Function at 0x40bf70
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x124
mov eax, dword [0x4c33fc]
push ebx
push esi
push edi
mov dword [esp + 0x10], ecx
test al, 1
je 0x40d4bf
mov edi, dword [ebp + 0x10]
xor eax, eax
push 8
mov word [esp + 0x5c], 1
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], 0
mov dword [esp + 0x10], eax
mov dword [esp + 0x28], eax
mov word [esp + 0x2c], 1
call fcn.00420bca
mov ebx, eax
add esp, 4
mov dword [esp + 0x2c], eax
test ebx, ebx
je 0x40d688
mov dword [ebx], 0x14
mov esi, dword [ebp + 0xc]
mov edx, dword [ebp + 8]
mov ecx, dword [esi]
mov dword [ebx + 4], 0
mov eax, dword [edx + 4]
mov dword [esp + 0x54], ebx
mov eax, dword [eax + ecx*4]
mov dword [esp + 0x50], 1
movsx eax, word [eax + 0xa]
mov dword [esp + 0x14], 0x17
mov dword [esp + 0x5c], eax
jmp 0x40c07b
mov byte [esp + 0x1b], 1
cmp byte [esp + 0x1b], 0
mov eax, dword [esi]
mov ecx, dword [esp + 0x60]
mov eax, dword [eax + 0x18]
mov dword [ecx + 0x1c], eax
mov eax, dword [esi]
mov ecx, dword [esp + 0x3c]
mov eax, dword [eax + 0x1c]
mov dword [ecx + 0x18], eax
mov ecx, dword [esi]
mov eax, dword [0x4c33f0]
mov dword [ecx + 0x18], eax
mov ecx, dword [esi]
mov eax, dword [0x4c33ec]
mov dword [ecx + 0x1c], eax
je 0x40c52b
mov eax, dword [esi]
test eax, eax
je 0x40c52b
mov eax, dword [eax + 0x14]
test eax, eax
je 0x40c52b
push dword [esp + 0x64]
mov esi, dword [ebp + 0xc]
mov ecx, dword [esp + 0x14]
inc dword [esi]
push eax
push esi
push dword [ebp + 8]
call fcn.0040d9a0
test eax, eax
js 0x47b7d3
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov ecx, dword [esi]
cmp ecx, eax
je case.0x40d12e.4
mov esi, dword [edx + 4]
mov edx, dword [esi + ecx*4]
movzx eax, word [edx + 8]
cmp ax, 0x7f
je case.0x40d12e.4
cwde
cmp eax, 0x33
je 0x40c142
cmp eax, 0x4f
je case.0x40d12e.4
cmp eax, 5
je 0x40c47b
cmp eax, 0x58
ja case.0x40d12e.4
movzx eax, byte [eax + 0x40d7a8]
jmp dword [eax*4 + 0x40d73c]
mov eax, dword [edx]
cmp eax, 4
jl 0x40d11d
cmp eax, 0x27
jge 0x40d11d
mov esi, 0x14
mov dword [esp + 0x14], esi
lea esp, [esp]
mov cl, byte [esp + 0x59]
test cl, cl
jne 0x40c669
mov eax, ebx
mov eax, dword [eax]
imul eax, eax, 0x15
movzx eax, byte [eax + esi + 0x4bcc20]
cmp eax, 3
jne 0x40c3ec
cmp dword [esp + 0x20], 1
jne 0x40d730
xor edi, edi
mov eax, dword [esp + 0x24]
mov dword [esp + 0xc], eax
test eax, eax
jne 0x40c8b2
test ebx, ebx
je 0x40c137
mov esi, dword [ebx + 4]
push ebx
call fcn.00420c3e
add esp, 4
mov ebx, esi
test esi, esi
jne 0x40c125
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov esi, dword [esp + 0x20]
mov dword [esp + 0x14], 0x16
test esi, esi
jne 0x40c852
cmp edi, 0x4c3400
je 0x40c19c
cmp dword [edi + 0xc], 4
je 0x40cf1c
mov esi, dword [edi + 8]
test esi, esi
jne 0x40cf2e
mov eax, dword [edi + 0xc]
cmp eax, 5
jge 0x47c080
push 0x4c3400
mov ecx, edi
mov dword [edi + 0xc], 1
mov dword [edi], 0
call fcn.0040d8a0
mov esi, dword [esp + 0x20]
mov eax, dword [esp + 0xc]
inc esi
mov dword [esp + 0x20], esi
cmp esi, 1
jne 0x40c89e
mov dword [esp + 0x64], edi
cmp byte [0x4c32e4], 0
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
mov edx, dword [eax]
mov dword [esp + 0x34], edx
jne 0x47c528
cmp dword [0x4c32d8], 0
je 0x40c52f
cmp byte [0x4c32e1], 0
jne 0x47c213
mov esi, dword [0x4c32dc]
cmp dword [esi], 0
je 0x40c52f
mov eax, dword [0x4c33d0]
mov byte [esp + 0x1b], 0
test al, 1
je 0x47c220
mov dword [0x4c33f0], 0
mov dword [0x4c33ec], 0
mov dword [esp + 0x3c], 0x4c33d4
mov dword [esp + 0x60], 0x4c33d4
mov eax, dword [esp + 0x34]
mov edx, dword [esi]
mov eax, dword [eax + 4]
mov ecx, dword [edx + 4]
mov dword [esp + 0x38], edx
mov dword [esp + 0x44], eax
test eax, eax
je 0x47c244
test ecx, ecx
je 0x47c24c
cmp eax, ecx
jb 0x40c44b
mov ecx, dword [edx]
mov edx, dword [esp + 0x34]
mov dword [esp + 0x30], eax
mov edx, dword [edx]
test eax, eax
je 0x40c284
mov edi, edi
mov ax, word [edx]
cmp ax, word [ecx]
jne 0x40c288
add edx, 2
add ecx, 2
dec dword [esp + 0x30]
jne 0x40c270
xor eax, eax
jmp 0x40c294
movzx eax, word [edx]
cmp ax, word [ecx]
sbb eax, eax
and eax, 0xfffffffe
inc eax
test eax, eax
js 0x40c31b
jle 0x40c008
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x38]
mov ecx, dword [edx + 0x1c]
test ecx, ecx
je 0x40c00d
mov ebx, dword [esp + 0x34]
mov edx, dword [ecx + 4]
mov ebx, dword [ebx]
cmp edx, eax
mov dword [esp + 0x30], ebx
mov ebx, dword [ecx]
cmova edx, eax
mov dword [esp + 0x40], ebx
mov ebx, dword [esp + 0x2c]
mov dword [esp + 0x48], edx
test edx, edx
je 0x40c30e
mov eax, dword [esp + 0x40]
lea ecx, [ecx]
mov ebx, dword [esp + 0x30]
mov ax, word [eax]
cmp ax, word [ebx]
mov ebx, dword [esp + 0x2c]
mov eax, dword [esp + 0x40]
jne 0x40c3ac
add dword [esp + 0x30], 2
add eax, 2
dec dword [esp + 0x48]
mov dword [esp + 0x40], eax
jne 0x40c2e0
mov eax, dword [esp + 0x44]
cmp edx, eax
jb 0x40c3b8
jmp 0x40c3d3
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x38]
mov ecx, dword [edx + 0x18]
test ecx, ecx
je 0x40c00d
cmp eax, dword [ecx + 4]
mov ebx, dword [esp + 0x34]
cmova eax, dword [ecx + 4]
mov ebx, dword [ebx]
mov edx, dword [ecx]
mov dword [esp + 0x40], ebx
mov ebx, dword [esp + 0x2c]
mov dword [esp + 0x44], eax
mov dword [esp + 0x30], eax
test eax, eax
je 0x40c65b
mov eax, dword [esp + 0x40]
lea esp, [esp]
mov ax, word [eax]
cmp ax, word [edx]
mov eax, dword [esp + 0x40]
je 0x40c643
mov ax, word [eax]
cmp ax, word [edx]
jae 0x40c393
mov eax, dword [ecx + 0x1c]
mov edx, dword [esp + 0x38]
mov dword [edx + 0x18], eax
mov eax, dword [esi]
mov dword [ecx + 0x1c], eax
mov dword [esi], ecx
cmp dword [ecx + 0x18], 0
je 0x40c00d
mov eax, dword [esi]
mov ecx, dword [esp + 0x3c]
mov dword [ecx + 0x18], eax
mov eax, dword [esi]
mov dword [esp + 0x3c], eax
mov eax, dword [eax + 0x18]
mov dword [esi], eax
jmp 0x40c232
mov edx, dword [esp + 0x30]
mov ax, word [eax]
cmp ax, word [edx]
jae 0x40c3d3
mov eax, dword [ecx + 0x18]
mov edx, dword [esp + 0x38]
mov dword [edx + 0x1c], eax
mov eax, dword [esi]
mov dword [ecx + 0x18], eax
mov dword [esi], ecx
cmp dword [ecx + 0x1c], 0
je 0x40c00d
mov eax, dword [esi]
mov ecx, dword [esp + 0x60]
mov dword [ecx + 0x1c], eax
mov eax, dword [esi]
mov dword [esp + 0x60], eax
mov eax, dword [eax + 0x1c]
mov dword [esi], eax
