
movzx edx, word [eax + 0x1a]
mov dword [esp + 0xc], edx
movzx eax, word [eax + 0x18]
mov dword [esp + 8], eax
lea eax, [ebp - 0x982]
mov dword [esp + 4], eax
lea eax, [ebp - 0x810]
mov dword [esp], eax
call edi
mov eax, esi
lea edx, [ebp - 0x810]
call fcn.00407610
mov eax, dword [ebp - 0xabc]
test eax, eax
je 0x40a7b2
mov edx, 0x410462
mov eax, esi
mov ebx, 4
call fcn.00407610
lea esi, [esi]
mov edx, 0x41045e
mov eax, esi
call fcn.00407610
sub ebx, 1
jne 0x40a770
mov edx, str.helpstring
mov eax, esi
call fcn.00407610
mov edx, 0x410468
mov eax, esi
call fcn.00407610
mov edx, dword [ebp - 0xabc]
mov eax, esi
call fcn.00407610
mov edx, 0x41046e
mov eax, esi
call fcn.00407610
mov edx, 0x410474
mov eax, esi
call fcn.00407610
lea edx, [ebp - 0xa38]
mov eax, esi
call fcn.00407610
mov edx, dword [ebp - 0xac0]
test edx, edx
je 0x40a7dc
mov eax, esi
call fcn.00407610
mov edx, 0x410572
mov eax, esi
call fcn.00407610
cmp word [esi + 4], 0
lea edx, [esi + 4]
je 0x40a801
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x40a7f8
xor eax, eax
mov ecx, 0x7d
jmp 0x40a817
movzx ecx, word [eax + 0x41057a]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x40a810
mov eax, dword [ebp - 0xabc]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0xac0]
mov dword [esp + 8], eax
lea eax, [ebp - 0xa8c]
mov dword [esp + 4], eax
lea eax, [ebp - 0x810]
mov dword [esp], eax
call edi
mov ebx, dword [sym.imp.oleaut32.dll_SysFreeString]
mov eax, dword [ebp - 0xac0]
mov dword [ebp - 0xafc], ebx
mov dword [esp], eax
call ebx
mov eax, dword [ebp - 0xabc]
sub esp, 4
mov dword [esp], eax
call ebx
lea eax, [ebp - 0x938]
sub esp, 4
mov dword [esp + 0xc], eax
mov eax, dword [0x41b684]
mov dword [esp + 8], 0
mov dword [esp], eax
mov eax, dword [sym.imp.user32.dll_SendMessageW]
mov dword [esp + 4], 0x1132
mov dword [ebp - 0xaf0], eax
call eax
mov ebx, dword [ebp - 0xb10]
mov dword [ebp - 0x938], eax
sub esp, 0x10
test ebx, ebx
jle 0x40c61d
mov dword [ebp - 0xae4], 0
lea eax, [ebp - 0x210]
mov dword [ebp - 0xaf8], eax
lea eax, [ebp - 0x410]
mov dword [ebp - 0xaf4], eax
lea eax, [ebp - 0x960]
mov dword [ebp - 0xb1c], eax
lea esi, [esi]
nop
mov eax, dword [ebp - 0xadc]
lea ebx, [ebp - 0xad4]
lea esi, [ebp - 0xac4]
lea edi, [ebp - 0xabc]
mov edx, dword [eax]
mov dword [esp + 8], ebx
mov ebx, dword [ebp - 0xae4]
mov dword [esp], eax
mov dword [esp + 4], ebx
lea ebx, [ebp - 0xac0]
call dword [edx + 0x10]
mov eax, dword [ebp - 0xad4]
sub esp, 0xc
mov edx, dword [eax]
mov dword [esp + 0x10], esi
lea esi, [ebp - 0xac8]
mov dword [esp + 0xc], edi
lea edi, [ebp - 0x810]
mov dword [esp + 0x14], 0
mov dword [esp + 8], ebx
mov dword [esp + 4], 0xffffffff
mov dword [esp], eax
call dword [edx + 0x30]
mov eax, dword [ebp - 0xad4]
sub esp, 0x18
mov edx, dword [eax]
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [edx + 0xc]
xor eax, eax
mov ecx, pe_nt_image_headers32
rep stosd dword es:[edi], eax
mov ecx, pe_nt_image_headers32
lea edi, [ebp - 0x610]
sub esp, 8
rep stosd dword es:[edi], eax
mov dword [esp + 4], 0x210
mov eax, dword [ebp - 0xb00]
mov dword [esp], 1
call eax
mov dword [esp], 2
mov edi, eax
mov dword [ebp - 0xae0], eax
mov eax, dword [ebp - 0xb04]
call eax
mov esi, dword [ebp - 0xac8]
xor ecx, ecx
mov dword [ebp - 0x90c], edi
mov dword [edi], eax
mov word [eax], cx
mov eax, dword [esi + 0x28]
mov dword [ebp - 0xaec], eax
cmp eax, 7
ja case.default.0x40a9de
jmp dword [eax*4 + 0x4105cc]
xor eax, eax
mov edx, 0x74
lea ebx, [ebp - 0xa4a]
jmp 0x40aa04
movzx edx, word [ebx + eax]
mov word [ebp + eax - 0x810], dx
add eax, 2
test dx, dx
jne 0x40aa00
mov eax, dword [ebp - 0xad4]
mov ecx, dword [esi + 0x3c]
lea edx, [ebp - 0x610]
mov dword [esp + 4], eax
movzx eax, word [esi + 0x40]
mov word [esp], ax
lea eax, [ebp - 0x810]
call fcn.00408980
cmp word [ebp - 0x810], 0
lea edx, [ebp - 0x810]
je 0x40aa59
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x40aa50
xor eax, eax
mov ecx, 0x20
jmp 0x40aa6f
movzx ecx, word [eax + 0x41045e]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x40aa68
cmp word [ebp - 0x810], 0
mov esi, dword [ebp - 0xac0]
lea edx, [ebp - 0x810]
je 0x40aaa1
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x40aa98
xor eax, eax
lea esi, [esi]
nop
movzx ecx, word [esi + eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x40aaa8
cmp word [ebp - 0x810], 0
lea edx, [ebp - 0x810]
je 0x40aad9
lea esi, [esi]
nop
add edx, 2
cmp word [edx], 0
jne 0x40aad0
