Function at 0x469fa3
Capabilities:
Connect to wmi namespace via wbemlocator
Contain obfuscated stackstrings
Identify system language via api
Parse pe header

Disassembly:
mov eax, 0x6c7ff3
call fcn.006b9c3c
push ecx
mov eax, 0x504c
call fcn.0068aad0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov edi, ecx
mov dword [ebp - 0x54], edi
xor ebx, ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 4], 1
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x88], ebx
mov byte [ebp - 4], 2
cmp byte [0x7a00f2], 0
je 0x46a005
cmp byte [0x7a0194], 0
je 0x46a005
mov dword [ebp - 0x34], 0xa
mov dword [ebp - 0x30], ebx
lea ecx, [ebp - 0x34]
call fcn.0041cecb
jmp 0x469fdf
mov byte [0x7a00f2], 1
mov dword [ebp - 0x58], ebx
push str._xml_
lea ecx, [ebp - 0x20ec]
call fcn.0049bc4b
mov ecx, eax
call fcn.0049bc19
push eax
lea ecx, [ebp - 0x50]
call fcn.00411aae
mov byte [ebp - 4], 3
mov byte [ebp - 4], 4
push ebx
push ebx
call dword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
jns 0x46a085
push 0x73a9e8
mov ecx, edi
call fcn.00411aae
xor eax, eax
inc eax
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 2
push ebx
push eax
lea ecx, [ebp - 0x50]
call fcn.00411bc8
mov byte [ebp - 4], 1
test ebx, ebx
je 0x46a072
mov ecx, ebx
call fcn.0040f5b8
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push ebx
push ebx
push ebx
push 3
push ebx
push ebx
push ebx
push 0xffffffffffffffff
push ebx
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
mov dword [ebp - 0x38], ebx
lea eax, [ebp - 0x38]
push eax
push 0x71b2b0
push 1
push ebx
push 0x71b2a0
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x46a0c8
call dword [sym.imp.ole32.dll_CoUninitialize]
push 0x73a9e8
mov ecx, edi
call fcn.00411aae
jmp 0x46a04f
mov dword [ebp - 0x20], ebx
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
lea edx, [ebp - 0x20]
push edx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 0x73bcf8
push eax
call dword [ecx + 0xc]
test eax, eax
jns 0x46a0f2
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x46a0b4
push ebx
push ebx
push 3
push 3
push ebx
push ebx
push 0xa
push dword [ebp - 0x20]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
jns 0x46a114
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x46a0e7
mov dword [ebp - 0x28], ebx
push ecx
lea ecx, [ebp - 0x4d88]
call fcn.0048ec12
mov esi, eax
mov ecx, ebx
mov dword [ebp - 0x130], ecx
mov dword [ebp - 0x5c], 0x7f
cmp ecx, 0x23
jae 0x46a15c
mov eax, dword [esi + ecx*4 + 0x24]
sub eax, 0x1b
imul eax, eax, 0x1c
cdq
idiv dword [ebp - 0x5c]
push 0x7f
pop eax
add eax, edx
cdq
idiv dword [ebp - 0x5c]
mov byte [esi + ecx], dl
inc ecx
mov dword [ebp - 0x130], ecx
jmp 0x46a134
mov byte [esi + 0x23], bl
push esi
lea ecx, [ebp - 0x6cc]
call fcn.00411aae
mov byte [ebp - 4], 5
lea edx, [ebp - 0x6cc]
lea ecx, [ebp - 0x2004]
call fcn.00461060
mov ecx, eax
mov byte [ebp - 4], 6
cmp dword [ecx + 0x14], 8
jb 0x46a18e
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x20]
mov esi, dword [eax]
lea eax, [ebp - 0x28]
push eax
push ebx
push 0x30
push ecx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
push eax
push 0x73bbb8
push dword [ebp - 0x20]
call dword [esi + 0x50]
mov esi, eax
mov byte [ebp - 4], 5
push ebx
push 1
lea ecx, [ebp - 0x2004]
call fcn.004ab703
mov byte [ebp - 4], 4
push ebx
push 1
lea ecx, [ebp - 0x6cc]
call fcn.00411bc8
test esi, esi
js 0x46a109
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x24], ebx
push 0x73b9d0
lea ecx, [ebp - 0xbc]
call fcn.00411aae
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x28]
test ecx, ecx
je 0x46a7ca
mov eax, dword [ecx]
lea edx, [ebp - 0x24]
push edx
lea edx, [ebp - 0x1c]
push edx
push 1
push 0xffffffffffffffff
push ecx
call dword [eax + 0x10]
cmp dword [ebp - 0x24], 0
je 0x46a7ca
push ecx
lea ecx, [ebp - 0x36f4]
call fcn.0048eba9
mov esi, eax
mov ecx, ebx
push 0x7f
pop edi
mov dword [ebp - 0x134], ecx
cmp ecx, 0xe
jae 0x46a253
push 0x16
pop eax
sub eax, dword [esi + ecx*4 + 0x10]
imul eax, eax, 0x12
cdq
idiv edi
lea eax, [edi + edx]
cdq
idiv edi
mov byte [esi + ecx], dl
inc ecx
jmp 0x46a22f
mov byte [esi + 0xe], bl
push esi
lea ecx, [ebp - 0xa14]
call fcn.00411aae
mov byte [ebp - 4], 8
lea edx, [ebp - 0xa14]
lea ecx, [ebp - 0x201c]
call fcn.00461060
mov edx, eax
mov byte [ebp - 4], 9
cmp dword [edx + 0x14], 8
jb 0x46a285
mov edx, dword [edx]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
push ebx
push ebx
lea esi, [ebp - 0x3ec]
push esi
push ebx
push edx
push eax
call dword [ecx + 0x10]
neg eax
sbb al, al
inc al
mov dword [ebp - 0x60], eax
mov byte [ebp - 4], 8
push ebx
push 1
lea ecx, [ebp - 0x201c]
call fcn.004ab703
mov byte [ebp - 4], 7
push ebx
push 1
lea ecx, [ebp - 0xa14]
call fcn.00411bc8
cmp byte [ebp - 0x60], 0
je 0x46a7af
push dword [ebp - 0x3e4]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
push eax
push dword [ebp - 0x3e4]
lea ecx, [ebp - 0xa8c]
call fcn.004a6421
mov byte [ebp - 4], 0xa
mov edx, eax
lea ecx, [ebp - 0xa74]
call fcn.0046237a
mov byte [ebp - 4], 0xb
mov edx, eax
lea ecx, [ebp - 0x204c]
call fcn.00461197
mov byte [ebp - 4], 0xc
push 0xe
push ebx
lea ecx, [ebp - 0x2034]
push ecx
mov ecx, eax
call fcn.004a6530
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0xbc]
call fcn.0041b490
mov byte [ebp - 4], 0xc
push ebx
push 1
lea ecx, [ebp - 0x2034]
call fcn.00411bc8
mov byte [ebp - 4], 0xb
push ebx
push 1
lea ecx, [ebp - 0x204c]
call fcn.00411bc8
mov byte [ebp - 4], 0xa
push ebx
push 1
lea ecx, [ebp - 0xa74]
call fcn.004ab703
mov byte [ebp - 4], 7
push ebx
push 1
lea ecx, [ebp - 0xa8c]
call fcn.004ab703
push 2
push 0xc
lea eax, [ebp - 0xc0c]
push eax
lea ecx, [ebp - 0xbc]
call fcn.004a6530
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0xe
push 2
push 0xa
lea eax, [ebp - 0xbf4]
push eax
lea ecx, [ebp - 0xbc]
call fcn.004a6530
mov dword [ebp - 0xd0], eax
mov byte [ebp - 4], 0xf
push 2
push 8
lea eax, [ebp - 0xbdc]
push eax
lea ecx, [ebp - 0xbc]
call fcn.004a6530
mov dword [ebp - 0x7c], eax
mov byte [ebp - 4], 0x10
push 2
push 6
lea eax, [ebp - 0xbc4]
push eax
lea ecx, [ebp - 0xbc]
call fcn.004a6530
mov dword [ebp - 0x60], eax
mov byte [ebp - 4], 0x11
push 2
push 4
lea eax, [ebp - 0xbac]
push eax
lea ecx, [ebp - 0xbc]
call fcn.004a6530
mov esi, eax
mov byte [ebp - 4], 0x12
push 4
push ebx
lea eax, [ebp - 0xb94]
push eax
lea ecx, [ebp - 0xbc]
call fcn.004a6530
mov edi, eax
mov byte [ebp - 4], 0x13
xor eax, eax
mov word [ebp - 0xfc], ax
mov dword [ebp - 0xf8], 0x1b
mov ecx, ebx
mov dword [ebp - 0x138], ecx
cmp ecx, 1
jae 0x46a46f
mov eax, dword [ebp + ecx*4 - 0xf8]
sub eax, 0x57
imul eax, eax, 0x1f
cdq
idiv dword [ebp - 0x5c]
push 0x7f
pop eax
add eax, edx
cdq
idiv dword [ebp - 0x5c]
mov byte [ebp + ecx - 0xfc], dl