jmp 0x40c232
cmp eax, 6
ja case.0x40c3f1.3
jmp dword [eax*4 + 0x40d804]
test cl, cl
jne 0x40c95d
push 8
call fcn.00420bca
add esp, 4
test eax, eax
je 0x40d6f9
mov dword [eax], esi
mov dword [eax + 4], ebx
mov ebx, eax
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x54], ebx
inc dword [esp + 0x50]
cmp esi, 7
je 0x40d19b
cmp esi, 8
je 0x40d19b
mov esi, dword [ebp + 0xc]
mov eax, dword [esp + 0x24]
mov edi, dword [esp + 0x1c]
mov dword [esp + 0xc], eax
jmp 0x40c078
mov eax, dword [esp + 0x34]
mov edx, dword [edx]
mov eax, dword [eax]
mov dword [esp + 0x30], eax
test ecx, ecx
je 0x40c284
nop
mov ax, word [eax]
cmp ax, word [edx]
mov eax, dword [esp + 0x30]
je 0x40d0ca
movzx eax, word [eax]
cmp ax, word [edx]
jmp 0x40c28e
mov esi, dword [esp + 0x20]
mov dword [esp + 0x14], 0x16
test esi, esi
jne 0x40c969
cmp edi, 0x4c3400
je 0x40c4d5
cmp dword [edi + 0xc], 4
je 0x40c8f9
mov esi, dword [edi + 8]
test esi, esi
jne 0x40c90b
mov eax, dword [edi + 0xc]
cmp eax, 5
jge 0x47bedd
push 0x4c3400
mov ecx, edi
mov dword [edi + 0xc], 1
mov dword [edi], 0
call fcn.0040d8a0
mov esi, dword [esp + 0x20]
mov edx, dword [esp + 0xc]
mov eax, dword [ebp + 0xc]
inc esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [esp + 0x20], esi
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
cmp esi, 1
jne 0x40c9b5
mov esi, edi
mov ecx, dword [esi + 8]
mov eax, dword [eax]
mov dword [esp + 0x48], eax
test ecx, ecx
jne 0x47bfac
mov eax, dword [esi + 0xc]
cmp eax, 5
jge 0x47bfbe
mov eax, dword [esp + 0x48]
mov dword [esi + 0xc], 1
mov dword [esi], eax
mov esi, dword [ebp + 0xc]
inc dword [esi]
jmp 0x40c078
mov edx, dword [esp + 0x34]
mov esi, dword [0x4c32c8]
mov dword [esp + 0x44], esi
test esi, esi
je 0x47c528
mov eax, dword [0x4c33d0]
mov byte [esp + 0x1b], 0
test al, 1
je 0x47c259
mov dword [0x4c33f0], 0
mov dword [0x4c33ec], 0
mov dword [esp + 0x30], 0x4c33d4
mov dword [esp + 0x60], 0x4c33d4
jmp 0x40c580
mov edx, dword [edx + 4]
mov ecx, dword [esi + 4]
mov dword [esp + 0x40], edx
test edx, edx
je 0x47c28b
test ecx, ecx
je 0x47c293
cmp edx, ecx
jb 0x40c737
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x34]
mov ecx, dword [ecx]
mov esi, edx
mov edx, dword [eax]
test esi, esi
je 0x40c5c9
mov ax, word [edx]
cmp ax, word [ecx]
jne 0x40c780
add edx, 2
add ecx, 2
dec esi
jne 0x40c5b4
xor eax, eax
mov esi, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
test eax, eax
js 0x40c791
jg 0x40c671
mov byte [esp + 0x1b], 1
cmp byte [esp + 0x1b], 0
mov eax, dword [esi + 0x18]
mov ecx, dword [esp + 0x60]
mov dword [ecx + 0x1c], eax
mov eax, dword [0x4c32c8]
mov ecx, dword [esp + 0x30]
mov eax, dword [eax + 0x1c]
mov dword [ecx + 0x18], eax
mov ecx, dword [0x4c32c8]
mov eax, dword [0x4c33f0]
mov dword [ecx + 0x18], eax
mov ecx, dword [0x4c32c8]
mov eax, dword [0x4c33ec]
mov dword [ecx + 0x1c], eax
je 0x47c528
mov eax, dword [0x4c32c8]
test eax, eax
je 0x47c528
mov eax, dword [eax + 0x14]
test eax, eax
jne 0x40c059
jmp 0x47c528
add eax, 2
add edx, 2
dec dword [esp + 0x30]
mov dword [esp + 0x40], eax
jne 0x40c360
mov eax, dword [esp + 0x44]
cmp eax, dword [ecx + 4]
jae 0x40c393
jmp 0x40c378
mov eax, dword [ebx + 4]
jmp 0x40c0ee
lea eax, [esi + 0x1c]
mov dword [esp + 0x3c], eax
mov eax, dword [eax]
test eax, eax
je 0x40c5e6
mov eax, dword [eax + 4]
mov ebx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x34]
cmp eax, edx
mov ecx, dword [ecx]
cmova eax, edx
mov edx, dword [ebx]
mov ebx, dword [esp + 0x2c]
mov edx, dword [edx]
mov dword [esp + 0x38], eax
mov dword [esp + 0x48], eax
test eax, eax
je 0x40c6c0
mov ax, word [edx]
cmp ax, word [ecx]
jne 0x40c6c8
add edx, 2
add ecx, 2
dec dword [esp + 0x48]
jne 0x40c6a8
mov eax, dword [esp + 0x38]
cmp eax, dword [esp + 0x40]
jb 0x40c6ca
jmp 0x40c6ed
jae 0x40c6ed
mov ecx, dword [esp + 0x3c]
mov esi, dword [ecx]
mov eax, dword [esi + 0x18]
mov dword [ecx], eax
mov eax, dword [0x4c32c8]
mov dword [esi + 0x18], eax
mov dword [0x4c32c8], esi
cmp dword [esi + 0x1c], 0
je 0x40c5e6
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x34]
mov dword [ecx + 0x1c], esi
mov eax, dword [0x4c32c8]
mov dword [esp + 0x60], eax
mov esi, dword [eax + 0x1c]
mov dword [esp + 0x44], esi
mov dword [0x4c32c8], esi
jmp 0x40c580
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x54]
push eax
call fcn.0040de80
test eax, eax
js 0x40d71c
mov ebx, dword [esp + 0x54]
mov dword [esp + 0x2c], ebx
jmp 0x40c0e0
mov eax, dword [esi]
mov ebx, dword [esp + 0x34]
mov dword [esp + 0x38], eax
mov eax, dword [ebx]
mov ebx, dword [esp + 0x2c]
mov dword [esp + 0x3c], eax
test ecx, ecx
je 0x40c944
mov ebx, dword [esp + 0x38]
mov ax, word [eax]
cmp ax, word [ebx]
mov ebx, dword [esp + 0x2c]
mov eax, dword [esp + 0x3c]
je 0x40c931
movzx eax, word [eax]
mov ecx, dword [esp + 0x38]
cmp ax, word [ecx]
sbb eax, eax
and eax, 0xfffffffe
inc eax
jmp 0x40c5d3
movzx eax, word [edx]
cmp ax, word [ecx]
sbb eax, eax
and eax, 0xfffffffe
inc eax
jmp 0x40c5cb
mov ecx, dword [esi + 0x18]
lea eax, [esi + 0x18]
mov dword [esp + 0x40], eax
test ecx, ecx
je 0x40c5e6
mov eax, dword [ecx + 4]
cmp edx, eax
ja 0x40d0e2
mov eax, dword [ecx]
mov ebx, dword [esp + 0x34]
mov dword [esp + 0x38], eax
mov eax, dword [ebx]
mov ebx, dword [esp + 0x2c]
mov dword [esp + 0x48], edx
mov dword [esp + 0x3c], eax
test edx, edx
je 0x40c84b
mov edi, edi
mov ebx, dword [esp + 0x38]
mov ax, word [eax]
cmp ax, word [ebx]
mov ebx, dword [esp + 0x2c]
mov eax, dword [esp + 0x3c]
je 0x40c839
mov edx, dword [esp + 0x38]
mov ax, word [eax]
cmp ax, word [edx]
jae 0x40c813
mov esi, ecx
mov ecx, dword [esp + 0x40]
mov eax, dword [esi + 0x1c]
mov dword [ecx], eax
mov eax, dword [0x4c32c8]
mov dword [esi + 0x1c], eax
mov dword [0x4c32c8], esi
cmp dword [esi + 0x18], 0
je 0x40c5e6
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x34]
mov dword [ecx + 0x18], esi
mov eax, dword [0x4c32c8]
mov dword [esp + 0x30], eax
mov esi, dword [eax + 0x18]
mov dword [esp + 0x44], esi
mov dword [0x4c32c8], esi
jmp 0x40c580
add dword [esp + 0x38], 2
add eax, 2
dec dword [esp + 0x48]
mov dword [esp + 0x3c], eax
jne 0x40c7d0
cmp edx, dword [ecx + 4]
jae 0x40c813
jmp 0x40c7f0
cmp byte [esp + 0x29], 0
jne 0x40cec4
push 0x18
call fcn.00420bca
mov esi, eax
add esp, 4