xor eax, eax
lea esi, [esi]
nop
movzx ecx, word [ebp + eax - 0x610]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x40aae0
mov edx, dword [ebp - 0xae0]
mov eax, dword [ebp - 0xac8]
call fcn.00407bd0
mov eax, 0x79
mov edx, ebx
jmp 0x40ab14
movzx eax, word [edx + 2]
add edx, 2
test ax, ax
jne 0x40ab10
mov esi, dword [ebp - 0xae0]
sub edx, ebx
lea eax, [ebp - 0x810]
add edx, eax
mov eax, esi
lea ebx, [esi + 4]
call fcn.00407610
mov edx, 0x410540
mov eax, esi
call fcn.00407610
jmp 0x40b5c9
xor eax, eax
lea esi, [esi]
movzx edx, word [ebp + eax - 0xa5c]
mov word [ebp + eax - 0x810], dx
add eax, 2
test dx, dx
jne 0x40ab58
cmp word [ebp - 0x810], 0
mov ebx, dword [ebp - 0xac0]
lea edx, [ebp - 0x810]
je 0x40ab99
lea esi, [esi]
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x40ab90
xor eax, eax
lea esi, [esi]
nop
movzx ecx, word [ebx + eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x40aba0
mov eax, dword [ebp - 0xae0]
xor ecx, ecx
mov edx, 0x410458
mov dword [ebp - 0x410], 0x6f006e
mov dword [ebp - 0x40c], 0x63006e
mov ebx, dword [ebp - 0xad4]
mov edi, 4
mov dword [ebp - 0x408], 0x650072
mov dword [ebp - 0x404], 0x740061
mov dword [ebp - 0x400], 0x620061
mov dword [ebp - 0x3fc], 0x65006c
mov word [ebp - 0x3f8], cx
call fcn.00407610
mov dword [ebp - 0xae8], esi
mov esi, dword [ebp - 0xae0]
lea esi, [esi]
mov edx, 0x41045e
mov eax, esi
call fcn.00407610
sub edi, 1
jne 0x40ac20
mov eax, dword [ebp - 0xae0]
mov edx, str.uuid
mov esi, dword [ebp - 0xae8]
call fcn.00407610
mov eax, dword [ebp - 0xae0]
mov edx, 0x410444
call fcn.00407610
mov eax, dword [ebp - 0xaf8]
mov dword [esp], esi
mov dword [esp + 8], 0x100
mov ecx, dword [ebp - 0xb20]
mov dword [esp + 4], eax
call ecx
sub esp, 0xc
cmp word [ebp - 0x210], 0
je 0x40c646
mov eax, dword [ebp - 0xaf8]
lea esi, [esi]
nop
add eax, 2
cmp word [eax], 0
jne 0x40ac90
sub eax, dword [ebp - 0xaf8]
sar eax, 1
sub eax, 1
xor edx, edx
mov word [ebp + eax*2 - 0x210], dx
mov eax, dword [ebp - 0xae0]
lea edx, [ebp - 0x20e]
call fcn.00407610
mov eax, dword [ebp - 0xae0]
mov edx, 0x410448
call fcn.00407610
mov eax, dword [ebx]
lea ecx, [ebp - 0x8f4]
mov dword [esp], ebx
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], ecx
mov dword [esp + 8], 0
mov dword [esp + 4], 0xffffffff
call dword [eax + 0x30]
sub esp, 0x18
test eax, eax
jns 0x40c1a8
test byte [esi + 0x36], 2
je 0x40c1e0
mov esi, dword [ebp - 0xae0]
mov edx, 0x410474
mov eax, esi
call fcn.00407610
mov eax, esi
lea edx, [ebp - 0xa5c]
call fcn.00407610
mov edx, dword [ebp - 0xac0]
mov eax, esi
call fcn.00407610
mov eax, esi
mov edx, 0x41058e
xor esi, esi
call fcn.00407610
mov eax, dword [ebp - 0xac8]
xor edx, edx
xor ecx, ecx
mov ebx, dword [ebp - 0xad4]
movzx eax, word [eax + 0x30]
mov word [ebp - 0x8e0], si
xor esi, esi
mov word [ebp - 0x3fc], si
xor esi, esi
mov dword [ebp - 0xae8], eax
mov dword [ebp - 0x8f4], 0x6e0069
mov dword [ebp - 0x8f0], 0x650074
mov dword [ebp - 0x8ec], 0x660072
mov dword [ebp - 0x8e8], 0x630061
mov dword [ebp - 0x8e4], 0x200065
mov dword [ebp - 0x210], 0x690064
mov dword [ebp - 0x20c], 0x700073
mov dword [ebp - 0x208], 0x6e0069
mov dword [ebp - 0x204], 0x650074
mov dword [ebp - 0x200], 0x660072
mov dword [ebp - 0x1fc], 0x630061
mov dword [ebp - 0x1f8], 0x200065
mov word [ebp - 0x1f4], dx
mov dword [ebp - 0x960], 0x650064
mov dword [ebp - 0x95c], 0x610066
mov dword [ebp - 0x958], 0x6c0075
mov dword [ebp - 0x954], 0x74
mov dword [ebp - 0xa9c], 0x6f0073
mov dword [ebp - 0xa98], 0x720075
mov dword [ebp - 0xa94], 0x650063
mov word [ebp - 0xa90], cx
mov dword [ebp - 0x410], 0x650072
mov dword [ebp - 0x40c], 0x740073
mov dword [ebp - 0x408], 0x690072
mov dword [ebp - 0x404], 0x740063
mov dword [ebp - 0x400], 0x640065
test eax, eax
je 0x40b05e
mov dword [ebp - 0xb08], edi
mov edi, dword [ebp - 0xae0]
nop
mov eax, dword [ebx]
lea ecx, [ebp - 0xab4]
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov dword [esp], ebx
call dword [eax + 0x20]
sub esp, 0xc
test eax, eax
js 0x40b049
mov eax, dword [ebx]
mov edx, dword [ebp - 0xab4]
lea ecx, [ebp - 0xab8]
mov dword [esp], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
call dword [eax + 0x38]
sub esp, 0xc
test eax, eax
js 0x40b049
mov eax, dword [ebp - 0xab8]
lea ecx, [ebp - 0xaac]
mov edx, dword [eax]
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], ecx
mov dword [esp + 4], 0xffffffff
mov dword [esp], eax
call dword [edx + 0x30]
sub esp, 0x18