inc ecx
jmp 0x46a440
mov byte [ebp - 0xfb], bl
lea eax, [ebp - 0xfc]
push eax
mov edx, edi
lea ecx, [ebp - 0xb7c]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x14
push esi
mov edx, eax
lea ecx, [ebp - 0xb64]
call fcn.004b1821
pop ecx
mov esi, eax
mov byte [ebp - 4], 0x15
xor eax, eax
mov word [ebp - 0x104], ax
mov dword [ebp - 0x100], 0x20
mov ecx, ebx
push 0x7f
pop edi
mov dword [ebp - 0x13c], ecx
cmp ecx, 1
jae 0x46a4e6
mov eax, dword [ebp + ecx*4 - 0x100]
sub eax, 0xc
imul eax, eax, 0x22
cdq
idiv edi
lea eax, [edi + edx]
cdq
idiv edi
mov byte [ebp + ecx - 0x104], dl
inc ecx
jmp 0x46a4bb
mov byte [ebp - 0x103], bl
lea eax, [ebp - 0x104]
push eax
mov edx, esi
lea ecx, [ebp - 0xb4c]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x16
push dword [ebp - 0x60]
mov edx, eax
lea ecx, [ebp - 0xb34]
call fcn.004b1821
pop ecx
mov esi, eax
mov byte [ebp - 4], 0x17
xor eax, eax
mov word [ebp - 0x10c], ax
mov dword [ebp - 0x108], 0x4c
mov ecx, ebx
mov dword [ebp - 0x140], ecx
cmp ecx, 1
jae 0x46a55c
push 0x5b
pop eax
sub eax, dword [ebp + ecx*4 - 0x108]
imul eax, eax, 0x24
cdq
idiv edi
lea eax, [edi + edx]
cdq
idiv edi
mov byte [ebp + ecx - 0x10c], dl
inc ecx
jmp 0x46a531
mov byte [ebp - 0x10b], bl
lea eax, [ebp - 0x10c]
push eax
mov edx, esi
lea ecx, [ebp - 0xb1c]
call fcn.0041cdde
pop ecx
push 0x18
pop ecx
mov byte [ebp - 4], cl
push dword [ebp - 0x7c]
mov edx, eax
lea ecx, [ebp - 0xb04]
call fcn.004b1821
pop ecx
mov esi, eax
mov byte [ebp - 4], 0x19
xor eax, eax
mov word [ebp - 0x114], ax
mov dword [ebp - 0x110], 0xd
mov ecx, ebx
mov dword [ebp - 0x144], ecx
cmp ecx, 1
jae 0x46a5d4
mov eax, dword [ebp + ecx*4 - 0x110]
sub eax, 0x72
imul eax, eax, 0xc
cdq
idiv edi
lea eax, [edi + edx]
cdq
idiv edi
mov byte [ebp + ecx - 0x114], dl
inc ecx
jmp 0x46a5a9
mov byte [ebp - 0x113], bl
lea eax, [ebp - 0x114]
push eax
mov edx, esi
lea ecx, [ebp - 0xaec]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x1a
push dword [ebp - 0xd0]
mov edx, eax
lea ecx, [ebp - 0xad4]
call fcn.004b1821
pop ecx
mov esi, eax
mov byte [ebp - 4], 0x1b
xor eax, eax
mov word [ebp - 0x11c], ax
mov dword [ebp - 0x118], 0x7e
mov ecx, ebx
mov dword [ebp - 0x148], ecx
cmp ecx, 1
jae 0x46a64d
push 0x7b
pop eax
sub eax, dword [ebp + ecx*4 - 0x118]
imul eax, eax, 0x17
cdq
idiv edi
lea eax, [edi + edx]
cdq
idiv edi
mov byte [ebp + ecx - 0x11c], dl
inc ecx
jmp 0x46a622
mov byte [ebp - 0x11b], bl
lea eax, [ebp - 0x11c]
push eax
mov edx, esi
lea ecx, [ebp - 0xabc]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x1c
push dword [ebp - 0x30]
mov edx, eax
lea ecx, [ebp - 0xaa4]
call fcn.004b1821
pop ecx
mov byte [ebp - 4], 0x1d
push eax
lea ecx, [ebp - 0xbc]
call fcn.0041b490
mov byte [ebp - 4], 0x1c
push ebx
push 1
lea ecx, [ebp - 0xaa4]
call fcn.00411bc8
mov byte [ebp - 4], 0x1b
push ebx
push 1
lea ecx, [ebp - 0xabc]
call fcn.00411bc8
mov byte [ebp - 4], 0x1a
push ebx
push 1
lea ecx, [ebp - 0xad4]
call fcn.00411bc8
mov byte [ebp - 4], 0x19
push ebx
push 1
lea ecx, [ebp - 0xaec]
call fcn.00411bc8
push 0x18
pop eax
mov byte [ebp - 4], al
push ebx
push 1
lea ecx, [ebp - 0xb04]
call fcn.00411bc8
mov byte [ebp - 4], 0x17
push ebx
push 1
lea ecx, [ebp - 0xb1c]
call fcn.00411bc8
mov byte [ebp - 4], 0x16
push ebx
push 1
lea ecx, [ebp - 0xb34]
call fcn.00411bc8
mov byte [ebp - 4], 0x15
push ebx
push 1
lea ecx, [ebp - 0xb4c]
call fcn.00411bc8
mov byte [ebp - 4], 0x14
push ebx
push 1
lea ecx, [ebp - 0xb64]
call fcn.00411bc8
mov byte [ebp - 4], 0x13
push ebx
push 1
lea ecx, [ebp - 0xb7c]
call fcn.00411bc8
mov byte [ebp - 4], 0x12
push ebx
push 1
lea ecx, [ebp - 0xb94]
call fcn.00411bc8
mov byte [ebp - 4], 0x11
push ebx
push 1
lea ecx, [ebp - 0xbac]
call fcn.00411bc8
mov byte [ebp - 4], 0x10
push ebx
push 1
lea ecx, [ebp - 0xbc4]
call fcn.00411bc8
mov byte [ebp - 4], 0xf
push ebx
push 1
lea ecx, [ebp - 0xbdc]
call fcn.00411bc8
mov byte [ebp - 4], 0xe
push ebx
push 1
lea ecx, [ebp - 0xbf4]
call fcn.00411bc8
mov byte [ebp - 4], 7
push ebx
push 1
lea ecx, [ebp - 0xc0c]
call fcn.00411bc8
lea eax, [ebp - 0x3ec]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x46a1f5
push ecx
lea ecx, [ebp - 0x4ad4]
call fcn.0048eaaa
mov esi, eax
mov ecx, ebx
push 0x7f
pop edi
mov dword [ebp - 0x14c], ecx
cmp ecx, 0x22
jae 0x46a801
push 0x22
pop eax
sub eax, dword [esi + ecx*4 + 0x24]
imul eax, eax, 0x2d
cdq
idiv edi
lea eax, [edi + edx]
cdq
idiv edi
mov byte [ecx + esi], dl
inc ecx
jmp 0x46a7dd
mov byte [esi + 0x22], bl
push esi
lea ecx, [ebp - 0xa2c]
call fcn.00411aae
mov byte [ebp - 4], 0x1e
lea edx, [ebp - 0xa2c]
lea ecx, [ebp - 0xc24]
call fcn.00461060
mov ecx, eax
mov byte [ebp - 4], 0x1f
cmp dword [ecx + 0x14], 8
jb 0x46a833
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x20]
mov esi, dword [eax]
lea eax, [ebp - 0x28]
push eax
push ebx
push 0x30
push ecx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
push eax
push 0x73bbb8
push dword [ebp - 0x20]
call dword [esi + 0x50]
mov esi, eax
mov byte [ebp - 4], 0x1e
push ebx
push 1
lea ecx, [ebp - 0xc24]
call fcn.004ab703
mov byte [ebp - 4], 7
push ebx
push 1
lea ecx, [ebp - 0xa2c]
call fcn.00411bc8
test esi, esi
jns 0x46a8c6
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
push 0x73a9e8
mov edi, dword [ebp - 0x54]
mov ecx, edi
call fcn.00411aae
xor eax, eax
inc eax
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 4
push ebx
push eax
lea ecx, [ebp - 0xbc]
call fcn.00411bc8
mov byte [ebp - 4], 2
push ebx
push 1
jmp 0x46a05b
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x24], ebx
mov ecx, dword [ebp - 0x28]
test ecx, ecx
je 0x46b8a2
mov eax, dword [ecx]
lea edx, [ebp - 0x24]
push edx
lea edx, [ebp - 0x1c]
push edx
push 1
push 0xffffffffffffffff
push ecx
call dword [eax + 0x10]
cmp dword [ebp - 0x24], 0
je 0x46b8a2
mov esi, 0x73b9d0
push esi
lea ecx, [ebp - 0x474]
call fcn.00411aae
mov byte [ebp - 4], 0x20
push esi
lea ecx, [ebp - 0x45c]
call fcn.00411aae
mov byte [ebp - 4], 0x21
push esi
lea ecx, [ebp - 0x444]
call fcn.00411aae
mov byte [ebp - 4], 0x22
push esi
lea ecx, [ebp - 0x42c]
call fcn.00411aae
mov byte [ebp - 4], 0x23
push str.Name
lea ecx, [ebp - 0x207c]
call fcn.0049e4a4
mov ecx, eax
call fcn.0049e472
push eax
lea ecx, [ebp - 0xa44]
call fcn.00411aae
mov byte [ebp - 4], 0x24
lea edx, [ebp - 0xa44]
lea ecx, [ebp - 0xc3c]
call fcn.00461060
mov edx, eax
mov byte [ebp - 4], 0x25
cmp dword [edx + 0x14], 8
jb 0x46a97e
mov edx, dword [edx]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
push ebx
push ebx
lea esi, [ebp - 0xec]
push esi
push ebx
push edx
push eax
call dword [ecx + 0x10]
neg eax
sbb al, al
inc al
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0x24
push ebx
push 1
lea ecx, [ebp - 0xc3c]
call fcn.004ab703