test esi, esi
je 0x40d6e6
push 0x4c3400
mov ecx, esi
mov dword [esi + 8], 0
call fcn.0040d8a0
mov eax, dword [esp + 0xc]
mov dword [esi + 0x10], eax
mov eax, esi
mov esi, dword [esp + 0x20]
mov dword [esp + 0xc], eax
mov dword [esp + 0x24], eax
jmp 0x40c1a0
cmp byte [esp + 0x29], 0
jne 0x40d6ed
mov dword [esp + 0x64], eax
jmp 0x40c1b2
mov ebx, dword [esp + 0xc]
mov ecx, dword [ebx + 8]
mov esi, dword [ebx + 0x10]
mov dword [esp + 0x48], ecx
test ecx, ecx
jne 0x40d286
mov eax, dword [ebx + 0xc]
cmp eax, 5
jge 0x40d3f7
push ebx
mov dword [ebx + 0xc], 1
mov dword [ebx], 0
call fcn.00420c3e
add esp, 4
mov ebx, esi
test esi, esi
jne 0x40c8b6
mov ebx, dword [esp + 0x2c]
jmp 0x40c121
cmp dword [0x4c340c], 4
jne 0x40c4a1
jmp 0x47beb0
mov eax, dword [esi + 0xc]
dec dword [eax]
mov eax, dword [esi + 0xc]
cmp dword [eax], 0
je 0x47bec3
push esi
call fcn.00420c3e
add esp, 4
mov dword [edi + 8], 0
jmp 0x40c4ac
add dword [esp + 0x38], 2
add eax, 2
mov dword [esp + 0x3c], eax
dec ecx
jne 0x40c753
xor eax, eax
jmp 0x40c5d3
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov esi, 0xd
mov dword [ecx], eax
jmp 0x40c0d8
mov dword [ebx], esi
mov byte [esp + 0x59], 0
jmp 0x40c421
cmp byte [esp + 0x29], 0
jne 0x40d072
push 0x18
call fcn.00420bca
mov esi, eax
add esp, 4
test esi, esi
je 0x40d6d7
push 0x4c3400
mov ecx, esi
mov dword [esi + 8], 0
call fcn.0040d8a0
mov eax, dword [esp + 0xc]
mov edx, esi
mov dword [esi + 0x10], eax
mov esi, dword [esp + 0x20]
mov dword [esp + 0xc], edx
mov dword [esp + 0x24], edx
jmp 0x40c4d9
cmp byte [esp + 0x29], 0
jne 0x40d6de
mov esi, edx
jmp 0x40c4f7
test cl, cl
je 0x40cf15
mov eax, dword [ebx + 4]
cmp dword [eax], 0x12
je 0x40ca57
test cl, cl
jne 0x40d06a
mov eax, ebx
cmp dword [eax], 0x14
je 0x40d725
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x54]
push eax
call fcn.0040de80
test eax, eax
js 0x40d71c
mov ebx, dword [esp + 0x54]
mov cl, byte [esp + 0x59]
mov dword [esp + 0x2c], ebx
jmp case.0x40c3f1.2
test ecx, ecx
je 0x40ca33
mov eax, dword [esi + ecx*4 - 4]
movzx eax, word [eax + 8]
cmp ax, 0x48
je 0x47bac6
cmp ax, 0x4f
je 0x47bac6
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov esi, 0x12
mov dword [ecx], eax
jmp 0x40c0d8
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov esi, 0x13
mov dword [ecx], eax
jmp 0x40c0d8
test cl, cl
je 0x40ca75
mov esi, dword [ebx + 4]
push ebx
call fcn.00420c3e
mov ebx, esi
mov esi, dword [esp + 0x18]
add esp, 4
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x54], ebx
cmp byte [esp + 0x58], 0
je 0x47c2a0
mov byte [esp + 0x59], 1
dec dword [esp + 0x50]
jmp case.0x40c3f1.3
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov esi, 1
mov dword [ecx], eax
jmp 0x40c0d8
cmp dword [esp + 0x20], 0
mov dword [esp + 0x14], 0x16
je 0x40d2ee
cmp byte [esp + 0x29], 0
jne 0x40d375
push 0x18
call fcn.00420bca
mov esi, eax
add esp, 4
test esi, esi
je 0x40d6a9
push 0x4c3400
mov ecx, esi
mov dword [esi + 8], 0
call fcn.0040d8a0
mov eax, dword [esp + 0xc]
mov dword [esi + 0x10], eax
mov eax, esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x24], eax
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov edx, dword [eax + 4]
mov ecx, dword [esi]
inc dword [esp + 0x20]
mov eax, dword [edx + ecx*4 + 4]
cmp word [eax + 8], 0x47
jne 0x47b791
cmp dword [esp + 0x20], 1
je 0x40d2ff
cmp byte [esp + 0x29], 0
mov eax, dword [esp + 0xc]
jne 0x40d6b0
mov dword [esp + 0x34], eax
mov dword [esp + 0x68], 0x49ec3c
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], 0
mov eax, dword [edx + ecx*4]
mov esi, dword [eax]
movsx eax, word [eax + 0xa]
mov dword [esp + 0x3c], eax
mov eax, dword [0x4c33f4]
mov dword [esp + 0x30], esi
test al, 1
je 0x40d5e0
cmp esi, dword [0x4c33f8]
je 0x47b7ad
mov eax, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
inc dword [eax]
mov ecx, dword [eax]
mov edx, dword [esi + 4]
mov eax, dword [edx + ecx*4]
cmp word [eax + 8], 0x47
jne 0x40d713
lea eax, [ecx + 1]
mov dword [esp + 0x48], eax
xor esi, esi
mov dword [esp + 0x78], eax
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
mov ecx, eax
mov eax, dword [edx + ecx*4]
movsx eax, word [eax + 8]
sub eax, 0x47
je 0x40d0af
dec eax
je 0x40cbcc
sub eax, 0x37
je 0x47c352
lea eax, [ecx + 1]
jmp 0x40cba4
test esi, esi
jne 0x40d0a6
mov edx, dword [ebp + 0xc]
mov dword [esp + 0x64], esi
mov ecx, dword [edx]
mov dword [esp + 0x38], ecx
lea eax, [ecx + 1]
mov dword [edx], eax
cmp dword [esp + 0x48], ecx
jae 0x40cceb
mov eax, dword [esp + 0x74]
mov dword [esp + 0x90], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x9c], 1
cmp dword [esp + 0x70], eax
jne 0x40cc56
add eax, eax
cmp eax, 8
jae 0x40cc27
mov eax, 8
xor ecx, ecx
mov dword [esp + 0x74], eax
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00420bca
mov esi, eax
mov eax, dword [esp + 0x70]
add esp, 4
test eax, eax
jne 0x47b7df
mov dword [esp + 0x6c], esi
push 0x10
call fcn.00420bca
mov esi, eax
add esp, 4
test esi, esi
je 0x40d6b8
lea eax, [esp + 0x90]
push eax
mov ecx, esi
mov dword [esi + 8], 0
call fcn.0040d8a0
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x6c]
push dword [esp + 0x38]
mov dword [eax + ecx*4], esi
mov ecx, dword [esp + 0x74]
mov eax, dword [esp + 0x70]
inc ecx
mov dword [esp + 0x74], ecx
push dword [eax + ecx*4 - 4]
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x80]
push eax
push dword [ebp + 8]
call fcn.0040bf70
test eax, eax
js 0x47c3c0
mov esi, dword [esp + 0x64]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x38]
inc esi
mov dword [esp + 0x64], esi
cmp ecx, edx
jne 0x40d2ac
mov dword [esp + 0x9c], 1
mov dword [esp + 0x90], 0
mov ecx, dword [esp + 0x10]
push dword [esp + 0x30]
add ecx, 0x49c
call fcn.00410cc0
cmp esi, dword [eax + 0x18]
jl 0x40d708
mov ecx, dword [esp + 0x10]
push dword [esp + 0x30]
lea ecx, [ecx + 0x49c]
call fcn.00410cc0
cmp esi, dword [eax + 0x1c]
jg 0x40d708
mov esi, dword [esp + 0x34]
mov ecx, dword [esi + 8]
test ecx, ecx
jne 0x47b80a
mov eax, dword [esi + 0xc]
cmp eax, 5
jge 0x47b81c
mov edx, dword [esp + 0x10]
mov dword [esi + 0xc], 1
mov dword [esi], 1
mov eax, dword [edx]
mov ecx, dword [eax + 4]
mov eax, dword [ecx + edx + 8]
add ecx, edx
cmp byte [ecx + 0xd], 0
jne 0x40d6bf
mov dword [eax + 0x14], 0