test eax, eax
mov eax, dword [ebp - 0xab8]
mov edx, dword [eax]
js 0x40b040
lea ecx, [ebp - 0xab0]
mov dword [esp], eax
mov dword [esp + 4], ecx
call dword [edx + 0xc]
mov ecx, 4
sub esp, 8
test eax, eax
js 0x40b038
mov dword [ebp - 0xaec], ebx
mov ebx, ecx
lea esi, [esi]
nop
mov edx, 0x41045e
mov eax, edi
call fcn.00407610
sub ebx, 1
jne 0x40af50
mov ebx, dword [ebp - 0xaec]
lea edx, [ebp - 0xaa8]
mov eax, dword [ebx]
mov dword [esp + 8], edx
mov dword [esp + 4], esi
mov dword [esp], ebx
call dword [eax + 0x24]
mov eax, dword [ebp - 0xaa8]
sub esp, 0xc
test al, 1
jne 0x40c248
test al, 2
jne 0x40c140
test al, 4
je 0x40afbf
mov edx, 0x410440
mov eax, edi
call fcn.00407610
mov edx, dword [ebp - 0xaf4]
mov eax, edi
call fcn.00407610
mov edx, 0x41055a
mov eax, edi
call fcn.00407610
mov eax, dword [ebp - 0xab0]
mov edx, dword [eax + 0x28]
cmp edx, 3
je 0x40c230
test byte [eax + 0x36], 0x40
jne 0x40c230
cmp edx, 4
je 0x40c588
mov edx, 0x41045e
mov eax, edi
call fcn.00407610
mov edx, dword [ebp - 0xaac]
mov eax, edi
call fcn.00407610
mov edx, 0x410540
mov eax, edi
call fcn.00407610
mov eax, dword [ebp - 0xaac]
mov dword [esp], eax
mov eax, dword [ebp - 0xafc]
call eax
mov eax, dword [ebp - 0xab8]
mov ecx, dword [ebp - 0xab0]
sub esp, 4
mov edx, dword [eax]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0x4c]
sub esp, 8
mov eax, dword [ebp - 0xab8]
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
sub esp, 4
add esi, 1
cmp dword [ebp - 0xae8], esi
jne 0x40ae90
mov edi, dword [ebp - 0xb08]
mov esi, dword [ebp - 0xae0]
lea ebx, [esi + 4]
cmp word [esi + 4], 0
mov eax, ebx
je 0x40b079
add eax, 2
cmp word [eax], 0
jne 0x40b070
mov edx, 0x7d
jmp 0x40b087
movzx edx, word [edi + 0x410488]
mov word [eax + edi], dx
add edi, 2
test dx, dx
jne 0x40b080
lea eax, [ebp - 0x938]
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov eax, dword [0x41b684]
mov dword [esp + 4], 0x1132
mov dword [esp], eax
mov eax, dword [ebp - 0xaf0]
call eax
mov eax, dword [ebp - 0xae0]
mov edx, ebx
sub esp, 0x10
call fcn.00407610
jmp 0x40b670
mov eax, dword [ebp - 0xaec]
nop
movzx edx, word [ebp + eax - 0x9fa]
mov word [ebp + eax - 0x810], dx
add eax, 2
test dx, dx
jne 0x40b0e0
cmp word [ebp - 0x810], 0
mov ebx, dword [ebp - 0xac0]
lea edx, [ebp - 0x810]
je 0x40b119
nop
add edx, 2
cmp word [edx], 0
jne 0x40b110
mov eax, dword [ebp - 0xaec]
nop
movzx ecx, word [ebx + eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x40b120
mov edx, dword [ebp - 0xae0]
mov eax, esi
lea ebx, [ebp - 0xa4a]
call fcn.00407bd0
mov eax, 0x79
mov edx, ebx
jmp 0x40b154
movzx eax, word [edx + 2]
add edx, 2
test ax, ax
jne 0x40b150
mov esi, dword [ebp - 0xae0]
sub edx, ebx
lea eax, [ebp - 0x9fa]
add edx, eax
mov eax, esi
call fcn.00407610
mov edx, 0x410482
mov eax, esi
call fcn.00407610
lea edx, [esi + 4]
cmp word [esi + 4], 0
mov dword [ebp - 0xb18], edx
je 0x40c650
lea esi, [esi]
nop
add edx, 2
cmp word [edx], 0
jne 0x40b198
mov eax, dword [ebp - 0xaec]
mov ecx, 0x7d
jmp 0x40b1b7
movzx ecx, word [eax + 0x410580]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x40b1b0
mov eax, dword [ebp - 0xae0]
mov ebx, dword [ebp - 0xac0]
mov edx, dword [ebp - 0xb18]
cmp word [eax + 4], 0
je 0x40b1e9
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x40b1e0
mov eax, dword [ebp - 0xaec]
nop
movzx ecx, word [ebx + eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x40b1f0
mov eax, dword [ebp - 0xae0]
mov edx, dword [ebp - 0xb18]
cmp word [eax + 4], 0
je 0x40b221
lea esi, [esi]
nop
add edx, 2
cmp word [edx], 0
jne 0x40b218
mov eax, dword [ebp - 0xaec]
mov ecx, 0x3b
jmp 0x40b237
movzx ecx, word [eax + 0x410540]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x40b230
lea eax, [ebp - 0x938]
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov eax, dword [0x41b684]
mov dword [esp + 4], 0x1132
mov dword [esp], eax
mov eax, dword [ebp - 0xaf0]
call eax
mov ebx, dword [ebp - 0xad4]
mov esi, eax
mov dword [ebp - 0xb24], eax
mov eax, dword [ebp - 0xac8]
sub esp, 0x10
movzx edi, word [eax + 0x2e]
mov eax, dword [ebp - 0xaf4]
mov dword [ebp - 0x8f4], esi
xor esi, esi
mov dword [ebp - 0x8ec], 5
mov dword [ebp - 0x8dc], eax
lea eax, [ebp - 0xaa8]
mov dword [ebp - 0xb08], edi
mov dword [ebp - 0x8d8], 0x100
mov dword [ebp - 0x8f0], 0xffff0002
mov dword [ebp - 0xb14], eax
test edi, edi
je 0x40b52c
mov dword [ebp - 0xae8], esi
mov esi, dword [ebp - 0xaf8]
mov edi, dword [ebp - 0xb14]
mov eax, dword [ebx]