mov byte [ebp - 4], 0x23
push ebx
push 1
lea ecx, [ebp - 0xa44]
call fcn.00411bc8
cmp byte [ebp - 0x30], 0
je 0x46aa4f
push dword [ebp - 0xe4]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
push eax
push dword [ebp - 0xe4]
lea ecx, [ebp - 0xc84]
call fcn.004a6421
mov byte [ebp - 4], 0x26
mov edx, eax
lea ecx, [ebp - 0xc6c]
call fcn.0046237a
mov byte [ebp - 4], 0x27
mov edx, eax
lea ecx, [ebp - 0xc54]
call fcn.00461197
mov byte [ebp - 4], 0x28
push eax
lea ecx, [ebp - 0x474]
call fcn.0041b490
mov byte [ebp - 4], 0x27
push ebx
push 1
lea ecx, [ebp - 0xc54]
call fcn.00411bc8
mov byte [ebp - 4], 0x26
push ebx
push 1
lea ecx, [ebp - 0xc6c]
call fcn.004ab703
mov byte [ebp - 4], 0x23
push ebx
push 1
lea ecx, [ebp - 0xc84]
call fcn.004ab703
xor eax, eax
lea edi, [ebp - 0x384]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x378], 0x6e
push 0x3a
pop ecx
mov dword [ebp - 0x374], ecx
push 0x73
pop eax
mov dword [ebp - 0x370], eax
mov dword [ebp - 0x36c], 0x6d
mov dword [ebp - 0x368], 0x21
mov dword [ebp - 0x364], eax
mov dword [ebp - 0x360], ecx
mov dword [ebp - 0x35c], 0x2d
mov dword [ebp - 0x358], 0x4d
mov ecx, ebx
push 0x7f
pop edi
mov dword [ebp - 0x150], ecx
cmp ecx, 9
jae 0x46aadb
push 0x6c
pop eax
sub eax, dword [ebp + ecx*4 - 0x378]
imul eax, eax, 0x14
cdq
idiv edi
lea eax, [edi + edx]
cdq
idiv edi
mov byte [ebp + ecx - 0x384], dl
inc ecx
jmp 0x46aab0
mov byte [ebp - 0x37b], bl
lea eax, [ebp - 0x384]
push eax
lea ecx, [ebp - 0x624]
call fcn.00411aae
mov byte [ebp - 4], 0x29
lea edx, [ebp - 0x624]
lea ecx, [ebp - 0xc9c]
call fcn.00461060
mov edx, eax
mov byte [ebp - 4], 0x2a
cmp dword [edx + 0x14], 8
jb 0x46ab16
mov edx, dword [edx]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
push ebx
push ebx
lea esi, [ebp - 0xec]
push esi
push ebx
push edx
push eax
call dword [ecx + 0x10]
neg eax
sbb al, al
inc al
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0x29
push ebx
push 1
lea ecx, [ebp - 0xc9c]
call fcn.004ab703
mov byte [ebp - 4], 0x23
push ebx
push 1
lea ecx, [ebp - 0x624]
call fcn.00411bc8
cmp byte [ebp - 0x30], 0
je 0x46abe7
push dword [ebp - 0xe4]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
push eax
push dword [ebp - 0xe4]
lea ecx, [ebp - 0xce4]
call fcn.004a6421
mov byte [ebp - 4], 0x2b
mov edx, eax
lea ecx, [ebp - 0xccc]
call fcn.0046237a
mov byte [ebp - 4], 0x2c
mov edx, eax
lea ecx, [ebp - 0xcb4]
call fcn.00461197
mov byte [ebp - 4], 0x2d
push eax
lea ecx, [ebp - 0x45c]
call fcn.0041b490
mov byte [ebp - 4], 0x2c
push ebx
push 1
lea ecx, [ebp - 0xcb4]
call fcn.00411bc8
mov byte [ebp - 4], 0x2b
push ebx
push 1
lea ecx, [ebp - 0xccc]
call fcn.004ab703
mov byte [ebp - 4], 0x23
push ebx
push 1
lea ecx, [ebp - 0xce4]
call fcn.004ab703
push str.Model
lea ecx, [ebp - 0x2098]
call fcn.00498a03
mov ecx, eax
call fcn.004989d1
push eax
lea ecx, [ebp - 0x63c]
call fcn.00411aae
mov byte [ebp - 4], 0x2e
lea edx, [ebp - 0x63c]
lea ecx, [ebp - 0xcfc]
call fcn.00461060
mov edx, eax
mov byte [ebp - 4], 0x2f
cmp dword [edx + 0x14], 8
jb 0x46ac2d
mov edx, dword [edx]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
push ebx
push ebx
lea esi, [ebp - 0xec]
push esi
push ebx
push edx
push eax
call dword [ecx + 0x10]
neg eax
sbb al, al
inc al
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0x2e
push ebx
push 1
lea ecx, [ebp - 0xcfc]
call fcn.004ab703
mov byte [ebp - 4], 0x23
push ebx
push 1
lea ecx, [ebp - 0x63c]
call fcn.00411bc8
cmp byte [ebp - 0x30], 0
je 0x46acfe
push dword [ebp - 0xe4]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
push eax
push dword [ebp - 0xe4]
lea ecx, [ebp - 0xd44]
call fcn.004a6421
mov byte [ebp - 4], 0x30
mov edx, eax
lea ecx, [ebp - 0xd2c]
call fcn.0046237a
mov byte [ebp - 4], 0x31
mov edx, eax
lea ecx, [ebp - 0xd14]
call fcn.00461197
mov byte [ebp - 4], 0x32
push eax
lea ecx, [ebp - 0x444]
call fcn.0041b490
mov byte [ebp - 4], 0x31
push ebx
push 1
lea ecx, [ebp - 0xd14]
call fcn.00411bc8
mov byte [ebp - 4], 0x30
push ebx
push 1
lea ecx, [ebp - 0xd2c]
call fcn.004ab703
mov byte [ebp - 4], 0x23
push ebx
push 1
lea ecx, [ebp - 0xd44]
call fcn.004ab703
push ecx
lea ecx, [ebp - 0x33e4]
call fcn.0048ea56
mov esi, eax
mov ecx, ebx
mov dword [ebp - 0x154], ecx
cmp ecx, 0xc
jae 0x46ad32
push 0x2a
pop eax
sub eax, dword [esi + ecx*4 + 0x10]
imul eax, eax, 0x12
cdq
idiv edi
lea eax, [edi + edx]
cdq
idiv edi
mov byte [ecx + esi], dl
inc ecx
jmp 0x46ad0e
mov byte [esi + 0xc], bl
push esi
lea ecx, [ebp - 0x654]
call fcn.00411aae
mov byte [ebp - 4], 0x33
lea edx, [ebp - 0x654]
lea ecx, [ebp - 0xd5c]
call fcn.00461060
mov edx, eax
mov byte [ebp - 4], 0x34
cmp dword [edx + 0x14], 8
jb 0x46ad64
mov edx, dword [edx]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
push ebx
push ebx
lea esi, [ebp - 0xec]
push esi
push ebx
push edx
push eax
call dword [ecx + 0x10]
neg eax
sbb al, al
inc al
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0x33
push ebx
push 1
lea ecx, [ebp - 0xd5c]
call fcn.004ab703
mov byte [ebp - 4], 0x23
push ebx
push 1
lea ecx, [ebp - 0x654]
call fcn.00411bc8
cmp byte [ebp - 0x30], 0
je 0x46ae35
push dword [ebp - 0xe4]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
push eax
push dword [ebp - 0xe4]
lea ecx, [ebp - 0xda4]
call fcn.004a6421
mov byte [ebp - 4], 0x35
mov edx, eax
lea ecx, [ebp - 0xd8c]
call fcn.0046237a
mov byte [ebp - 4], 0x36
mov edx, eax
lea ecx, [ebp - 0xd74]
call fcn.00461197
mov byte [ebp - 4], 0x37
push eax
lea ecx, [ebp - 0x42c]
call fcn.0041b490
mov byte [ebp - 4], 0x36
push ebx
push 1
lea ecx, [ebp - 0xd74]
call fcn.00411bc8
mov byte [ebp - 4], 0x35
push ebx
push 1
lea ecx, [ebp - 0xd8c]
call fcn.004ab703
mov byte [ebp - 4], 0x23
push ebx
push 1
lea ecx, [ebp - 0xda4]
call fcn.004ab703
mov dword [ebp - 0x268], ebx
mov dword [ebp - 0x264], ebx
mov dword [ebp - 0x260], 0x78
mov dword [ebp - 0x25c], 0x63
mov dword [ebp - 0x258], 0x28
mov dword [ebp - 0x254], 0x23
mov dword [ebp - 0x250], 0x37
mov dword [ebp - 0x24c], 0x54
mov dword [ebp - 0x248], 0x20
mov ecx, ebx
mov dword [ebp - 0x158], ecx
cmp ecx, 7
jae 0x46aeb4
push 0x5d
pop eax
sub eax, dword [ebp + ecx*4 - 0x260]
imul eax, eax, 0x1a
cdq
idiv edi
lea eax, [edi + edx]
cdq
idiv edi
mov byte [ebp + ecx - 0x268], dl
inc ecx
jmp 0x46ae89
mov byte [ebp - 0x261], bl
lea eax, [ebp - 0x268]
push eax
call fcn.0040f475
pop ecx
push eax
lea eax, [ebp - 0x268]
push eax
lea ecx, [ebp - 0x50]
call fcn.00411f4c
push ecx
lea ecx, [ebp - 0x3e90]
call fcn.0048e9d2
mov esi, eax
mov ecx, ebx
mov dword [ebp - 0x15c], ecx
cmp ecx, 0x14
jae 0x46af0b
push 0x2e
pop eax
sub eax, dword [esi + ecx*4 + 0x18]
imul eax, eax, 0x23
cdq
idiv edi
lea eax, [edi + edx]
cdq
idiv edi
mov byte [ecx + esi], dl
inc ecx
jmp 0x46aee7