cmp byte [ecx + 0xd], 0
mov eax, dword [ecx + 8]
jne 0x40d6c7
mov byte [eax + 0x18], 0
mov eax, dword [edx]
mov esi, dword [eax + 4]
add esi, edx
mov dword [esp + 0x48], esi
cmp byte [esi + 0xd], 0
jne 0x47b8cb
mov esi, dword [esi + 8]
mov ecx, dword [esi + 0x28]
test ecx, ecx
jne 0x47b8d6
mov eax, dword [esi + 0x2c]
cmp eax, 5
jge 0x47b8ec
mov eax, dword [esp + 0x48]
mov dword [esi + 0x2c], 1
mov dword [esi + 0x20], 0
cmp byte [eax + 0xd], 0
mov eax, dword [eax + 8]
jne 0x40d6cf
push dword [esp + 0x30]
lea ecx, [edx + 0x49c]
mov byte [eax + 0x30], 0
call fcn.00410cc0
movq xmm0, qword [eax + 0xc]
mov ecx, dword [eax + 0x14]
push dword [esp + 0x34]
mov edx, dword [esp + 0x14]
lea eax, [esp + 0x6c]
push eax
mov eax, dword [edx]
movq qword [esp + 0x11c], xmm0
mov ecx, dword [ecx + eax]
add ecx, dword [esp + 0x120]
add ecx, edx
call dword [esp + 0x11c]
test eax, eax
js 0x47c371
xor esi, esi
mov dword [esp + 0x68], 0x49ec3c
cmp dword [esp + 0x70], esi
jbe 0x40ce62
jmp 0x40ce30
mov eax, dword [esp + 0x6c]
mov ecx, dword [eax + esi*4]
mov dword [esp + 0x48], ecx
test ecx, ecx
je 0x40ce54
call fcn.0040a220
push dword [esp + 0x48]
call fcn.00420c3e
mov eax, dword [esp + 0x70]
add esp, 4
mov dword [eax + esi*4], 0
inc esi
cmp esi, dword [esp + 0x70]
jb 0x40ce30
push dword [esp + 0x6c]
mov dword [esp + 0x74], 0
call fcn.00420c3e
add esp, 4
mov eax, dword [esp + 0x10]
cmp dword [eax + 0xfc], 1
je 0x47b7d3
mov esi, dword [ebp + 0xc]
jmp 0x40c078
mov eax, dword [esp + 0x14]
cmp eax, 0x16
jne 0x40d0fb
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov dword [esp + 0x14], 0xb
mov esi, dword [esp + 0x14]
mov dword [ecx], eax
jmp 0x40c0e0
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
xor esi, esi
mov dword [ecx], eax
jmp 0x40c0d8
mov eax, dword [esp + 0xc]
cmp eax, 0x4c3400
je 0x40cf0b
cmp dword [eax + 0xc], 4
je 0x40d551
mov ecx, dword [eax + 8]
test ecx, ecx
jne 0x40d563
mov eax, dword [eax + 0xc]
cmp eax, 5
jge 0x47c142
mov ecx, dword [esp + 0xc]
push 0x4c3400
mov dword [ecx + 0xc], 1
mov dword [ecx], 0
call fcn.0040d8a0
mov byte [esp + 0x29], 0
jmp 0x40c19c
mov eax, ebx
jmp 0x40c9d2
cmp dword [0x4c340c], 4
jne 0x40c168
jmp 0x47c06d
mov eax, dword [esi + 0xc]
dec dword [eax]
mov eax, dword [esi + 0xc]
cmp dword [eax], 0
je 0x40d479
push esi
call fcn.00420c3e
add esp, 4
mov dword [edi + 8], 0
jmp 0x40c173
mov esi, dword [esp + 0x20]
mov dword [esp + 0x14], 0x16
test esi, esi
jne 0x40d147
cmp edi, 0x4c3400
je 0x40cf8d
cmp dword [edi + 0xc], 4
je 0x47b60d
mov ecx, edi
call fcn.0040ee00
push 0x4c3400
mov ecx, edi
call fcn.0040d8a0
mov edx, dword [esp + 0xc]
mov eax, dword [ebp + 0xc]
inc esi
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov dword [esp + 0x20], esi
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
cmp esi, 1
jne 0x40d189
mov esi, edi
cmp dword [esi + 0xc], 4
mov eax, dword [eax]
mov ecx, dword [esi + 8]
mov dword [esp + 0x48], eax
je 0x47b640
test ecx, ecx
jne 0x47b64b
mov eax, dword [esi + 0xc]
cmp eax, 5
jge 0x47b65d
push 0x10
mov dword [esi], 0
mov dword [esi + 0xc], 4
call fcn.00420bca
mov edx, eax
add esp, 4
test edx, edx
je 0x40d6a2
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
mov dword [edx], ecx
mov ecx, dword [eax + 4]
mov dword [edx + 4], ecx
mov ecx, dword [eax + 8]
mov dword [edx + 8], ecx
mov eax, dword [eax + 0xc]
mov dword [edx + 0xc], eax
inc dword [eax]
mov dword [esi + 8], edx
mov esi, dword [ebp + 0xc]
mov eax, dword [esp + 0x10]
inc dword [esi]
cmp byte [eax + 0x101], 0
jne 0x47b70c
cmp byte [eax + 0x102], 0
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
je 0x40c07e
jmp 0x47b724
mov eax, dword [esp + 0x14]
cmp eax, 0x16
jne 0x40d266
mov dword [esp + 0x14], 0xc
mov esi, dword [esp + 0x14]
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
jmp 0x40c0e0
mov eax, dword [ebx + 4]
jmp 0x40c9e5
mov eax, dword [esp + 0xc]
cmp eax, 0x4c3400
je 0x40d09c
cmp dword [eax + 0xc], 4
je 0x47bf8c
mov ecx, eax
call fcn.0040ee00
mov ecx, dword [esp + 0xc]
push 0x4c3400
call fcn.0040d8a0
mov byte [esp + 0x29], 0
jmp 0x40c4d5
dec esi
lea eax, [ecx + 1]
jmp 0x40cba4
inc esi
lea eax, [ecx + 1]
jmp 0x40cba4
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov esi, 0xe
mov dword [ecx], eax
jmp 0x40c0d8
add eax, 2
add edx, 2
mov dword [esp + 0x30], eax
dec ecx
jne 0x40c460
xor eax, eax
jmp 0x40c294
mov edx, eax
jmp 0x40c7ae
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov esi, 9
mov dword [ecx], eax
jmp 0x40c0d8
cmp eax, 0x13
je 0x40ce9c
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov dword [esp + 0x14], 0x11
mov esi, dword [esp + 0x14]
mov dword [ecx], eax
jmp 0x40c0e0
dec eax
cmp eax, 0x29
ja case.0x40d12e.4
movzx eax, byte [eax + 0x40d840]
jmp dword [eax*4 + 0x40d820]
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov esi, 7
mov dword [ecx], eax
jmp 0x40c0d8
cmp byte [esp + 0x29], 0
je 0x40d31a
mov eax, dword [esp + 0xc]
cmp eax, 0x4c3400
je 0x40d17f
cmp dword [0x4c340c], 4
je 0x40d542
mov ecx, eax
call fcn.0040ee00
mov ecx, dword [esp + 0xc]
push 0x4c3400
call fcn.0040d8a0
mov byte [esp + 0x29], 0
jmp 0x40cf8d
cmp byte [esp + 0x29], 0
jne 0x40d69a
mov esi, edx
jmp 0x40cfaf
mov esi, dword [esp + 0x20]
mov eax, dword [esp + 0x24]
mov edi, dword [esp + 0x1c]
mov dword [esp + 0xc], eax
test esi, esi
je 0x40d700
cmp esi, 1
jne 0x47c2c4
mov eax, edi
push eax
lea ecx, [esp + 0xec]
mov dword [esp + 0xf4], 0
call fcn.0040d8a0
lea ecx, [esp + 0xe8]
call fcn.0041b6c1
mov ecx, dword [esp + 0x14]
test al, al
jne 0x40d493
cmp ecx, 7
jne 0x40d24c
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0041e389
test eax, eax
js 0x47c597
cmp dword [esp + 0x14], 8
je 0x47c2d7
cmp esi, 1
jne 0x47c2fb
mov esi, edi
mov ecx, esi
call fcn.0040ee00
mov dword [esi + 0xc], 9
mov byte [esi], 0
cmp byte [esp + 0x59], 0
jne 0x47c317
cmp byte [esp + 0x58], 0
je 0x47c332
mov byte [esp + 0x59], 1
dec dword [esp + 0x50]
lea ecx, [esp + 0xe8]
call fcn.0040ee00
mov esi, dword [ebp + 0xc]
mov eax, dword [ebp + 0x14]
mov edx, dword [ebp + 8]
jmp 0x40c07e
cmp eax, 0x13
je 0x40d051
jmp 0x47ba32
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov esi, 5
mov dword [ecx], eax
jmp 0x40c0d8
mov eax, dword [ecx + 0xc]
dec dword [eax]
mov eax, dword [ecx + 0xc]