mov dword [esp], ebx
mov dword [esp + 8], edi
mov edi, dword [ebp - 0xae8]
mov dword [esp + 4], edi
call dword [eax + 0x18]
sub esp, 0xc
test eax, eax
js 0x40b513
mov edx, dword [ebp - 0xaa8]
lea edi, [ebp - 0xa9c]
mov eax, dword [ebx]
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], edi
mov edx, dword [edx]
mov dword [esp], ebx
mov dword [esp + 4], edx
call dword [eax + 0x30]
sub esp, 0x18
test eax, eax
js 0x40b513
mov dword [esp + 4], 0x210
mov eax, dword [ebp - 0xb00]
mov dword [esp], 1
call eax
mov dword [esp], 2
mov edi, eax
mov dword [ebp - 0xb0c], eax
mov eax, dword [ebp - 0xb04]
call eax
mov dword [ebp - 0x8c8], edi
xor edx, edx
mov ecx, pe_nt_image_headers32
mov dword [edi], eax
mov edi, dword [ebp - 0xaf4]
mov word [eax], dx
xor eax, eax
rep stosd dword es:[edi], eax
mov ecx, pe_nt_image_headers32
mov edi, esi
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0xaa8]
cmp dword [eax + 0x20], 2
je 0x40c0e8
mov ecx, dword [eax + 0xc]
mov edi, dword [ebp - 0xaf4]
mov dword [esp + 4], ebx
mov edx, esi
movzx eax, word [eax + 0x10]
mov word [esp], ax
mov eax, edi
call fcn.00408980
cmp word [ebp - 0x410], 0
je 0x40c290
mov edx, edi
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x40b3e0
mov eax, dword [ebp - 0xaec]
mov ecx, 0x20
jmp 0x40b407
movzx ecx, word [eax + 0x41045e]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x40b400
cmp word [ebp - 0x410], 0
mov ecx, dword [ebp - 0xa9c]
mov edx, dword [ebp - 0xaf4]
je 0x40b439
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x40b430
mov eax, dword [ebp - 0xaec]
nop
movzx edi, word [ecx + eax]
mov word [edx + eax], di
add eax, 2
test di, di
jne 0x40b440
cmp word [ebp - 0x410], 0
mov edx, dword [ebp - 0xaf4]
je 0x40b469
add edx, 2
cmp word [edx], 0
jne 0x40b460
mov eax, dword [ebp - 0xaec]
nop
movzx edi, word [esi + eax]
mov word [edx + eax], di
add eax, 2
test di, di
jne 0x40b470
mov edi, dword [ebp - 0xb0c]
mov edx, ecx
mov eax, edi
call fcn.00407610
mov eax, edi
mov edx, esi
call fcn.00407610
mov eax, dword [ebp - 0xb08]
sub eax, 1
cmp dword [ebp - 0xae8], eax
jl 0x40c068
mov eax, dword [ebp - 0xb0c]
mov edx, 0x410552
call fcn.00407610
lea eax, [ebp - 0x8f4]
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov eax, dword [0x41b684]
mov dword [esp + 4], 0x1132
mov dword [esp], eax
mov eax, dword [ebp - 0xaf0]
call eax
mov eax, dword [ebp - 0xa9c]
sub esp, 0x10
mov dword [esp], eax
mov eax, dword [ebp - 0xafc]
call eax
mov eax, dword [ebx]
mov edx, dword [ebp - 0xaa8]
sub esp, 4
mov dword [esp + 4], edx
mov dword [esp], ebx
call dword [eax + 0x54]
sub esp, 8
add dword [ebp - 0xae8], 1
mov eax, dword [ebp - 0xae8]
cmp dword [ebp - 0xb08], eax
jne 0x40b2e0
mov ebx, dword [ebp - 0xae0]
mov eax, dword [ebp - 0xb24]
mov edx, ebx
call fcn.00407540
mov edx, dword [ebp - 0xb18]
mov eax, ebx
call fcn.00407610
jmp 0x40b670
xor eax, eax
mov edx, 0x6d
jmp 0x40b570
movzx edx, word [ebp + eax - 0xa7c]
mov word [ebp + eax - 0x810], dx
add eax, 2
test dx, dx
jne 0x40b568
cmp word [ebp - 0x810], 0
mov ebx, dword [ebp - 0xac0]
lea edx, [ebp - 0x810]
je 0x40b5a9
lea esi, [esi]
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x40b5a0
xor eax, eax
lea esi, [esi]
nop
movzx ecx, word [ebx + eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x40b5b0
mov eax, dword [ebp - 0xae0]
lea ebx, [eax + 4]
lea eax, [ebp - 0x938]
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov eax, dword [0x41b684]
mov dword [esp + 4], 0x1132
mov dword [esp], eax
mov eax, dword [ebp - 0xaf0]
call eax
mov esi, eax
mov eax, dword [ebp - 0xac8]
sub esp, 0x10
mov ecx, esi
movzx edx, word [eax + 0x2e]
mov eax, dword [ebp - 0xad4]
call fcn.00409170
mov edx, dword [ebp - 0xac8]
mov eax, dword [ebp - 0xad4]
mov ecx, esi
call fcn.004094d0
mov eax, dword [ebp - 0xac8]
movzx edx, word [eax + 0x30]
test edx, edx
je 0x40b63d
mov eax, dword [ebp - 0xad4]
mov ecx, esi
call fcn.00409f50
mov eax, dword [ebp - 0xac0]
mov dword [esp + 8], 0x12
mov dword [esp + 4], str.IUnknown
mov dword [esp], eax
call sub.ucrtbase.dll_memcmp
test eax, eax
jne 0x40c050
mov eax, dword [ebp - 0xae0]
mov edx, ebx
call fcn.00407610
mov eax, dword [ebp - 0xad4]
mov ecx, dword [ebp - 0xac8]
mov edx, dword [eax]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0x4c]
mov eax, dword [ebp - 0xad4]
sub esp, 8
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
mov eax, dword [ebp - 0xac0]
mov edi, dword [ebp - 0xafc]
sub esp, 4