mov byte [esi + 0x14], bl
push esi
call fcn.0040f475
pop ecx
push eax
push esi
lea ecx, [ebp - 0x50]
call fcn.00411f4c
cmp dword [ebp - 0x464], 0
je 0x46af46
lea eax, [ebp - 0x474]
push eax
lea ecx, [ebp - 0xe04]
call fcn.00411add
mov byte [ebp - 4], 0x38
mov ecx, dword [ebp - 0x18]
or ecx, 2
jmp 0x46afbc
mov dword [ebp - 0x1cc], ebx
mov dword [ebp - 0x1c8], 0x52
mov dword [ebp - 0x1c4], 0x7e
mov dword [ebp - 0x1c0], 0x27
mov ecx, ebx
mov dword [ebp - 0x160], ecx
cmp ecx, 3
jae 0x46af97
push 0x4e
pop eax
sub eax, dword [ebp + ecx*4 - 0x1c8]
imul eax, eax, 0x2c
cdq
idiv edi
lea eax, [edi + edx]
cdq
idiv edi
mov byte [ebp + ecx - 0x1cc], dl
inc ecx
jmp 0x46af6c
mov byte [ebp - 0x1c9], bl
lea eax, [ebp - 0x1cc]
push eax
lea ecx, [ebp - 0xdec]
call fcn.00411aae
mov dword [ebp - 4], 0x39
mov ecx, dword [ebp - 0x18]
or ecx, 4
mov dword [ebp - 0x18], ecx
push eax
push str._val2_
lea ecx, [ebp - 0x210c]
call fcn.004946a5
mov ecx, eax
call fcn.00494673
mov edx, eax
lea ecx, [ebp - 0xdd4]
call fcn.004b09c3
pop ecx
mov esi, eax
mov dword [ebp - 4], 0x3a
mov dword [ebp - 0x2c0], ebx
mov dword [ebp - 0x2bc], ebx
mov dword [ebp - 0x2b8], 0x5d
mov dword [ebp - 0x2b4], 0x66
mov dword [ebp - 0x2b0], 4
mov dword [ebp - 0x2ac], 0x7e
mov dword [ebp - 0x2a8], 0x32
mov dword [ebp - 0x2a4], 0xc
mov dword [ebp - 0x2a0], 0x21
mov ecx, ebx
mov dword [ebp - 0x164], ecx
cmp ecx, 7
jae 0x46b06d
mov eax, dword [ebp + ecx*4 - 0x2b8]
sub eax, 0x73
imul eax, eax, 0x37
cdq
idiv edi
lea eax, [edi + edx]
cdq
idiv edi
mov byte [ebp + ecx - 0x2c0], dl
inc ecx
jmp 0x46b042
mov byte [ebp - 0x2b9], bl
lea eax, [ebp - 0x2c0]
push eax
mov edx, esi
lea ecx, [ebp - 0xdbc]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x3b
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x50]
call fcn.00411fef
mov byte [ebp - 4], 0x3a
push ebx
push 1
lea ecx, [ebp - 0xdbc]
call fcn.00411bc8
mov byte [ebp - 4], 0x39
push ebx
push 1
lea ecx, [ebp - 0xdd4]
call fcn.00411bc8
mov dword [ebp - 4], 0x38
mov eax, dword [ebp - 0x18]
test al, 4
je 0x46b0e1
and eax, 0xfffffffb
mov dword [ebp - 0x18], eax
push ebx
push 1
lea ecx, [ebp - 0xdec]
call fcn.00411bc8
mov eax, dword [ebp - 0x18]
mov dword [ebp - 4], 0x23
test al, 2
je 0x46b100
and eax, 0xfffffffd
mov dword [ebp - 0x18], eax
push ebx
push 1
lea ecx, [ebp - 0xe04]
call fcn.00411bc8
mov edi, str.__block_
push edi
lea ecx, [ebp - 0x2fe0]
call fcn.0049b995
mov ecx, eax
call fcn.0049b963
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
push str._block_
lea ecx, [ebp - 0x27d8]
call fcn.0049894a
mov ecx, eax
call fcn.00498918
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
push ecx
lea ecx, [ebp - 0x4998]
call fcn.0048e911
mov ecx, eax
call fcn.0048e8df
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
cmp dword [ebp - 0x41c], 0
je 0x46b184
lea eax, [ebp - 0x42c]
push eax
lea ecx, [ebp - 0xe64]
call fcn.00411add
mov byte [ebp - 4], 0x3c
mov ecx, dword [ebp - 0x18]
or ecx, 8
jmp 0x46b1cc
mov dword [ebp - 0x2f4], ebx
mov dword [ebp - 0x2f0], 0x64
mov dword [ebp - 0x2ec], 0x25
mov dword [ebp - 0x2e8], 0x31
lea ecx, [ebp - 0x2f4]
call fcn.0048e8ad
push eax
lea ecx, [ebp - 0xe4c]
call fcn.00411aae
mov dword [ebp - 4], 0x3d
mov ecx, dword [ebp - 0x18]
or ecx, 0x10
mov dword [ebp - 0x18], ecx
push eax
push str._val2_
lea ecx, [ebp - 0x212c]
call fcn.0049b8ea
mov ecx, eax
call fcn.0049b8b8
mov edx, eax
lea ecx, [ebp - 0xe34]
call fcn.004b09c3
mov esi, eax
mov dword [ebp - 4], 0x3e
mov dword [esp], str.__val2_
lea ecx, [ebp - 0x2430]
call fcn.0049889d
mov ecx, eax
call fcn.0049886d
push eax
mov edx, esi
lea ecx, [ebp - 0xe1c]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x3f
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x50]
call fcn.00411fef
mov byte [ebp - 4], 0x3e
push ebx
push 1
lea ecx, [ebp - 0xe1c]
call fcn.00411bc8
mov byte [ebp - 4], 0x3d
push ebx
push 1
lea ecx, [ebp - 0xe34]
call fcn.00411bc8
mov dword [ebp - 4], 0x3c
mov eax, dword [ebp - 0x18]
test al, 0x10
je 0x46b27e
and eax, 0xffffffef
mov dword [ebp - 0x18], eax
push ebx
push 1
lea ecx, [ebp - 0xe4c]
call fcn.00411bc8
mov eax, dword [ebp - 0x18]
mov dword [ebp - 4], 0x23
test al, 8
je 0x46b29d
and eax, 0xfffffff7
mov dword [ebp - 0x18], eax
push ebx
push 1
lea ecx, [ebp - 0xe64]
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0x2a8c]
call fcn.0048e867
mov ecx, eax
call fcn.0048e835
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
push str._block_
lea ecx, [ebp - 0x2454]
call fcn.0049873b
mov ecx, eax
call fcn.00498709
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
push ecx
lea ecx, [ebp - 0x3d50]
call fcn.0048e7af
mov ecx, eax
call fcn.0048e77d
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
cmp dword [ebp - 0x434], 0
je 0x46b31c
lea eax, [ebp - 0x444]
push eax
lea ecx, [ebp - 0xec4]
call fcn.00411add
mov byte [ebp - 4], 0x40
mov ecx, dword [ebp - 0x18]
or ecx, 0x20
jmp 0x46b364
mov dword [ebp - 0x304], ebx
mov dword [ebp - 0x300], 0x7d
mov dword [ebp - 0x2fc], 0x20
mov dword [ebp - 0x2f8], 0x56
lea ecx, [ebp - 0x304]
call fcn.0048e6e0
push eax
lea ecx, [ebp - 0xeac]
call fcn.00411aae
mov dword [ebp - 4], 0x41
mov ecx, dword [ebp - 0x18]
or ecx, 0x40
mov dword [ebp - 0x18], ecx
push eax
push ecx
lea ecx, [ebp - 0x214c]
call fcn.0048e744
mov ecx, eax
call fcn.0048e712
mov edx, eax
lea ecx, [ebp - 0xe94]
call fcn.004b09c3
mov esi, eax
mov dword [ebp - 4], 0x42
lea ecx, [ebp - 0x2478]
call fcn.0048e6a3
mov ecx, eax
call fcn.0048e671
push eax
mov edx, esi
lea ecx, [ebp - 0xe7c]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x43
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x50]
call fcn.00411fef
mov byte [ebp - 4], 0x42
push ebx
push 1
lea ecx, [ebp - 0xe7c]
call fcn.00411bc8
mov byte [ebp - 4], 0x41
push ebx
push 1
lea ecx, [ebp - 0xe94]
call fcn.00411bc8
mov dword [ebp - 4], 0x40
mov eax, dword [ebp - 0x18]
test al, 0x40
je 0x46b40b
and eax, 0xffffffbf
mov dword [ebp - 0x18], eax
push ebx
push 1
lea ecx, [ebp - 0xeac]
call fcn.00411bc8
mov eax, dword [ebp - 0x18]
mov dword [ebp - 4], 0x23
test al, 0x20
je 0x46b42a
and eax, 0xffffffdf
mov dword [ebp - 0x18], eax
push ebx
push 1
lea ecx, [ebp - 0xec4]
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0x2ab8]
call fcn.0048e62b
mov ecx, eax
call fcn.0048e5f9
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
push ecx
lea ecx, [ebp - 0x249c]
call fcn.0048e5bc
mov ecx, eax
call fcn.0048e58a
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
push ecx
lea ecx, [ebp - 0x3f68]
call fcn.0048e4f6
mov ecx, eax
call fcn.0048e4c4
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
cmp dword [ebp - 0x44c], 0
je 0x46b4a8
lea eax, [ebp - 0x45c]
push eax
lea ecx, [ebp - 0xf24]
call fcn.00411add