cmp dword [eax], 0
je 0x40d3d5
push ecx
call fcn.00420c3e
add esp, 4
mov dword [ebx + 8], 0
jmp 0x40c8c8
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
cmp word [eax + 8], 0x40
jne 0x47c386
lea eax, [ecx + 1]
cmp eax, edx
je 0x47c386
lea ecx, [esp + 0x90]
mov dword [esp + 0x78], eax
call fcn.0040ee00
mov ecx, dword [esp + 0x38]
cmp dword [esp + 0x78], ecx
jb 0x40cbf0
jmp 0x40cceb
push 0x4c3400
mov ecx, edi
call fcn.00409d38
jmp 0x40caf6
mov dword [esp + 0x34], edi
jmp 0x40cb32
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov esi, 2
mov dword [ecx], eax
jmp 0x40c0d8
push 0x18
call fcn.00420bca
mov esi, eax
add esp, 4
test esi, esi
je 0x40d693
push 0x4c3400
mov ecx, esi
mov dword [esi + 8], 0
call fcn.0040d8a0
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x40d4a9
mov edx, esi
mov dword [esi + 0x10], eax
mov esi, dword [esp + 0x20]
mov dword [esp + 0xc], edx
mov dword [esp + 0x24], edx
jmp 0x40cf91
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov esi, 4
mov dword [ecx], eax
jmp 0x40c0d8
mov ecx, dword [esp + 0xc]
push 0x4c3400
call fcn.00409d38
mov byte [esp + 0x29], 0
jmp 0x40caf6
push 0x4c3400
lea ecx, [esp + 0x20]
mov dword [esp + 0x18], 0x16
call fcn.0041f4d4
lea ecx, [esp + 0x1c]
call fcn.0041f536
mov esi, eax
mov ecx, esi
call fcn.0040ee00
mov eax, dword [esp + 0x24]
mov edi, dword [esp + 0x1c]
mov dword [esi + 0xc], 9
mov byte [esi], 0
mov esi, dword [ebp + 0xc]
mov dword [esp + 0xc], eax
inc dword [esi]
jmp 0x40c078
push dword [ecx]
call fcn.00420c3e
mov eax, dword [esp + 0x4c]
add esp, 4
push dword [eax + 0xc]
call fcn.00420c3e
mov ecx, dword [esp + 0x4c]
add esp, 4
jmp 0x40d297
sub eax, 5
cmp eax, 0xa
ja case.0x40d403.6
jmp dword [eax*4 + 0x40d86c]
push 0x4c3400
lea ecx, [esp + 0x20]
mov dword [esp + 0x18], 0x16
call fcn.0041f4d4
mov byte [esp + 0xb4], 1
push dword [esp + 0xb4]
lea ecx, [esp + 0x20]
call fcn.0041f536
mov ecx, eax
call fcn.0041f54d
mov esi, dword [ebp + 0xc]
mov eax, dword [esp + 0x24]
inc dword [esi]
mov edi, dword [esp + 0x1c]
mov dword [esp + 0xc], eax
jmp 0x40c078
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov esi, 3
mov dword [ecx], eax
jmp 0x40c0d8
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov esi, 8
mov dword [ecx], eax
jmp 0x40c0d8
push dword [esi]
call fcn.00420c3e
add esp, 4
push dword [esi + 0xc]
call fcn.00420c3e
add esp, 4
jmp 0x40cf3f
cmp ecx, 8
je 0x40d1f3
test al, al
jne 0x40d24c
jmp 0x40d1ee
mov edx, esi
mov dword [esi + 0x10], eax
mov esi, dword [esp + 0x20]
mov dword [esp + 0xc], edx
mov dword [esp + 0x24], edx
jmp 0x40cf91
or eax, 1
push 0x472caf
mov dword [0x4c33fc], eax
mov dword [0x4c3400], 0
mov dword [0x4c3408], 0
mov dword [0x4c340c], 1
call fcn.004225ea
add esp, 4
jmp 0x40bf90
push 0x4c3400
lea ecx, [esp + 0x20]
mov dword [esp + 0x18], 0x16
call fcn.0041f4d4
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov edx, dword [esi]
lea ecx, [esp + 0x1c]
lea eax, [edx + 1]
mov dword [esi], eax
mov eax, dword [edi + 4]
mov edx, dword [eax + edx*4]
call fcn.0041f536
mov ecx, dword [esp + 0x10]
push eax
push dword [edx]
call fcn.00402ec9
test eax, eax
jns 0x40c43a
jmp 0x47c40d
cmp dword [eax + 0xc], 4
jne 0x40d16a
jmp 0x47b62d
cmp dword [0x4c340c], 4
jne 0x40ced9
jmp 0x47c12f
push ecx
call fcn.0041b569
mov eax, dword [esp + 0xc]
mov dword [eax + 8], 0
jmp 0x40cee4
push 0x4c3400
lea ecx, [esp + 0x20]
mov dword [esp + 0x18], 0x16
call fcn.0041f4d4
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
lea ecx, [esp + 0x1c]
movsd xmm0, qword [eax]
movsd qword [esp + 0x48], xmm0
call fcn.0041f536
mov esi, eax
mov ecx, esi
call fcn.0040ee00
movsd xmm0, qword [esp + 0x48]
mov eax, dword [esp + 0x24]
mov edi, dword [esp + 0x1c]
mov dword [esi + 0xc], 3
movsd qword [esi], xmm0
mov esi, dword [ebp + 0xc]
mov dword [esp + 0xc], eax
inc dword [esi]
jmp 0x40c078
or eax, 1
push str.CALL
lea ecx, [esp + 0x124]
mov dword [0x4c33f4], eax
call fcn.00408f82
mov ecx, dword [0x4c32ec]
push dword [eax]
mov edx, dword [ecx]
call dword [edx + 4]
lea ecx, [esp + 0x120]
mov dword [0x4c33f8], eax
call fcn.00406e3b
jmp 0x40cb70
push 0x4c3400
lea ecx, [esp + 0x20]
mov dword [esp + 0x18], 0x16
call fcn.0041f4d4
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov ecx, dword [esi]
mov edx, dword [edi + 4]
mov eax, dword [edx + ecx*4 + 4]
cmp word [eax + 8], 0x47
jne 0x47b9c0
lea eax, [esp + 0x7f]
push eax
lea ecx, [esp + 0x20]
call fcn.0041f536
push eax
push esi
push edi
mov edi, dword [esp + 0x20]
push 0
mov ecx, edi
call fcn.0040ff10
test eax, eax
js 0x40d67b
cmp dword [edi + 0xfc], 1
jne 0x40c43a
mov edi, dword [esp + 0x24]
mov dword [esp + 0xc], edi
jmp 0x47b7d3
xor ebx, ebx
mov dword [esp + 0x2c], ebx
jmp 0x40bfd5
xor esi, esi
jmp 0x40d341
mov esi, dword [edx + 0x10]
jmp 0x40cfaf
xor edx, edx
jmp 0x40d013
xor esi, esi
jmp 0x40cae5
mov eax, dword [eax + 0x10]
jmp 0x40cb2e
xor esi, esi
jmp 0x40cc80
mov eax, dword [eax + 0x38]
jmp 0x40cd64
mov eax, dword [eax + 0x38]
jmp 0x40cd78
mov eax, dword [eax + 0x38]
jmp 0x40cdca
xor esi, esi
jmp 0x40c99b
mov esi, dword [edx + 0x10]
jmp 0x40c4f7
xor esi, esi
jmp 0x40c884
mov eax, dword [eax + 0x10]
mov dword [esp + 0x64], eax
jmp 0x40c1b2
xor eax, eax
jmp 0x40c414
mov esi, dword [ebp + 0xc]
jmp 0x40c078
push dword [esp + 0x3c]
push 0x70
jmp 0x47c368
mov eax, dword [edx + ecx*4 - 4]
jmp 0x47c361
push dword [esp + 0x5c]
jmp 0x47c49b
push dword [esp + 0x5c]
push 0x6d
jmp 0x47c420
push dword [esp + 0x5c]
push 0x6e
jmp 0x47c420
cmp dword [0x4c340c], 4
jne 0x40cf7a
push dword [0x4c3408]
mov ecx, dword [edi + 8]
call fcn.00408eac
jmp 0x40cf8d
push dword [0x4c3408]
mov ecx, dword [eax + 8]
call fcn.00408eac
jmp 0x40d17f
push eax
call fcn.00408eac
jmp 0x40d016
push ecx
call fcn.0041b569
mov dword [esi + 8], 0
jmp 0x40cfca
sub eax, 5
cmp eax, 0xa
ja case.0x47b669.6
jmp dword [eax*4 + 0x47c65d]
mov eax, dword [esi]
test eax, eax
je case.0x47b669.6
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [esi]
call fcn.00420c3e
add esp, 4
jmp case.0x47b669.6
mov ecx, dword [esi]
test ecx, ecx
je case.0x47b669.6
push ecx
call fcn.0044b5a9
jmp case.0x47b669.6
mov ecx, esi
call fcn.0041f5f1
jmp case.0x47b669.6
mov eax, dword [esi]
push dword [eax + 4]
call fcn.00420c3e