mov dword [esp], eax
call edi
mov eax, dword [ebp - 0xabc]
sub esp, 4
mov dword [esp], eax
call edi
add dword [ebp - 0xae4], 1
mov eax, dword [ebp - 0xae4]
sub esp, 4
cmp dword [ebp - 0xb10], eax
jne 0x40a8f0
mov eax, dword [ebp - 0x938]
mov dword [esp + 0xc], eax
mov eax, dword [0x41b684]
mov dword [esp + 8], 2
mov dword [esp], eax
mov eax, dword [ebp - 0xaf0]
mov dword [esp + 4], 0x1102
call eax
xor edx, edx
xor eax, eax
sub esp, 0x10
mov dword [ebp + eax - 0x958], edx
add eax, 4
cmp eax, 0x20
jb 0x40b708
mov eax, dword [ebp - 0x938]
mov dword [esp + 8], 0
mov esi, str.___TLib_:_n___Forward_declare_all_types_defined_in_this_typelib
mov dword [ebp - 0x960], 4
mov dword [ebp - 0x95c], eax
mov eax, dword [ebp - 0xb1c]
mov dword [esp + 4], 0x113e
mov dword [esp + 0xc], eax
mov eax, dword [0x41b684]
mov dword [esp], eax
mov eax, dword [ebp - 0xaf0]
call eax
mov edi, dword [ebp - 0xaf4]
mov ecx, 0x1f
mov ebx, dword [ebp - 0x93c]
rep movsd dword es:[edi], dword [esi]
sub esp, 0x10
movzx eax, word [esi]
mov word [edi], ax
mov eax, dword [ebp - 0x95c]
mov dword [esp + 8], 4
mov dword [esp + 0xc], eax
mov eax, dword [0x41b684]
mov dword [esp + 4], 0x110a
mov dword [esp], eax
mov eax, dword [ebp - 0xaf0]
call eax
lea edx, [ebp - 0x410]
mov dword [ebp - 0xae0], eax
sub esp, 0x10
mov esi, eax
mov eax, ebx
call fcn.00407330
mov edx, 0x410552
mov eax, ebx
call fcn.00407610
mov ecx, dword [ebp - 0xae0]
xor edx, edx
xor eax, eax
mov dword [ebp + eax - 0x8ec], edx
add eax, 4
cmp eax, 0x20
jb 0x40b7d0
mov eax, dword [ebp - 0xaf8]
lea edi, [ebp - 0x8f4]
mov dword [ebp - 0x8f4], 5
mov dword [ebp - 0x8e0], 0x100
mov dword [ebp - 0x8e4], eax
test ecx, ecx
je 0x40c3b0
mov dword [ebp - 0xae0], ebx
mov ebx, dword [ebp - 0xaf0]
jmp 0x40b84b
mov eax, dword [0x41b684]
mov dword [esp + 0xc], esi
mov dword [esp + 8], 1
mov dword [esp + 4], 0x110a
mov dword [esp], eax
call ebx
sub esp, 0x10
mov esi, eax
test eax, eax
je 0x40c3b0
mov eax, dword [0x41b684]
mov dword [ebp - 0x8f0], esi
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], 0x113e
mov dword [esp], eax
call ebx
mov eax, dword [ebp - 0x8d0]
sub esp, 0x10
mov ecx, dword [eax + 0x208]
test ecx, ecx
je 0x40b820
mov edx, dword [eax + 0x20c]
test edx, edx
jne 0x40b820
cmp word [ebp - 0x210], 0
mov edx, dword [ebp - 0xaf8]
je 0x40b8a9
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x40b8a0
xor eax, eax
mov ecx, 0x3b
jmp 0x40b8bf
movzx ecx, word [eax + 0x4105c6]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x40b8b8
mov edx, dword [ebp - 0xaf8]
mov eax, dword [ebp - 0xae0]
call fcn.00407330
mov eax, dword [ebp - 0xae0]
mov edx, 0x410552
call fcn.00407610
jmp 0x40b820
xor eax, eax
mov edx, 0x74
jmp 0x40b910
movzx edx, word [ebp + eax - 0x9c0]
mov word [ebp + eax - 0x810], dx
add eax, 2
test dx, dx
jne 0x40b908
cmp word [ebp - 0x810], 0
mov ebx, dword [ebp - 0xac0]
lea edx, [ebp - 0x810]
je 0x40b949
lea esi, [esi]
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x40b940
xor eax, eax
lea esi, [esi]
nop
movzx ecx, word [ebx + eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x40b950
jmp 0x40b5c0
mov eax, dword [ebp - 0xac4]
movzx edx, word [esi + 0x30]
mov dword [esp + 8], esi
mov ebx, dword [ebp - 0xae0]
mov ecx, dword [ebp - 0xac0]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xabc]
mov dword [esp + 0xc], ebx
mov dword [esp], eax
mov eax, dword [ebp - 0xad4]
call fcn.00407e30
mov eax, dword [ebp - 0xac8]
mov dword [ebx + 0x208], 1
test byte [eax + 0x36], 0x40
jne 0x40c180
cmp word [ebp - 0x810], 0
lea edx, [ebp - 0x810]
je 0x40b9d9
lea esi, [esi]
nop
add edx, 2
cmp word [edx], 0
jne 0x40b9d0
xor eax, eax
mov ecx, 0x64
jmp 0x40b9f0
movzx ecx, word [ebp + eax - 0x9de]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x40b9e8
cmp word [ebp - 0x810], 0
mov ebx, dword [ebp - 0xac0]
lea edx, [ebp - 0x810]
je 0x40ba21
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x40ba18
xor eax, eax
lea esi, [esi]
nop
movzx ecx, word [ebx + eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x40ba28
lea eax, [ebp - 0x938]
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov eax, dword [0x41b684]
mov dword [esp + 4], 0x1132
mov dword [esp], eax
mov eax, dword [ebp - 0xaf0]
call eax
mov edi, dword [ebp - 0x938]
mov esi, eax
sub esp, 0x10
xor eax, eax
nop
movzx edx, word [ebp + eax - 0xa10]
mov word [ebp + eax - 0x810], dx
add eax, 2
test dx, dx
jne 0x40ba70
mov dword [esp + 4], 0x210