mov byte [ebp - 4], 0x44
mov ecx, dword [ebp - 0x18]
or ecx, 0x80
jmp 0x46b4f3
mov dword [ebp - 0x314], ebx
mov dword [ebp - 0x310], 0x40
mov dword [ebp - 0x30c], 0x16
mov dword [ebp - 0x308], 0x1e
lea ecx, [ebp - 0x314]
call fcn.0048e492
push eax
lea ecx, [ebp - 0xf0c]
call fcn.00411aae
mov dword [ebp - 4], 0x45
mov ecx, dword [ebp - 0x18]
or ecx, 0x100
mov dword [ebp - 0x18], ecx
push eax
push str._val2_
lea ecx, [ebp - 0x216c]
call fcn.0041ac2d
mov ecx, eax
call fcn.0041abfb
mov edx, eax
lea ecx, [ebp - 0xef4]
call fcn.004b09c3
mov esi, eax
mov dword [ebp - 4], 0x46
lea ecx, [ebp - 0x24c0]
call fcn.0048e455
mov ecx, eax
call fcn.0048e423
push eax
mov edx, esi
lea ecx, [ebp - 0xedc]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x47
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x50]
call fcn.00411fef
mov byte [ebp - 4], 0x46
push ebx
push 1
lea ecx, [ebp - 0xedc]
call fcn.00411bc8
mov byte [ebp - 4], 0x45
push ebx
push 1
lea ecx, [ebp - 0xef4]
call fcn.00411bc8
mov dword [ebp - 4], 0x44
mov eax, dword [ebp - 0x18]
test eax, 0x100
je 0x46b5a3
and eax, 0xfffffeff
mov dword [ebp - 0x18], eax
push ebx
push 1
lea ecx, [ebp - 0xf0c]
call fcn.00411bc8
mov eax, dword [ebp - 0x18]
mov dword [ebp - 4], 0x23
test al, al
jns 0x46b5c4
and eax, 0xffffff7f
mov dword [ebp - 0x18], eax
push ebx
push 1
lea ecx, [ebp - 0xf24]
call fcn.00411bc8
push edi
lea ecx, [ebp - 0x2ae4]
call fcn.0049dcc5
mov ecx, eax
call fcn.0049dc93
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
push ecx
lea ecx, [ebp - 0x24e4]
call fcn.0048e3e6
mov ecx, eax
call fcn.0048e3b4
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
push ecx
lea ecx, [ebp - 0x4394]
call fcn.0048e2fb
mov ecx, eax
call fcn.0048e2c9
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
call fcn.0044db7b
push ebx
push 0x3e8
push edx
push eax
call fcn.0068a6d0
push edx
push eax
lea ecx, [ebp - 0xf9c]
call fcn.004624fd
pop ecx
pop ecx
mov byte [ebp - 4], 0x48
push eax
push ecx
lea ecx, [ebp - 0x218c]
call fcn.0048e290
mov ecx, eax
call fcn.0048e25e
mov edx, eax
lea ecx, [ebp - 0xf84]
call fcn.004b09c3
mov esi, eax
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x3788]
call fcn.0048e1f7
mov ecx, eax
call fcn.0048e1c5
push eax
mov edx, esi
lea ecx, [ebp - 0xf6c]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0xbc]
push ecx
mov edx, eax
lea ecx, [ebp - 0xf54]
call fcn.0041ce76
mov esi, eax
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x2b10]
call fcn.0048e17f
mov ecx, eax
call fcn.0048e14d
push eax
mov edx, esi
lea ecx, [ebp - 0xf3c]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x4c
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x50]
call fcn.00411fef
mov byte [ebp - 4], 0x4b
push ebx
push 1
lea ecx, [ebp - 0xf3c]
call fcn.00411bc8
mov byte [ebp - 4], 0x4a
push ebx
push 1
lea ecx, [ebp - 0xf54]
call fcn.00411bc8
mov byte [ebp - 4], 0x49
push ebx
push 1
lea ecx, [ebp - 0xf6c]
call fcn.00411bc8
mov byte [ebp - 4], 0x48
push ebx
push 1
lea ecx, [ebp - 0xf84]
call fcn.00411bc8
mov byte [ebp - 4], 0x23
push ebx
push 1
lea ecx, [ebp - 0xf9c]
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0x2b3c]
call fcn.0048e107
mov ecx, eax
call fcn.0048e0d5
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
push ecx
lea ecx, [ebp - 0x2508]
call fcn.0048e098
mov ecx, eax
call fcn.0048e066
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
push ecx
lea ecx, [ebp - 0x3dbc]
call fcn.0048dfda
mov ecx, eax
call fcn.0048dfa8
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
lea ecx, [ebp - 0xfe4]
call fcn.00471490
mov byte [ebp - 4], 0x4d
push eax
push str._val2_
lea ecx, [ebp - 0x21ac]
call fcn.0041aaaa
mov ecx, eax
call fcn.0041aa78
mov edx, eax
lea ecx, [ebp - 0xfcc]
call fcn.004b09c3
mov esi, eax
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x252c]
call fcn.0048df6b
mov ecx, eax
call fcn.0048df39
push eax
mov edx, esi
lea ecx, [ebp - 0xfb4]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x4f
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x50]
call fcn.00411fef
mov byte [ebp - 4], 0x4e
push ebx
push 1
lea ecx, [ebp - 0xfb4]
call fcn.00411bc8
mov byte [ebp - 4], 0x4d
push ebx
push 1
lea ecx, [ebp - 0xfcc]
call fcn.00411bc8
mov byte [ebp - 4], 0x23
push ebx
push 1
lea ecx, [ebp - 0xfe4]
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0x2b68]
call fcn.0048def6
mov ecx, eax
call fcn.0048dec4
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x22
push ebx
push 1
lea ecx, [ebp - 0x42c]
call fcn.00411bc8
mov byte [ebp - 4], 0x21
push ebx
push 1
lea ecx, [ebp - 0x444]
call fcn.00411bc8
mov byte [ebp - 4], 0x20
push ebx
push 1
lea ecx, [ebp - 0x45c]
call fcn.00411bc8
mov byte [ebp - 4], 7
push ebx
push 1
lea ecx, [ebp - 0x474]
call fcn.00411bc8
jmp 0x46a8cc
push ecx
lea ecx, [ebp - 0x4e38]
call fcn.0048ddc0
mov ecx, eax
call fcn.0048dd8e
push eax
lea ecx, [ebp - 0x66c]
call fcn.00411aae
mov byte [ebp - 4], 0x50
lea edx, [ebp - 0x66c]
lea ecx, [ebp - 0xffc]
call fcn.00461060
mov byte [ebp - 4], 0x51
mov ecx, dword [ebp - 0x20]
mov esi, dword [ecx]
lea ecx, [ebp - 0x28]
push ecx
push ebx
push 0x30
mov ecx, eax
call fcn.004a61a8
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
push eax
push 0x73bbb8
push dword [ebp - 0x20]
call dword [esi + 0x50]
mov esi, eax
mov byte [ebp - 4], 0x50
push ebx
push 1
lea ecx, [ebp - 0xffc]
call fcn.004ab703
mov byte [ebp - 4], 7
push ebx
push 1
lea ecx, [ebp - 0x66c]
call fcn.00411bc8
test esi, esi
jns 0x46b961
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
push 0x73a9e8
mov edi, dword [ebp - 0x54]
mov ecx, edi
call fcn.00411aae
or dword [ebp - 0x18], 1
mov byte [ebp - 4], 4
push ebx
push 1
jmp 0x46a8af
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x64], ebx
push ebx
push ebx
lea ecx, [ebp - 0x78]
call fcn.00411bc8
mov byte [ebp - 4], 0x52
mov ecx, dword [ebp - 0x28]
test ecx, ecx
je 0x46be46
mov eax, dword [ecx]
lea edx, [ebp - 0x24]
push edx
lea edx, [ebp - 0x1c]
push edx
push 1
push 0xffffffffffffffff
push ecx
call dword [eax + 0x10]
cmp dword [ebp - 0x24], 0
je 0x46be46
push ecx
lea ecx, [ebp - 0x3424]
call fcn.0048dd38
mov ecx, eax
call fcn.0048dd06
push eax
lea ecx, [ebp - 0x684]
call fcn.00411aae
mov byte [ebp - 4], 0x53
lea edx, [ebp - 0x684]
lea ecx, [ebp - 0x1014]
call fcn.00461060
mov byte [ebp - 4], 0x54
mov esi, dword [ebp - 0x1c]
mov edi, dword [esi]
push ebx
push ebx
lea ecx, [ebp - 0x27c]
push ecx
push ebx
mov ecx, eax
call fcn.004a61a8
push eax
push esi
call dword [edi + 0x10]
mov byte [ebp - 4], 0x53
push ebx
push 1
lea ecx, [ebp - 0x1014]
call fcn.004ab703
mov byte [ebp - 4], 0x52
push ebx
push 1
lea ecx, [ebp - 0x684]
call fcn.00411bc8
test dword [ebp - 0x27c], 0x2000
je 0x46bd58