add esp, 4
push dword [esi]
call fcn.00420c3e
add esp, 4
jmp case.0x47b669.6
mov ecx, dword [esi]
test ecx, ecx
je case.0x47b669.6
push ecx
call fcn.0043b025
jmp case.0x47b669.6
mov ecx, dword [esi]
test ecx, ecx
je case.0x47b669.6
push ecx
call fcn.0043b04f
jmp case.0x47b669.6
mov ecx, dword [esi]
test ecx, ecx
je case.0x47b669.6
push ecx
call fcn.0041b569
jmp case.0x47b669.6
lea ecx, [esp + 0x1c]
call fcn.0041f536
push eax
call fcn.0045fb43
mov eax, dword [esp + 0x10]
jmp 0x40d02c
lea ecx, [esp + 0x1c]
call fcn.0041f536
mov ecx, dword [esp + 0x10]
push eax
call fcn.0045fc8e
jmp 0x40d25b
push 0x4c3400
lea ecx, [esp + 0x20]
mov dword [esp + 0x18], 0x16
call fcn.0041f4d4
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
lea ecx, [esp + 0x1c]
mov edi, dword [eax]
mov ebx, dword [eax + 4]
call fcn.0041f536
mov esi, eax
mov ecx, esi
call fcn.0040ee00
mov dword [esi + 4], ebx
mov ebx, dword [esp + 0x2c]
mov dword [esi + 0xc], 2
mov dword [esi], edi
mov esi, dword [ebp + 0xc]
inc dword [esi]
jmp 0x40c43a
mov eax, dword [edx + ecx*4]
lea ecx, [esp + 0x1c]
push dword [eax]
call fcn.0041f536
mov ecx, eax
call fcn.0044bb33
inc dword [esi]
jmp 0x40c078
push dword [esp + 0x34]
mov ecx, dword [esp + 0x14]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0045f401
lea ecx, [esp + 0x68]
mov esi, eax
call fcn.00440f33
test esi, esi
jns 0x40ce76
mov eax, dword [esp + 0xc]
or edi, 0xffffffff
jmp 0x40c119
mov ecx, dword [esp + 0x70]
test ecx, ecx
je 0x40cc52
shl ecx, 2
push ecx
push eax
push esi
call fcn.00420560
add esp, 0xc
push dword [esp + 0x6c]
call fcn.00420c3e
add esp, 4
jmp 0x40cc52
push ecx
call fcn.0041b569
mov dword [esi + 8], 0
jmp 0x40cd32
sub eax, 5
cmp eax, 0xa
ja case.0x47b828.6
jmp dword [eax*4 + 0x47c689]
mov eax, dword [esi]
test eax, eax
je case.0x47b828.6
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [esi]
call fcn.00420c3e
add esp, 4
jmp case.0x47b828.6
mov ecx, dword [esi]
test ecx, ecx
je case.0x47b828.6
push ecx
call fcn.0044b5a9
jmp case.0x47b828.6
mov ecx, esi
call fcn.0041f5f1
jmp case.0x47b828.6
mov eax, dword [esi]
push dword [eax + 4]
call fcn.00420c3e
add esp, 4
push dword [esi]
call fcn.00420c3e
add esp, 4
jmp case.0x47b828.6
mov ecx, dword [esi]
test ecx, ecx
je case.0x47b828.6
push ecx
call fcn.0043b025
jmp case.0x47b828.6
mov ecx, dword [esi]
test ecx, ecx
je case.0x47b828.6
push ecx
call fcn.0043b04f
jmp case.0x47b828.6
mov ecx, dword [esi]
test ecx, ecx
je case.0x47b828.6
push ecx
call fcn.0041b569
jmp case.0x47b828.6
mov eax, dword [esi + 8]
mov esi, dword [eax + 0x38]
jmp 0x40cd94
push ecx
call fcn.0041b569
mov edx, dword [esp + 0x10]
mov dword [esi + 0x28], 0
jmp 0x40cd9f
sub eax, 5
cmp eax, 0xa
ja case.0x47b8f8.6
jmp dword [eax*4 + 0x47c6b5]
mov eax, dword [esi + 0x20]
test eax, eax
je case.0x47b8f8.6
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [esi + 0x20]
call fcn.00420c3e
mov edx, dword [esp + 0x14]
add esp, 4
jmp case.0x47b8f8.6
mov ecx, dword [esi + 0x20]
test ecx, ecx
je case.0x47b8f8.6
push ecx
call fcn.0044b5a9
mov edx, dword [esp + 0x10]
jmp case.0x47b8f8.6
lea ecx, [esi + 0x20]
call fcn.0041f5f1
mov edx, dword [esp + 0x10]
jmp case.0x47b8f8.6
mov eax, dword [esi + 0x20]
push dword [eax + 4]
call fcn.00420c3e
add esp, 4
push dword [esi + 0x20]
call fcn.00420c3e
mov edx, dword [esp + 0x14]
add esp, 4
jmp case.0x47b8f8.6
mov ecx, dword [esi + 0x20]
test ecx, ecx
je case.0x47b8f8.6
push ecx
call fcn.0043b025
mov edx, dword [esp + 0x10]
jmp case.0x47b8f8.6
mov ecx, dword [esi + 0x20]
test ecx, ecx
je case.0x47b8f8.6
push ecx
call fcn.0043b04f
mov edx, dword [esp + 0x10]
jmp case.0x47b8f8.6
mov ecx, dword [esi + 0x20]
test ecx, ecx
je case.0x47b8f8.6
push ecx
call fcn.0041b569
mov edx, dword [esp + 0x10]
jmp case.0x47b8f8.6
mov eax, dword [edx + ecx*4]
mov ecx, dword [eax]
mov eax, dword [ecx]
mov dword [esp + 0xa4], eax
mov eax, dword [ecx + 4]
mov dword [esp + 0xa8], eax
mov eax, dword [ecx + 8]
mov dword [esp + 0xac], eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [esp + 0x10]
inc dword [eax]
mov dword [esp + 0xb0], eax
lea eax, [esp + 0xa4]
push eax
call fcn.00401e19
test eax, eax
je 0x47c3e1
lea eax, [esp + 0xa4]
push eax
lea ecx, [esp + 0x20]
call fcn.0041f536
mov ecx, eax
call fcn.0044c590
inc dword [esi]
lea ecx, [esp + 0xa4]
call fcn.00406e3b
jmp 0x40c43a
mov dword [esp + 0x14], 0x10
jmp 0x40d059
cmp dword [esp + 0x20], 0
mov dword [esp + 0x14], 0x16
je 0x47c45e
lea eax, [esp + 0xb8]
push eax
lea ecx, [esp + 0x20]
mov dword [esp + 0xbc], 0
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc8], 1
call fcn.0041f536
mov esi, dword [ebp + 0xc]
mov ecx, dword [esp + 0x14]
push eax
push esi
push dword [ebp + 8]
call fcn.0040d9a0
test eax, eax
js 0x47c42e
lea eax, [esp + 0xb8]
push eax
lea ecx, [esp + 0x20]
call fcn.0041f536
mov ecx, eax
call fcn.00409d38
lea ecx, [esp + 0xb8]
call fcn.0040ee00
jmp 0x40c078
cmp dword [esp + 0x20], 0
je 0x47c45e
lea eax, [esp + 0xd8]
push eax
lea ecx, [esp + 0x20]
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 1
call fcn.0041f536
mov esi, dword [ebp + 0xc]
mov ecx, dword [esp + 0x14]
push eax
push esi
push dword [ebp + 8]
call fcn.0040d9a0
test eax, eax
js 0x47c446
lea eax, [esp + 0xd8]
push eax
lea ecx, [esp + 0x20]
call fcn.0041f536
mov ecx, eax
call fcn.00409d38
lea ecx, [esp + 0xd8]
call fcn.0040ee00
jmp 0x40c078
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov esi, 6
mov dword [ecx], eax
jmp 0x40c0d8
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov esi, 0xf
mov dword [ecx], eax
jmp 0x40c0d8
lea ecx, [esp + 0x50]
call fcn.00403848
mov eax, dword [eax]
cmp eax, 0x14
je 0x47bb96
cmp eax, 0x12
je 0x47bb96
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x54]
push eax
call fcn.0040de80
test eax, eax
jns case.0x40c0b8.87
jmp 0x40d71c
cmp dword [esp + 0x20], 0
je 0x47c488
lea ecx, [esp + 0x1c]
call fcn.0041f536
mov ecx, eax
call fcn.0044b2aa
lea ecx, [esp + 0x1c]
test al, al
je 0x47bc17
call fcn.0041e787
mov ebx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
inc dword [ebx]
mov edx, dword [ebx]
mov esi, dword [eax + 4]
mov ecx, 1
mov eax, dword [esi + edx*4]
movzx eax, word [eax + 8]
cmp ax, 0x57
jne 0x47bbe0
inc ecx
jmp 0x47bbf9
cmp ax, 0x58