mov eax, dword [ebp - 0xb00]
mov dword [esp], 1
mov dword [ebp - 0x938], esi
call eax
mov dword [esp], 2
mov ebx, eax
mov eax, dword [ebp - 0xb04]
call eax
xor ecx, ecx
lea edx, [ebp - 0xa10]
mov dword [ebp - 0x90c], ebx
mov word [eax], cx
mov dword [ebx], eax
mov eax, ebx
call fcn.00407610
mov edx, 0x410596
mov eax, ebx
call fcn.00407610
lea eax, [ebp - 0x938]
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov eax, dword [0x41b684]
mov dword [esp + 4], 0x1132
mov dword [esp], eax
mov eax, dword [ebp - 0xaf0]
call eax
mov ecx, eax
mov dword [ebp - 0x938], eax
mov eax, dword [ebp - 0xac8]
sub esp, 0x10
movzx edx, word [eax + 0x2e]
mov eax, dword [ebp - 0xad4]
call fcn.00409170
mov eax, dword [ebp - 0x938]
mov edx, ebx
call fcn.00407540
xor eax, eax
lea esi, [esi]
movzx edx, word [ebp + eax - 0xa6c]
mov word [ebp + eax - 0x810], dx
add eax, 2
test dx, dx
jne 0x40bb38
mov dword [esp + 4], 0x210
mov eax, dword [ebp - 0xb00]
mov dword [esp], 1
mov dword [ebp - 0x938], esi
call eax
mov dword [esp], 2
mov ebx, eax
mov eax, dword [ebp - 0xb04]
call eax
xor edx, edx
mov dword [ebp - 0x90c], ebx
mov word [eax], dx
lea edx, [ebp - 0xa6c]
mov dword [ebx], eax
mov eax, ebx
call fcn.00407610
mov edx, 0x410596
mov eax, ebx
call fcn.00407610
lea eax, [ebp - 0x938]
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov eax, dword [0x41b684]
mov dword [esp + 4], 0x1132
mov dword [esp], eax
mov eax, dword [ebp - 0xaf0]
call eax
mov edx, dword [ebp - 0xac8]
mov ecx, eax
mov dword [ebp - 0x938], eax
mov eax, dword [ebp - 0xad4]
sub esp, 0x10
call fcn.004094d0
mov eax, dword [ebp - 0x938]
mov edx, ebx
call fcn.00407540
mov eax, dword [ebp - 0xac8]
movzx edx, word [eax + 0x30]
test edx, edx
jne 0x40c190
mov ebx, dword [ebp - 0xae0]
mov eax, esi
mov edx, ebx
call fcn.00407540
mov eax, ebx
lea edx, [ebx + 4]
call fcn.00407610
mov eax, dword [ebp - 0xad4]
mov dword [ebp - 0x938], edi
lea ecx, [ebp - 0xacc]
mov edx, dword [eax]
mov dword [esp + 8], ecx
mov dword [esp + 4], 0xffffffff
mov dword [esp], eax
call dword [edx + 0x20]
sub esp, 0xc
test eax, eax
js 0x40b670
mov eax, dword [ebp - 0xad4]
mov ecx, dword [ebp - 0xac8]
lea edi, [ebp - 0x810]
mov edx, dword [eax]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0x4c]
mov eax, dword [ebp - 0xac0]
mov ebx, dword [ebp - 0xafc]
sub esp, 8
mov dword [esp], eax
call ebx
mov eax, dword [ebp - 0xabc]
sub esp, 4
mov dword [esp], eax
call ebx
xor eax, eax
mov ecx, pe_nt_image_headers32
xor ebx, ebx
rep stosd dword es:[edi], eax
sub esp, 4
mov eax, dword [ebp - 0xb00]
mov dword [esp + 4], 0x210
mov dword [esp], 1
call eax
mov dword [esp], 2
mov esi, eax
mov dword [ebp - 0xae0], eax
mov eax, dword [ebp - 0xb04]
call eax
lea ecx, [ebp - 0xad0]
mov dword [ebp - 0x90c], esi
mov word [eax], bx
lea ebx, [ebp - 0xac4]
mov dword [esi], eax
mov eax, dword [ebp - 0xad4]
mov edx, dword [eax]
mov dword [esp + 8], ecx
mov ecx, dword [ebp - 0xacc]
mov dword [esp], eax
mov dword [esp + 4], ecx
call dword [edx + 0x38]
mov eax, dword [ebp - 0xad0]
sub esp, 0xc
mov edx, dword [eax]
mov dword [esp + 0x10], ebx
lea ebx, [ebp - 0xabc]
mov dword [esp + 0xc], ebx
lea ebx, [ebp - 0xac0]
mov dword [esp + 8], ebx
lea ebx, [ebp - 0xac8]
mov dword [esp + 0x14], 0
mov dword [esp + 4], 0xffffffff
mov dword [esp], eax
call dword [edx + 0x30]
mov eax, dword [ebp - 0xad0]
sub esp, 0x18
mov edx, dword [eax]
mov dword [esp + 4], ebx
mov dword [esp], eax
call dword [edx + 0xc]
mov eax, dword [ebp - 0xac8]
mov ecx, dword [ebp - 0xac0]
sub esp, 8
movzx edx, word [eax + 0x30]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0xac4]
mov dword [esp + 0xc], esi
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xabc]
mov dword [esp], eax
mov eax, dword [ebp - 0xad4]
call fcn.00407e30
cmp word [ebp - 0x810], 0
mov dword [esi + 0x208], 1
lea edx, [ebp - 0x810]
je 0x40bdb9
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x40bdb0
xor eax, eax
mov ecx, 0x69
jmp 0x40bdd0
movzx ecx, word [ebp + eax - 0xa26]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x40bdc8
cmp word [ebp - 0x810], 0
mov ebx, dword [ebp - 0xac0]
lea edx, [ebp - 0x810]
je 0x40be01
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x40bdf8
xor eax, eax
lea esi, [esi]
nop
movzx ecx, word [ebx + eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x40be08
mov eax, dword [ebp - 0xad0]
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
sub esp, 4
jmp 0x40b5c0