test dword [ebp - 0x27c], 0x4000
je 0x46ba3f
mov eax, dword [ebp - 0x274]
mov edi, dword [eax]
jmp 0x46ba45
mov edi, dword [ebp - 0x274]
test edi, edi
je 0x46bd58
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x84], ebx
lea eax, [ebp - 0x80]
push eax
push 1
push edi
call dword [sym.imp.OLEAUT32.dll_SafeArrayLock]
lea eax, [ebp - 0x84]
push eax
push 1
push edi
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetLBound]
mov eax, dword [ebp - 0x84]
sub eax, dword [ebp - 0x80]
mov dword [ebp - 0x84], eax
add eax, 1
mov dword [ebp - 0x84], eax
je 0x46bd58
mov esi, ebx
mov dword [ebp - 0x170], esi
cmp esi, eax
jae 0x46bd58
mov dword [ebp - 0x168], esi
lea eax, [ebp - 0x16c]
push eax
lea eax, [ebp - 0x168]
push eax
push edi
call dword [sym.imp.OLEAUT32.dll_SafeArrayPutElement]
test eax, eax
js case.default.0x46bad6
mov eax, dword [ebp - 0x16c]
dec eax
push 0x17
pop ecx
cmp eax, ecx
ja case.default.0x46bad6
jmp dword [eax*4 + 0x46fd97]
push ecx
lea ecx, [ebp - 0x37d4]
call fcn.0048dc98
mov ecx, eax
call fcn.0048dc66
jmp 0x46bd3d
push ecx
lea ecx, [ebp - 0x2550]
call fcn.0048dc32
mov ecx, eax
call fcn.0048dc00
jmp 0x46bd3d
push ecx
lea ecx, [ebp - 0x2574]
call fcn.0048dbc3
mov ecx, eax
call fcn.0048db91
jmp 0x46bd3d
push ecx
lea ecx, [ebp - 0x3b64]
call fcn.0048db0d
mov ecx, eax
call fcn.0048dadb
jmp 0x46bd3d
push ecx
lea ecx, [ebp - 0x3010]
call fcn.0048da92
mov ecx, eax
call fcn.0048da60
jmp 0x46bd3d
push ecx
lea ecx, [ebp - 0x30d4]
call fcn.0048da0f
mov ecx, eax
call fcn.0048d9dd
jmp 0x46bd3d
mov dword [ebp - 0x3d0], ebx
mov word [ebp - 0x3cc], bx
mov dword [ebp - 0x3c8], 0xb
mov dword [ebp - 0x3c4], 0x2d
mov dword [ebp - 0x3c0], 0x58
mov dword [ebp - 0x3bc], ecx
mov dword [ebp - 0x3b8], 0x4d
lea ecx, [ebp - 0x3d0]
call fcn.0048d9ab
jmp 0x46bd3d
push ecx
lea ecx, [ebp - 0x2b94]
call fcn.0048d965
mov ecx, eax
call fcn.0048d933
jmp 0x46bd3d
push ecx
lea ecx, [ebp - 0x21cc]
call fcn.0048d8ff
mov ecx, eax
call fcn.0048d8cd
jmp 0x46bd3d
push ecx
lea ecx, [ebp - 0x2bc0]
call fcn.0048d890
mov ecx, eax
call fcn.0048d85e
jmp 0x46bd3d
push ecx
lea ecx, [ebp - 0x3040]
call fcn.0048d81a
mov ecx, eax
call fcn.0048d7e8
jmp 0x46bd3d
push ecx
lea ecx, [ebp - 0x3820]
call fcn.0048d782
mov ecx, eax
call fcn.0048d750
jmp 0x46bd3d
push ecx
lea ecx, [ebp - 0x3108]
call fcn.0048d709
mov ecx, eax
call fcn.0048d6d7
jmp 0x46bd3d
push ecx
lea ecx, [ebp - 0x3464]
call fcn.0048d682
mov ecx, eax
call fcn.0048d650
jmp 0x46bd3d
push 0x73c818
lea ecx, [ebp - 0x34a4]
call fcn.0048d57d
mov ecx, eax
call fcn.0048d54b
jmp 0x46bd3d
push ecx
lea ecx, [ebp - 0x3070]
call fcn.0048d4fd
mov ecx, eax
call fcn.0048d4cb
jmp 0x46bd3d
push ecx
lea ecx, [ebp - 0x3bc4]
call fcn.0048d450
mov ecx, eax
call fcn.0048d41e
jmp 0x46bd3d
push ecx
lea ecx, [ebp - 0x3a04]
call fcn.0048d3b0
mov ecx, eax
call fcn.0048d37e
jmp 0x46bd3d
push ecx
lea ecx, [ebp - 0x313c]
call fcn.0048d334
mov ecx, eax
call fcn.0048d302
jmp 0x46bd3d
push ecx
lea ecx, [ebp - 0x3e28]
call fcn.0048d27e
mov ecx, eax
call fcn.0048d24c
jmp 0x46bd3d
push ecx
lea ecx, [ebp - 0x3c20]
call fcn.0048d1dc
mov ecx, eax
call fcn.0048d1aa
jmp 0x46bd3d
push ecx
lea ecx, [ebp - 0x386c]
call fcn.0048d140
mov ecx, eax
call fcn.0048d10e
jmp 0x46bd3d
push ecx
lea ecx, [ebp - 0x3c7c]
call fcn.0048d091
mov ecx, eax
call fcn.0048d05f
jmp 0x46bd3d
push ecx
lea ecx, [ebp - 0x373c]
call fcn.0048cffd
mov ecx, eax
call fcn.0048cfcb
push eax
lea ecx, [ebp - 0x78]
call fcn.004119f6
inc esi
mov dword [ebp - 0x170], esi
mov eax, dword [ebp - 0x84]
jmp 0x46ba99
push ecx
lea ecx, [ebp - 0x2598]
call fcn.0048cf8e
mov ecx, eax
call fcn.0048cf5c
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
push ecx
lea ecx, [ebp - 0x4418]
call fcn.0048cead
mov ecx, eax
call fcn.0048ce7b
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
lea eax, [ebp - 0x78]
push eax
push ecx
lea ecx, [ebp - 0x21ec]
call fcn.0048ce45
mov ecx, eax
call fcn.0048ce13
mov edx, eax
lea ecx, [ebp - 0x1044]
call fcn.004b0946
mov esi, eax
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x25bc]
call fcn.0048cdd6
mov ecx, eax
call fcn.0048cda4
push eax
mov edx, esi
lea ecx, [ebp - 0x102c]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x56
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x50]
call fcn.00411fef
mov byte [ebp - 4], 0x55
push ebx
push 1
lea ecx, [ebp - 0x102c]
call fcn.00411bc8
mov byte [ebp - 4], 0x52
push ebx
push 1
lea ecx, [ebp - 0x1044]
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0x2bec]
call fcn.0048cd5e
mov ecx, eax
call fcn.0048cd2c
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
lea eax, [ebp - 0x27c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x46b97b
mov dword [ebp - 0x28], ebx
push ecx
lea ecx, [ebp - 0x4a28]
call fcn.0048cc6f
mov ecx, eax
call fcn.0048cc3d
push eax
lea ecx, [ebp - 0x69c]
call fcn.00411aae
mov byte [ebp - 4], 0x57
lea edx, [ebp - 0x69c]
lea ecx, [ebp - 0x105c]
call fcn.00461060
mov byte [ebp - 4], 0x58
mov ecx, dword [ebp - 0x20]
mov esi, dword [ecx]
lea ecx, [ebp - 0x28]
push ecx
push ebx
push 0x30
mov ecx, eax
call fcn.004a61a8
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
push eax
push 0x73bbb8
push dword [ebp - 0x20]
call dword [esi + 0x50]
mov esi, eax
mov byte [ebp - 4], 0x57
push ebx
push 1
lea ecx, [ebp - 0x105c]
call fcn.004ab703
mov byte [ebp - 4], 0x52
push ebx
push 1
lea ecx, [ebp - 0x69c]
call fcn.00411bc8
test esi, esi
jns 0x46bf10
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
push 0x73a9e8
mov edi, dword [ebp - 0x54]
mov ecx, edi
call fcn.00411aae
or dword [ebp - 0x18], 1
mov byte [ebp - 4], 7
push ebx
push 1
lea ecx, [ebp - 0x78]
call fcn.00411bc8
jmp 0x46b955
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x24], ebx
mov ecx, dword [ebp - 0x28]
test ecx, ecx
je 0x46c166
mov eax, dword [ecx]
lea edx, [ebp - 0x24]
push edx
lea edx, [ebp - 0x1c]
push edx
push 1
push 0xffffffffffffffff
push ecx
call dword [eax + 0x10]
cmp dword [ebp - 0x24], 0
je 0x46c166
push 0x73b9d0
lea ecx, [ebp - 0x4d4]
call fcn.00411aae
mov byte [ebp - 4], 0x59
push ecx
lea ecx, [ebp - 0x25e0]
call fcn.0048cc00
mov ecx, eax
call fcn.0048cbce
push eax
lea ecx, [ebp - 0x6b4]
call fcn.00411aae
mov byte [ebp - 4], 0x5a
lea edx, [ebp - 0x6b4]
lea ecx, [ebp - 0x1074]
call fcn.00461060
mov byte [ebp - 4], 0x5b
mov esi, dword [ebp - 0x1c]
mov edi, dword [esi]
push ebx
push ebx
lea ecx, [ebp - 0x414]
push ecx
push ebx
mov ecx, eax
call fcn.004a61a8
push eax
push esi
call dword [edi + 0x10]
neg eax
sbb al, al
inc al
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0x5a
push ebx
push 1
lea ecx, [ebp - 0x1074]
call fcn.004ab703
mov byte [ebp - 4], 0x59
push ebx
push 1
lea ecx, [ebp - 0x6b4]
call fcn.00411bc8