jne 0x47bbe9
dec ecx
jmp 0x47bbf9
cmp ax, 0x7f
je 0x47bc00
cmp ax, 0x40
jne 0x47bbf9
test ecx, ecx
je 0x47bc00
inc edx
mov dword [ebx], edx
test ecx, ecx
jne 0x47bbd0
mov esi, ebx
mov ebx, dword [esp + 0x54]
mov dword [esp + 0x14], 0x12
mov dword [esp + 0x2c], ebx
jmp 0x40c43a
call fcn.0041e787
mov esi, dword [ebp + 0xc]
mov ebx, dword [esp + 0x54]
inc dword [esi]
mov dword [esp + 0x14], 0x12
mov dword [esp + 0x2c], ebx
jmp 0x40c43a
cmp dword [esp + 0x20], 0
mov eax, dword [ebp + 0xc]
je 0x47c461
lea edx, [ecx + 1]
mov dword [esp + 0x14], 0x16
mov dword [eax], edx
mov ecx, 1
mov ebx, eax
mov eax, dword [esi + edx*4]
movzx eax, word [eax + 8]
cmp ax, 0x47
jne 0x47bc68
inc ecx
jmp 0x47bc82
cmp ax, 0x48
jne 0x47bc71
dec ecx
jmp 0x47bc82
cmp ax, 0x7f
je 0x47bc89
cmp ax, 0x40
jne 0x47bc82
cmp ecx, 1
je 0x47bc89
inc edx
mov dword [ebx], edx
test ecx, ecx
jne 0x47bc58
mov edx, ebx
mov ebx, dword [esp + 0x2c]
mov edx, dword [edx]
mov eax, dword [esi + edx*4 - 4]
mov esi, dword [ebp + 0xc]
cmp word [eax + 8], 0x48
mov eax, dword [ebp + 0x14]
jne 0x40d25e
test ecx, ecx
jne 0x40d25e
lea eax, [edx - 1]
mov dword [esi], eax
jmp 0x40c078
lea eax, [ecx + 1]
mov ecx, dword [ebp + 0xc]
mov esi, 0xa
mov dword [ecx], eax
jmp 0x40c0d8
sub esp, 0x10
mov ecx, esp
push str.Default
mov dword [esp + 0x28], 0x16
call fcn.00408f82
push 0xffffffffffffffff
push 0x29
jmp 0x47bd02
sub esp, 0x10
mov ecx, esp
push 0x49ebf0
mov dword [esp + 0x28], 0x16
call fcn.00408f82
push 0
push 0x2a
lea ecx, [esp + 0x114]
call fcn.0044a4c4
push 0x4c3400
lea ecx, [esp + 0x20]
call fcn.0041f4d4
lea eax, [esp + 0xfc]
push eax
lea ecx, [esp + 0x20]
call fcn.0041f536
mov ecx, eax
call fcn.0044b191
mov esi, dword [ebp + 0xc]
lea ecx, [esp + 0x104]
inc dword [esi]
call fcn.00406e3b
jmp 0x40c43a
mov dword [esp + 0x80], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], 1
mov byte [esp + 0x1b], 1
test ecx, ecx
je 0x47bda3
mov eax, dword [esi + ecx*4 - 4]
movzx eax, word [eax + 8]
cmp ax, 0x48
je 0x47bd88
cmp ax, 0x4f
jne 0x47bda3
lea ecx, [esp + 0x1c]
call fcn.0041f536
push eax
lea ecx, [esp + 0x84]
call fcn.00409d38
mov byte [esp + 0x1b], 0
lea ecx, [esp + 0x80]
call fcn.0045dcef
test al, al
jne 0x47be20
cmp byte [esp + 0x1b], al
je 0x47c4b3
mov esi, dword [esp + 0x10]
lea ecx, [esi + 0x16c]
call fcn.0045f785
push eax
lea ecx, [esp + 0x84]
call fcn.00409d38
lea ecx, [esp + 0x80]
call fcn.0045dcef
test al, al
jne 0x47be20
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
mov ecx, esi
movsx eax, word [eax + 0xa]
push eax
push 0xa7
call fcn.0044e132
lea ecx, [esp + 0x80]
call fcn.0040ee00
mov eax, dword [esp + 0xc]
or edi, 0xffffffff
jmp 0x40c119
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0xc8]
push eax
lea eax, [esp + 0x84]
push eax
push esi
push edi
mov dword [esp + 0xd8], 0
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 1
call fcn.00460040
test eax, eax
js 0x47c4ec
cmp byte [esp + 0x1b], 0
mov dword [esp + 0x14], 0x16
jne 0x47be82
lea ecx, [esp + 0x1c]
call fcn.0041e787
lea eax, [esp + 0xc8]
push eax
lea ecx, [esp + 0x20]
call fcn.0041f4d4
lea ecx, [esp + 0xc8]
call fcn.0040ee00
lea ecx, [esp + 0x80]
call fcn.0040ee00
jmp 0x40c43a
push dword [0x4c3408]
mov ecx, dword [edi + 8]
call fcn.00408eac
jmp 0x40c4d5
push dword [esi]
call fcn.00420c3e
add esp, 4
push dword [esi + 0xc]
call fcn.00420c3e
add esp, 4
jmp 0x40c91c
sub eax, 5
cmp eax, 0xa
ja case.0x47bee9.6
jmp dword [eax*4 + 0x47c6e1]
mov eax, dword [edi]
test eax, eax
je case.0x47bee9.6
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [edi]
call fcn.00420c3e
add esp, 4
jmp case.0x47bee9.6
mov ecx, dword [edi]
test ecx, ecx
je case.0x47bee9.6
push ecx
call fcn.0044b5a9
jmp case.0x47bee9.6
mov ecx, edi
call fcn.0041f5f1
jmp case.0x47bee9.6
mov eax, dword [edi]
push dword [eax + 4]
call fcn.00420c3e
add esp, 4
push dword [edi]
call fcn.00420c3e
add esp, 4
jmp case.0x47bee9.6
mov ecx, dword [edi]
test ecx, ecx
je case.0x47bee9.6
push ecx
call fcn.0043b025
jmp case.0x47bee9.6
mov ecx, dword [edi]
test ecx, ecx
je case.0x47bee9.6
push ecx
call fcn.0043b04f
jmp case.0x47bee9.6
mov ecx, dword [edi]
test ecx, ecx
je case.0x47bee9.6
push ecx
call fcn.0041b569
jmp case.0x47bee9.6
cmp dword [0x4c340c], 4
jne 0x40d087
push dword [0x4c3408]
mov ecx, dword [eax + 8]
call fcn.00408eac
jmp 0x40d09c
push ecx
call fcn.0041b569
mov dword [esi + 8], 0
jmp 0x40c508
sub eax, 5
cmp eax, 0xa
ja case.0x47bfca.6
jmp dword [eax*4 + 0x47c70d]
mov eax, dword [esi]
test eax, eax
je case.0x47bfca.6
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [esi]
call fcn.00420c3e
add esp, 4
jmp case.0x47bfca.6
mov ecx, dword [esi]
test ecx, ecx
je case.0x47bfca.6
push ecx
call fcn.0044b5a9
jmp case.0x47bfca.6
mov ecx, esi
call fcn.0041f5f1
jmp case.0x47bfca.6
mov eax, dword [esi]
push dword [eax + 4]
call fcn.00420c3e
add esp, 4
push dword [esi]
call fcn.00420c3e
add esp, 4
jmp case.0x47bfca.6
mov ecx, dword [esi]
test ecx, ecx
je case.0x47bfca.6
push ecx
call fcn.0043b025
jmp case.0x47bfca.6
mov ecx, dword [esi]
test ecx, ecx
je case.0x47bfca.6
push ecx
call fcn.0043b04f
jmp case.0x47bfca.6
mov ecx, dword [esi]
test ecx, ecx
je case.0x47bfca.6
push ecx
call fcn.0041b569
jmp case.0x47bfca.6
push dword [0x4c3408]
mov ecx, dword [edi + 8]
call fcn.00408eac
jmp 0x40c19c
sub eax, 5
cmp eax, 0xa
ja case.0x47c08c.6
jmp dword [eax*4 + 0x47c739]
mov eax, dword [edi]
test eax, eax
je case.0x47c08c.6
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [edi]
call fcn.00420c3e
add esp, 4
jmp case.0x47c08c.6
mov ecx, dword [edi]
test ecx, ecx
je case.0x47c08c.6
push ecx
call fcn.0044b5a9
jmp case.0x47c08c.6
mov ecx, edi
call fcn.0041f5f1
jmp case.0x47c08c.6
mov eax, dword [edi]
push dword [eax + 4]
call fcn.00420c3e
add esp, 4
push dword [edi]
call fcn.00420c3e
add esp, 4
jmp case.0x47c08c.6
mov ecx, dword [edi]
test ecx, ecx
je case.0x47c08c.6
push ecx
call fcn.0043b025
jmp case.0x47c08c.6
mov ecx, dword [edi]
test ecx, ecx
je case.0x47c08c.6
push ecx
call fcn.0043b04f
jmp case.0x47c08c.6
mov ecx, dword [edi]
test ecx, ecx
je case.0x47c08c.6
push ecx
call fcn.0041b569
jmp case.0x47c08c.6
push dword [0x4c3408]
mov ecx, dword [eax + 8]
call fcn.00408eac
jmp 0x40cf0b
sub eax, 5
cmp eax, 0xa