mov ebx, dword [ebp - 0xae0]
lea edx, [ebp - 0x9a2]
mov eax, ebx
call fcn.00407610
mov eax, ebx
lea edx, [ebp - 0xaa4]
call fcn.00407610
mov edx, dword [ebp - 0xac0]
mov eax, ebx
call fcn.00407610
mov eax, ebx
mov edx, 0x41058e
call fcn.00407610
mov eax, ebx
lea ebx, [ebx + 4]
cmp word [eax + 4], 0
mov edx, ebx
je 0x40be89
lea esi, [esi]
nop
add edx, 2
cmp word [edx], 0
jne 0x40be80
xor eax, eax
mov ecx, 0x7d
jmp 0x40be9f
movzx ecx, word [eax + 0x410580]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x40be98
mov esi, dword [ebp - 0xae0]
mov eax, dword [ebp - 0xac0]
mov ecx, ebx
cmp word [esi + 4], 0
je 0x40bec9
add ecx, 2
cmp word [ecx], 0
jne 0x40bec0
xor edx, edx
lea esi, [esi]
nop
movzx esi, word [eax + edx]
mov word [ecx + edx], si
add edx, 2
test si, si
jne 0x40bed0
mov esi, dword [ebp - 0xae0]
mov ecx, ebx
cmp word [esi + 4], 0
je 0x40bef9
nop
add ecx, 2
cmp word [ecx], 0
jne 0x40bef0
xor edx, edx
mov esi, 0x3b
jmp 0x40bf0f
movzx esi, word [edx + 0x410540]
mov word [ecx + edx], si
add edx, 2
test si, si
jne 0x40bf08
cmp word [ebp - 0x810], 0
lea ecx, [ebp - 0x810]
je 0x40bf39
lea esi, [esi]
nop
add ecx, 2
cmp word [ecx], 0
jne 0x40bf30
xor edx, edx
lea esi, [esi]
nop
movzx esi, word [ebp + edx - 0x9a2]
mov word [ecx + edx], si
add edx, 2
test si, si
jne 0x40bf40
cmp word [ebp - 0x810], 0
lea edx, [ebp - 0x810]
je 0x40bf78
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x40bf68
lea esi, [esi]
movzx ecx, word [eax]
add eax, 2
add edx, 2
mov word [edx - 2], cx
test cx, cx
jne 0x40bf78
jmp 0x40b5c9
mov eax, dword [ebp - 0xac4]
movzx edx, word [esi + 0x30]
mov dword [esp + 8], esi
mov ebx, dword [ebp - 0xae0]
mov ecx, dword [ebp - 0xac0]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xabc]
mov dword [esp + 0xc], ebx
mov dword [esp], eax
mov eax, dword [ebp - 0xad4]
call fcn.00407e30
cmp word [ebp - 0x810], 0
mov dword [ebx + 0x208], 1
lea edx, [ebp - 0x810]
je 0x40bfe9
add edx, 2
cmp word [edx], 0
jne 0x40bfe0
xor eax, eax
mov ecx, 0x69
jmp 0x40c000
movzx ecx, word [ebp + eax - 0xa26]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x40bff8
cmp word [ebp - 0x810], 0
mov ebx, dword [ebp - 0xac0]
lea edx, [ebp - 0x810]
je 0x40c031
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x40c028
xor eax, eax
lea esi, [esi]
nop
movzx ecx, word [ebx + eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x40c038
jmp 0x40b5c0
mov edx, dword [ebp - 0xae0]
mov eax, esi
call fcn.00407540
jmp 0x40b663
mov eax, dword [ebp - 0xb0c]
mov edx, 0x41054e
call fcn.00407610
jmp 0x40b4ad
mov ecx, dword [ebp - 0xac0]
xor eax, eax
lea esi, [esi]
movzx edx, word [ecx + eax]
mov word [ebp + eax - 0x810], dx
add eax, 2
test dx, dx
jne 0x40c088
mov eax, dword [ebp - 0xae0]
lea ebx, [eax + 4]
test byte [0x40e2c0], 1
je 0x40b5c9
mov eax, dword [esi + 0x28]
mov dword [esp + 0xc], str.pTypeAttr__typekind___d_not_supported_n
mov dword [esp + 8], str.PopulateTree
mov dword [esp + 0x10], eax
mov dword [esp + 4], 0x40e2c0
mov dword [esp], 0
call fcn.00407dd0
jmp 0x40b5c9
mov edi, dword [ebp - 0xb1c]
mov dword [esp], edi
call dword [sym.imp.oleaut32.dll_VariantInit]
mov eax, dword [ebp - 0xaa8]
sub esp, 4
mov dword [esp + 0xc], 8
mov dword [esp + 8], 0
mov eax, dword [eax + 8]
mov dword [esp], edi
mov dword [esp + 4], eax
call dword [sym.imp.oleaut32.dll_VariantChangeType]
sub esp, 0x10
test eax, eax
je 0x40c29b
mov eax, dword [ebp - 0xaa8]
jmp 0x40b3ab
mov edx, 0x410440
mov eax, edi
call fcn.00407610
lea edx, [ebp - 0xa9c]
mov eax, edi
call fcn.00407610
test byte [ebp - 0xaa8], 4
je 0x40afb3
mov edx, 0x41044c
mov eax, edi
call fcn.00407610
jmp 0x40afa6
mov dword [ebx + 0x20c], 1
jmp 0x40b9b8
mov eax, dword [ebp - 0xad4]
mov ecx, esi
call fcn.00409f50
jmp 0x40bc09
mov eax, dword [ebp - 0x8f4]
mov dword [esp], eax
call dword [sym.imp.oleaut32.dll_SysStringLen]
sub esp, 4
test eax, eax
jne 0x40c59a
mov eax, dword [ebp - 0x8f4]
mov dword [esp], eax
mov eax, dword [ebp - 0xafc]
call eax
sub esp, 4
test byte [esi + 0x36], 2
jne 0x40ad16
mov esi, dword [ebp - 0xae0]
mov edx, 0x410462
mov ebx, 4
mov eax, esi
call fcn.00407610
lea esi, [esi]
nop
mov edx, 0x41045e
mov eax, esi
call fcn.00407610
sub ebx, 1
jne 0x40c200
mov edx, dword [ebp - 0xaf4]
mov eax, dword [ebp - 0xae0]
call fcn.00407610
jmp 0x40ad16
lea edx, [ebp - 0x8f4]
mov eax, edi
call fcn.00407610
jmp 0x40afe4
mov edx, 0x410440
mov eax, edi
call fcn.00407610
mov edx, dword [ebp - 0xb1c]
mov eax, edi