cmp byte [ebp - 0x30], 0
je 0x46c061
push dword [ebp - 0x40c]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
push eax
push dword [ebp - 0x40c]
lea ecx, [ebp - 0x10bc]
call fcn.004a6421
mov byte [ebp - 4], 0x5c
mov edx, eax
lea ecx, [ebp - 0x10a4]
call fcn.0046237a
mov byte [ebp - 4], 0x5d
mov edx, eax
lea ecx, [ebp - 0x108c]
call fcn.00461197
mov byte [ebp - 4], 0x5e
push eax
lea ecx, [ebp - 0x4d4]
call fcn.0041b490
mov byte [ebp - 4], 0x5d
push ebx
push 1
lea ecx, [ebp - 0x108c]
call fcn.00411bc8
mov byte [ebp - 4], 0x5c
push ebx
push 1
lea ecx, [ebp - 0x10a4]
call fcn.004ab703
mov byte [ebp - 4], 0x59
push ebx
push 1
lea ecx, [ebp - 0x10bc]
call fcn.004ab703
push ecx
lea ecx, [ebp - 0x2604]
call fcn.0048cb91
mov ecx, eax
call fcn.0048cb5f
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
push ecx
lea ecx, [ebp - 0x3fd8]
call fcn.0048cac7
mov ecx, eax
call fcn.0048ca9a
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
lea eax, [ebp - 0x4d4]
push eax
push ecx
lea ecx, [ebp - 0x220c]
call fcn.0048ca61
mov ecx, eax
call fcn.0048ca2f
mov edx, eax
lea ecx, [ebp - 0x10ec]
call fcn.004b0946
mov esi, eax
mov byte [ebp - 4], 0x5f
mov dword [esp], str.__val2_
lea ecx, [ebp - 0x2628]
call fcn.0049d32e
mov ecx, eax
call fcn.0049d2fc
push eax
mov edx, esi
lea ecx, [ebp - 0x10d4]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x60
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x50]
call fcn.00411fef
mov byte [ebp - 4], 0x5f
push ebx
push 1
lea ecx, [ebp - 0x10d4]
call fcn.00411bc8
mov byte [ebp - 4], 0x59
push ebx
push 1
lea ecx, [ebp - 0x10ec]
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0x2c18]
call fcn.0048c9e9
mov ecx, eax
call fcn.0048c9b7
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
lea eax, [ebp - 0x414]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x52
push ebx
push 1
lea ecx, [ebp - 0x4d4]
call fcn.00411bc8
call dword [sym.imp.KERNEL32.DLL_GetSystemDefaultUILanguage]
movzx edx, ax
lea ecx, [ebp - 0x1a8]
call fcn.004692c9
mov byte [ebp - 4], 0x61
push 0xaa
push ebx
lea eax, [ebp - 0x33a4]
push eax
call fcn.005077d5
add esp, 0xc
push 0x55
lea eax, [ebp - 0x33a4]
push eax
call dword [sym.imp.KERNEL32.DLL_GetUserDefaultLocaleName]
lea eax, [ebp - 0x33a4]
push eax
lea ecx, [ebp - 0x190]
call fcn.004a63fc
mov byte [ebp - 4], 0x62
push ecx
lea ecx, [ebp - 0x264c]
call fcn.0048c97a
mov ecx, eax
call fcn.0048c948
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
push ecx
lea ecx, [ebp - 0x45a8]
call fcn.0048c89b
mov ecx, eax
call fcn.0048c869
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
lea edx, [ebp - 0x190]
lea ecx, [ebp - 0x1134]
call fcn.00461197
mov byte [ebp - 4], 0x63
push eax
push ecx
lea ecx, [ebp - 0x222c]
call fcn.0048c830
mov ecx, eax
call fcn.0048c7fe
mov edx, eax
lea ecx, [ebp - 0x111c]
call fcn.004b09c3
mov esi, eax
mov byte [ebp - 4], 0x64
lea ecx, [ebp - 0x2670]
call fcn.0048c7c5
mov ecx, eax
call fcn.0048c793
push eax
mov edx, esi
lea ecx, [ebp - 0x1104]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x65
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x50]
call fcn.00411fef
mov byte [ebp - 4], 0x64
push ebx
push 1
lea ecx, [ebp - 0x1104]
call fcn.00411bc8
mov byte [ebp - 4], 0x63
push ebx
push 1
lea ecx, [ebp - 0x111c]
call fcn.00411bc8
mov byte [ebp - 4], 0x62
push ebx
push 1
lea ecx, [ebp - 0x1134]
call fcn.00411bc8
push str.__block_
lea ecx, [ebp - 0x2c44]
call fcn.00493d1c
mov ecx, eax
call fcn.00493cea
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
push ecx
lea ecx, [ebp - 0x2694]
call fcn.0048c756
mov ecx, eax
call fcn.0048c724
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
push ecx
lea ecx, [ebp - 0x4628]
call fcn.0048c67f
mov ecx, eax
call fcn.0048c64d
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
lea edx, [ebp - 0x1a8]
lea ecx, [ebp - 0x117c]
call fcn.00461197
mov byte [ebp - 4], 0x66
push eax
push str._val2_
lea ecx, [ebp - 0x224c]
call fcn.0048c5d4
mov ecx, eax
call fcn.0048c5a2
mov edx, eax
lea ecx, [ebp - 0x1164]
call fcn.004b09c3
mov esi, eax
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0x26b8]
call fcn.0048c565
mov ecx, eax
call fcn.0048c533
push eax
mov edx, esi
lea ecx, [ebp - 0x114c]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x68
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x50]
call fcn.00411fef
mov byte [ebp - 4], 0x67
push ebx
push 1
lea ecx, [ebp - 0x114c]
call fcn.00411bc8
mov byte [ebp - 4], 0x66
push ebx
push 1
lea ecx, [ebp - 0x1164]
call fcn.00411bc8
mov byte [ebp - 4], 0x62
push ebx
push 1
lea ecx, [ebp - 0x117c]
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0x2c70]
call fcn.0048c4ed
mov ecx, eax
call fcn.0048c4bb
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
mov dword [ebp - 0x28], ebx
push ecx
lea ecx, [ebp - 0x4908]
call fcn.0048c3eb
mov ecx, eax
call fcn.0048c3b9
push eax
lea ecx, [ebp - 0x894]
call fcn.00411aae
mov byte [ebp - 4], 0x69
lea edx, [ebp - 0x894]
lea ecx, [ebp - 0x1194]
call fcn.00461060
mov byte [ebp - 4], 0x6a
mov ecx, dword [ebp - 0x20]
mov esi, dword [ecx]
lea ecx, [ebp - 0x28]
push ecx
push ebx
push 0x30
mov ecx, eax
call fcn.004a61a8
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
push eax
push 0x73bbb8
push dword [ebp - 0x20]
call dword [esi + 0x50]
mov esi, eax
mov byte [ebp - 4], 0x69
push ebx
push 1
lea ecx, [ebp - 0x1194]
call fcn.004ab703
mov byte [ebp - 4], 0x62
push ebx
push 1
lea ecx, [ebp - 0x894]
call fcn.00411bc8
test esi, esi
jns 0x46c48d
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
push 0x73a9e8
mov edi, dword [ebp - 0x54]
mov ecx, edi
call fcn.00411aae
or dword [ebp - 0x18], 1
mov byte [ebp - 4], 0x61
push ebx
push 1
lea ecx, [ebp - 0x190]
call fcn.004ab703
mov byte [ebp - 4], 0x52
push ebx
push 1
lea ecx, [ebp - 0x1a8]
call fcn.004ab703
jmp 0x46befc
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x24], ebx
mov ecx, dword [ebp - 0x28]
test ecx, ecx
je 0x46ca0c
mov eax, dword [ecx]
lea edx, [ebp - 0x24]
push edx
lea edx, [ebp - 0x1c]
push edx
push 1
push 0xffffffffffffffff
push ecx
call dword [eax + 0x10]
cmp dword [ebp - 0x24], 0
je 0x46ca0c
inc dword [ebp - 0x58]
mov esi, 0x73b9d0
push esi
lea ecx, [ebp - 0x4a4]
call fcn.00411aae
mov byte [ebp - 4], 0x6b
push esi
lea ecx, [ebp - 0x48c]
call fcn.00411aae
mov byte [ebp - 4], 0x6c
push ecx
lea ecx, [ebp - 0x31dc]
call fcn.0048c363
mov ecx, eax
call fcn.0048c331
push eax
lea ecx, [ebp - 0x6e4]
call fcn.00411aae
mov byte [ebp - 4], 0x6d
lea edx, [ebp - 0x6e4]
lea ecx, [ebp - 0x11ac]
call fcn.00461060
mov byte [ebp - 4], 0x6e
mov esi, dword [ebp - 0x1c]
mov edi, dword [esi]
push ebx
push ebx
lea ecx, [ebp - 0x1ec]
push ecx
push ebx
mov ecx, eax
call fcn.004a61a8
push eax