ja case.0x47c14e.6
jmp dword [eax*4 + 0x47c765]
mov eax, dword [esp + 0xc]
mov eax, dword [eax]
test eax, eax
je case.0x47c14e.6
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [esp + 0xc]
push dword [eax]
call fcn.00420c3e
add esp, 4
jmp case.0x47c14e.6
mov eax, dword [esp + 0xc]
mov ecx, dword [eax]
test ecx, ecx
je case.0x47c14e.6
push ecx
call fcn.0044b5a9
jmp case.0x47c14e.6
mov ecx, dword [esp + 0xc]
call fcn.0041f5f1
jmp case.0x47c14e.6
mov eax, dword [esp + 0xc]
mov eax, dword [eax]
push dword [eax + 4]
call fcn.00420c3e
mov eax, dword [esp + 0x10]
add esp, 4
push dword [eax]
call fcn.00420c3e
add esp, 4
jmp case.0x47c14e.6
mov eax, dword [esp + 0xc]
mov ecx, dword [eax]
test ecx, ecx
je case.0x47c14e.6
push ecx
call fcn.0043b025
jmp case.0x47c14e.6
mov eax, dword [esp + 0xc]
mov ecx, dword [eax]
test ecx, ecx
je case.0x47c14e.6
push ecx
call fcn.0043b04f
jmp case.0x47c14e.6
mov eax, dword [esp + 0xc]
mov ecx, dword [eax]
test ecx, ecx
je case.0x47c14e.6
push ecx
call fcn.0041b569
jmp case.0x47c14e.6
mov eax, dword [0x4c32dc]
mov esi, dword [eax + 8]
jmp 0x40c1f3
or eax, 1
mov ecx, 0x4c33d4
mov dword [0x4c33d0], eax
call fcn.00409c59
push 0x472ca5
call fcn.004225ea
add esp, 4
jmp 0x40c20e
test ecx, ecx
jne 0x40c323
test eax, eax
jne 0x40c2aa
jmp 0x40c256
or eax, 1
mov ecx, 0x4c33d4
mov dword [0x4c33d0], eax
call fcn.00409c59
push 0x472ca5
call fcn.004225ea
mov esi, dword [0x4c32c8]
mov edx, dword [esp + 0x38]
add esp, 4
mov dword [esp + 0x44], esi
jmp 0x40c553
test ecx, ecx
jne 0x40c791
test edx, edx
jne 0x40c671
jmp 0x40c59a
mov esi, dword [ebx + 4]
push ebx
call fcn.00420c3e
mov ebx, esi
mov esi, dword [esp + 0x18]
add esp, 4
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x54], ebx
mov byte [esp + 0x59], 0
jmp 0x40ca85
cmp byte [esp + 0x29], 0
je 0x40d1be
mov eax, dword [eax + 0x10]
jmp 0x40d1be
mov byte [esp + 0xa0], 1
push dword [esp + 0xa0]
lea ecx, [esp + 0x20]
call fcn.0041f536
mov ecx, eax
call fcn.0041f54d
jmp 0x40d22d
cmp byte [esp + 0x29], 0
je 0x47c30e
mov eax, dword [esp + 0xc]
mov esi, dword [eax + 0x10]
jmp 0x40d21c
mov esi, dword [esp + 0xc]
jmp 0x40d21c
mov esi, dword [ebx + 4]
push ebx
call fcn.00420c3e
mov ebx, esi
add esp, 4
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x54], ebx
jmp 0x40d238
mov esi, dword [ebx + 4]
push ebx
call fcn.00420c3e
mov ebx, esi
add esp, 4
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x54], ebx
mov byte [esp + 0x59], 0
jmp 0x40d248
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4 - 4]
movsx eax, word [eax + 0xa]
push eax
push 0x6f
mov ecx, dword [esp + 0x18]
call fcn.0044e132
lea ecx, [esp + 0x68]
call fcn.00440f33
mov eax, dword [esp + 0xc]
or edi, 0xffffffff
jmp 0x40c119
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
mov ecx, dword [esp + 0x10]
movsx eax, word [eax + 0xa]
push eax
push 0x6f
call fcn.0044e132
lea ecx, [esp + 0x90]
call fcn.0040ee00
lea ecx, [esp + 0x68]
call fcn.00440f33
mov eax, dword [esp + 0xc]
or edi, 0xffffffff
jmp 0x40c119
lea ecx, [esp + 0x90]
call fcn.0040a220
lea ecx, [esp + 0x68]
call fcn.00440f33
mov eax, dword [esp + 0xc]
or edi, 0xffffffff
jmp 0x40c119
mov ecx, dword [esi]
mov eax, dword [edi + 4]
mov eax, dword [eax + ecx*4]
mov ecx, dword [esp + 0x10]
movsx eax, word [eax + 0xa]
push eax
push 0x85
call fcn.0044e132
lea ecx, [esp + 0xa4]
call fcn.00406e3b
jmp 0x40d67b
mov ecx, dword [esi]
mov eax, dword [edi + 4]
mov eax, dword [eax + ecx*4 - 4]
movsx eax, word [eax + 0xa]
push eax
push 0x86
mov ecx, dword [esp + 0x18]
call fcn.0044e132
jmp 0x40d67b
lea ecx, [esp + 0xb8]
call fcn.0040ee00
mov eax, dword [esp + 0xc]
or edi, 0xffffffff
jmp 0x40c119
lea ecx, [esp + 0xd8]
call fcn.0040ee00
mov eax, dword [esp + 0xc]
or edi, 0xffffffff
jmp 0x40c119
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
mov ecx, dword [esp + 0x10]
movsx eax, word [eax + 0xa]
push eax
push 0x6e
call fcn.0044e132
mov eax, dword [esp + 0xc]
or edi, 0xffffffff
jmp 0x40c119
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
movsx eax, word [eax + 0xa]
push eax
mov ecx, dword [esp + 0x14]
push 0x6e
call fcn.0044e132
mov ebx, dword [esp + 0x54]
mov dword [esp + 0x2c], ebx
jmp 0x40d67b
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
mov ecx, dword [esp + 0x10]
movsx eax, word [eax + 0xa]
push eax
push 0xa9
call fcn.0044e132
lea ecx, [esp + 0x80]
call fcn.0040ee00
mov eax, dword [esp + 0xc]
or edi, 0xffffffff
jmp 0x40c119
mov ecx, dword [esi]
mov eax, dword [edi + 4]
mov eax, dword [eax + ecx*4]
mov ecx, dword [esp + 0x10]
movsx eax, word [eax + 0xa]
push eax
push 0x6e
call fcn.0044e132
lea ecx, [esp + 0xc8]
call fcn.0040ee00
lea ecx, [esp + 0x80]
call fcn.0040ee00
mov eax, dword [esp + 0xc]
or edi, 0xffffffff
jmp 0x40c119
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
mov ecx, dword [esp + 0x10]
movsx eax, word [eax + 0xa]
push eax
push 0x79
call fcn.0044e132
mov eax, dword [esp + 0xc]
or edi, 0xffffffff
jmp 0x40c119
push dword [esp + 0x5c]
mov ecx, dword [esp + 0x14]
push 0x6b
call fcn.0044e132
or edi, 0xffffffff
jmp 0x40c111
push dword [esp + 0x5c]
mov ecx, dword [esp + 0x14]
push 0x6c
call fcn.0044e132
or edi, 0xffffffff
jmp 0x40c111
push dword [esp + 0x5c]
mov ecx, dword [esp + 0x14]
push 0x6d
call fcn.0044e132
or edi, 0xffffffff
jmp 0x40c111
push dword [esp + 0x5c]
mov ecx, dword [esp + 0x14]
push 0x6e
call fcn.0044e132
lea ecx, [esp + 0xe8]
or edi, 0xffffffff
call fcn.0040ee00
mov eax, dword [esp + 0xc]
jmp 0x40c119
mov eax, dword [ebx]
test eax, eax
je case.0x40d403.6
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [ebx]
call fcn.00420c3e
add esp, 4
jmp case.0x40d403.6
mov ecx, dword [ebx]
test ecx, ecx
je case.0x40d403.6
push ecx
call fcn.0044b5a9
jmp case.0x40d403.6
mov ecx, ebx
call fcn.0041f5f1
jmp case.0x40d403.6
mov eax, dword [ebx]
push dword [eax + 4]
call fcn.00420c3e
add esp, 4
push dword [ebx]
call fcn.00420c3e
add esp, 4
jmp case.0x40d403.6
mov ecx, dword [ebx]
test ecx, ecx
je case.0x40d403.6
push ecx
call fcn.0043b025
jmp case.0x40d403.6
mov ecx, dword [ebx]
test ecx, ecx
je case.0x40d403.6
push ecx
call fcn.0043b04f
jmp case.0x40d403.6
mov ecx, dword [ebx]
test ecx, ecx
je case.0x40d403.6
push ecx
call fcn.0041b569
jmp case.0x40d403.6