call fcn.00407610
mov eax, dword [ebp - 0xaa8]
test al, 2
jne 0x40c278
test al, 4
je 0x40afb3
jmp 0x40c166
mov edx, 0x41044c
mov eax, edi
call fcn.00407610
jmp 0x40c14c
mov edx, dword [ebp - 0xaf4]
jmp 0x40b3e9
cmp word [ebp - 0x410], 0
mov edx, dword [ebp - 0xaf4]
je 0x40c2b9
lea esi, [esi]
nop
add edx, 2
cmp word [edx], 0
jne 0x40c2b0
mov eax, dword [ebp - 0xaec]
mov ecx, 0x63
jmp 0x40c2d7
movzx ecx, word [eax + str.const]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x40c2d0
cmp word [ebp - 0x410], 0
mov edx, dword [ebp - 0xaf4]
je 0x40c301
lea esi, [esi]
nop
add edx, 2
cmp word [edx], 0
jne 0x40c2f8
mov eax, dword [ebp - 0xaec]
mov ecx, 0x20
jmp 0x40c317
movzx ecx, word [eax + 0x41045e]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x40c310
cmp word [ebp - 0x210], 0
mov edx, esi
je 0x40c339
nop
add edx, 2
cmp word [edx], 0
jne 0x40c330
mov eax, dword [ebp - 0xaec]
mov ecx, 0x20
jmp 0x40c357
movzx ecx, word [eax + 0x410586]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x40c350
cmp word [ebp - 0x210], 0
mov edi, dword [ebp - 0x958]
mov edx, esi
je 0x40c381
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x40c378
mov eax, dword [ebp - 0xaec]
lea esi, [esi]
nop
movzx ecx, word [edi + eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x40c390
mov eax, dword [ebp - 0xaa8]
jmp 0x40b3ab
mov eax, dword [ebp - 0x95c]
mov dword [esp + 8], 4
mov dword [esp + 4], 0x110a
mov esi, dword [ebp - 0x93c]
mov dword [esp + 0xc], eax
mov eax, dword [0x41b684]
mov dword [esp], eax
mov eax, dword [ebp - 0xaf0]
call eax
xor ecx, ecx
mov edx, eax
mov ebx, eax
sub esp, 0x10
xor eax, eax
mov dword [ebp + eax - 0x208], ecx
add eax, 4
cmp eax, 0x20
jb 0x40c3eb
mov dword [ebp - 0x210], 4
test edx, edx
je 0x40c4a8
mov eax, ebx
mov edi, dword [ebp - 0xaf0]
mov ebx, esi
mov esi, eax
jmp 0x40c447
mov eax, dword [0x41b684]
mov dword [esp + 0xc], esi
mov dword [esp + 8], 1
mov dword [esp + 4], 0x110a
mov dword [esp], eax
call edi
sub esp, 0x10
mov esi, eax
test eax, eax
je 0x40c4a8
mov eax, dword [ebp - 0xaf8]
mov dword [ebp - 0x20c], esi
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov eax, dword [0x41b684]
mov dword [esp + 4], 0x113e
mov dword [esp], eax
call edi
mov eax, dword [ebp - 0x1ec]
sub esp, 0x10
mov eax, dword [eax + 0x20c]
test eax, eax
jne 0x40c420
mov eax, ebx
mov edx, 0x410552
call fcn.00407610
mov eax, dword [ebp - 0x1ec]
mov edx, dword [eax]
mov eax, ebx
call fcn.00407330
jmp 0x40c420
mov eax, dword [ebp - 0x93c]
lea edx, [eax + 4]
call fcn.00407610
mov eax, dword [ebp - 0xadc]
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
xor eax, eax
sub esp, 4
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
lea esp, [edi - 8]
pop edi
ret
mov esi, eax
mov eax, dword [0x41b03c]
lea edi, [ebp - 0x210]
mov dword [esp + 0xc], 0x100
mov dword [esp + 8], edi
lea ebx, [ebp - 0x410]
mov dword [esp + 4], 0x190
mov dword [esp], eax
call dword [sym.imp.user32.dll_LoadStringW]
lea eax, [ebp - 0x610]
mov dword [ebp - 0x60c], esi
mov dword [ebp - 0x610], 0x41b690
sub esp, 0x10
mov dword [esp + 0x10], ebx
mov dword [esp + 4], edi
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], 0x100
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp], 0x2400
call dword [sym.imp.kernel32.dll_FormatMessageW]
mov eax, dword [0x41b020]
sub esp, 0x1c
mov dword [esp + 4], ebx
mov dword [esp + 0xc], 0x30
mov dword [esp + 8], 0
mov dword [esp], eax
call dword [sym.imp.user32.dll_MessageBoxW]
mov eax, 1
sub esp, 0x10
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
lea esp, [edi - 8]
pop edi
ret
mov edx, dword [ebp - 0xaf8]
mov eax, edi
call fcn.00407610
jmp 0x40afe4
mov eax, dword [ebp - 0xae0]
mov edx, 0x410462
mov ebx, 4
call fcn.00407610
mov dword [ebp - 0xae8], esi
mov esi, dword [ebp - 0xae0]
lea esi, [esi]
nop
mov edx, 0x41045e
mov eax, esi
call fcn.00407610
sub ebx, 1
jne 0x40c5c0
mov ebx, dword [ebp - 0xae0]
mov edx, str.helpstring
mov esi, dword [ebp - 0xae8]
mov eax, ebx
call fcn.00407610
mov eax, ebx
mov edx, 0x410468
call fcn.00407610
mov edx, dword [ebp - 0x8f4]
mov eax, ebx
call fcn.00407610
mov edx, 0x41046e
mov eax, ebx
call fcn.00407610
jmp 0x40c1c2
mov eax, 0xffffffff
jmp 0x40a6d6
lea esi, [ebp - 0x210]
mov dword [ebp - 0xaf8], esi
lea esi, [ebp - 0x410]
mov dword [ebp - 0xaf4], esi
lea esi, [ebp - 0x960]
mov dword [ebp - 0xb1c], esi
jmp 0x40b6dd
mov eax, 0xffffffff
jmp 0x40aca4
mov edx, dword [ebp - 0xb18]
jmp 0x40b1a1