push esi
call dword [edi + 0x10]
neg eax
sbb al, al
inc al
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0x6d
push ebx
push 1
lea ecx, [ebp - 0x11ac]
call fcn.004ab703
mov byte [ebp - 4], 0x6c
push ebx
push 1
lea ecx, [ebp - 0x6e4]
call fcn.00411bc8
cmp byte [ebp - 0x30], 0
je 0x46c5f2
push dword [ebp - 0x1e4]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
push eax
push dword [ebp - 0x1e4]
lea ecx, [ebp - 0x11f4]
call fcn.004a6421
mov byte [ebp - 4], 0x6f
mov edx, eax
lea ecx, [ebp - 0x11dc]
call fcn.0046237a
mov byte [ebp - 4], 0x70
mov edx, eax
lea ecx, [ebp - 0x11c4]
call fcn.00461197
mov byte [ebp - 4], 0x71
push eax
lea ecx, [ebp - 0x4a4]
call fcn.0041b490
mov byte [ebp - 4], 0x70
push ebx
push 1
lea ecx, [ebp - 0x11c4]
call fcn.00411bc8
mov byte [ebp - 4], 0x6f
push ebx
push 1
lea ecx, [ebp - 0x11dc]
call fcn.004ab703
mov byte [ebp - 4], 0x6c
push ebx
push 1
lea ecx, [ebp - 0x11f4]
call fcn.004ab703
push ecx
lea ecx, [ebp - 0x34e4]
call fcn.0048c2d7
mov ecx, eax
call fcn.0048c2a5
push eax
lea ecx, [ebp - 0x6fc]
call fcn.00411aae
mov byte [ebp - 4], 0x72
lea edx, [ebp - 0x6fc]
lea ecx, [ebp - 0x120c]
call fcn.00461060
mov byte [ebp - 4], 0x73
mov esi, dword [ebp - 0x1c]
mov edi, dword [esi]
push ebx
push ebx
lea ecx, [ebp - 0x1ec]
push ecx
push ebx
mov ecx, eax
call fcn.004a61a8
push eax
push esi
call dword [edi + 0x10]
neg eax
sbb al, al
inc al
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0x72
push ebx
push 1
lea ecx, [ebp - 0x120c]
call fcn.004ab703
mov byte [ebp - 4], 0x6c
push ebx
push 1
lea ecx, [ebp - 0x6fc]
call fcn.00411bc8
cmp byte [ebp - 0x30], 0
je 0x46c702
push dword [ebp - 0x1e4]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
push eax
push dword [ebp - 0x1e4]
lea ecx, [ebp - 0x1254]
call fcn.004a6421
mov byte [ebp - 4], 0x74
mov edx, eax
lea ecx, [ebp - 0x123c]
call fcn.0046237a
mov byte [ebp - 4], 0x75
mov edx, eax
lea ecx, [ebp - 0x1224]
call fcn.00461197
mov byte [ebp - 4], 0x76
push eax
lea ecx, [ebp - 0x48c]
call fcn.0041b490
mov byte [ebp - 4], 0x75
push ebx
push 1
lea ecx, [ebp - 0x1224]
call fcn.00411bc8
mov byte [ebp - 4], 0x74
push ebx
push 1
lea ecx, [ebp - 0x123c]
call fcn.004ab703
mov byte [ebp - 4], 0x6c
push ebx
push 1
lea ecx, [ebp - 0x1254]
call fcn.004ab703
push ecx
lea ecx, [ebp - 0x26dc]
call fcn.0048c268
mov ecx, eax
call fcn.0048c236
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
push ecx
lea ecx, [ebp - 0x4048]
call fcn.0048c19e
mov ecx, eax
call fcn.0048c16c
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
cmp dword [ebp - 0x47c], 0
je 0x46c766
lea eax, [ebp - 0x48c]
push eax
lea ecx, [ebp - 0x1314]
call fcn.00411add
mov edi, eax
mov byte [ebp - 4], 0x77
mov esi, dword [ebp - 0x18]
or esi, 0x200
jmp 0x46c7b3
mov dword [ebp - 0x324], ebx
mov dword [ebp - 0x320], 0x4c
mov dword [ebp - 0x31c], 0x42
mov dword [ebp - 0x318], 0x50
lea ecx, [ebp - 0x324]
call fcn.0048c09d
push eax
lea ecx, [ebp - 0x12fc]
call fcn.00411aae
mov edi, eax
mov dword [ebp - 4], 0x78
mov esi, dword [ebp - 0x18]
or esi, 0x400
mov dword [ebp - 0x18], esi
cmp dword [ebp - 0x494], 0
je 0x46c7e0
lea eax, [ebp - 0x4a4]
push eax
lea ecx, [ebp - 0x12e4]
call fcn.00411add
mov dword [ebp - 4], 0x79
or esi, 0x800
jmp 0x46c828
mov dword [ebp - 0x334], ebx
mov dword [ebp - 0x330], 7
mov dword [ebp - 0x32c], 0x2c
mov dword [ebp - 0x328], 0x2b
lea ecx, [ebp - 0x334]
call fcn.0048c0cf
push eax
lea ecx, [ebp - 0x12cc]
call fcn.00411aae
mov dword [ebp - 4], 0x7a
or esi, 0x1000
mov dword [ebp - 0x18], esi
push eax
push ecx
lea ecx, [ebp - 0x226c]
call fcn.0048c133
mov ecx, eax
call fcn.0048c101
mov edx, eax
lea ecx, [ebp - 0x12b4]
call fcn.004b09c3
mov esi, eax
mov dword [ebp - 4], 0x7b
mov dword [esp], str.__Status:
lea ecx, [ebp - 0x3170]
call fcn.00497722
mov ecx, eax
call fcn.004976f0
push eax
mov edx, esi
lea ecx, [ebp - 0x129c]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x7c
push edi
mov edx, eax
lea ecx, [ebp - 0x1284]
call fcn.004b1821
mov esi, eax
mov byte [ebp - 4], 0x7d
mov dword [esp], str.__val2_
lea ecx, [ebp - 0x2700]
call fcn.0048faaf
mov ecx, eax
call fcn.0048fa7d
push eax
mov edx, esi
lea ecx, [ebp - 0x126c]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x7e
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x50]
call fcn.00411fef
mov byte [ebp - 4], 0x7d
push ebx
push 1
lea ecx, [ebp - 0x126c]
call fcn.00411bc8
mov byte [ebp - 4], 0x7c
push ebx
push 1
lea ecx, [ebp - 0x1284]
call fcn.00411bc8
mov byte [ebp - 4], 0x7b
push ebx
push 1
lea ecx, [ebp - 0x129c]
call fcn.00411bc8
mov byte [ebp - 4], 0x7a
push ebx
push 1
lea ecx, [ebp - 0x12b4]
call fcn.00411bc8
mov dword [ebp - 4], 0x79
mov eax, dword [ebp - 0x18]
test eax, 0x1000
je 0x46c93f
and eax, 0xffffefff
mov dword [ebp - 0x18], eax
push ebx
push 1
lea ecx, [ebp - 0x12cc]
call fcn.00411bc8
mov eax, dword [ebp - 0x18]
mov dword [ebp - 4], 0x78
test eax, 0x800
je 0x46c966
and eax, 0xfffff7ff
mov dword [ebp - 0x18], eax
push ebx
push 1
lea ecx, [ebp - 0x12e4]
call fcn.00411bc8
mov eax, dword [ebp - 0x18]
mov dword [ebp - 4], 0x77
test eax, 0x400
je 0x46c98d
and eax, 0xfffffbff
mov dword [ebp - 0x18], eax
push ebx
push 1
lea ecx, [ebp - 0x12fc]
call fcn.00411bc8
mov eax, dword [ebp - 0x18]
mov dword [ebp - 4], 0x6c
test eax, 0x200
je 0x46c9b1
and eax, 0xfffffdff
mov dword [ebp - 0x18], eax
push ebx
push 1
lea ecx, [ebp - 0x1314]
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0x2c9c]
call fcn.0048c057
mov ecx, eax
call fcn.0048c025
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
lea eax, [ebp - 0x1ec]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x6b
push ebx
push 1
lea ecx, [ebp - 0x48c]
call fcn.00411bc8
mov byte [ebp - 4], 0x62
push ebx
push 1
lea ecx, [ebp - 0x4a4]
call fcn.00411bc8
jmp 0x46c493
mov dword [ebp - 0x28], ebx
push ecx
lea ecx, [ebp - 0x47dc]
call fcn.0048bf52
mov ecx, eax
call fcn.0048bf20
push eax
lea ecx, [ebp - 0x714]
call fcn.00411aae
push 0x7f
pop eax
mov byte [ebp - 4], al
lea edx, [ebp - 0x714]
lea ecx, [ebp - 0x132c]
call fcn.00461060
mov byte [ebp - 4], 0x80
mov ecx, dword [ebp - 0x20]
mov esi, dword [ecx]
lea ecx, [ebp - 0x28]
push ecx
push ebx
push 0x30
mov ecx, eax
call fcn.004a61a8
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
push eax
push 0x73bbb8
push dword [ebp - 0x20]
call dword [esi + 0x50]
mov esi, eax
push 0x7f
pop eax
mov byte [ebp - 4], al
push ebx
push 1
lea ecx, [ebp - 0x132c]
call fcn.004ab703
mov byte [ebp - 4], 0x62
push ebx
push 1
lea ecx, [ebp - 0x714]
call fcn.00411bc8
test esi, esi
js 0x46c439
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x24], ebx
mov ecx, dword [ebp - 0x28]
test ecx, ecx
je 0x46ce0a
mov eax, dword [ecx]
lea edx, [ebp - 0x24]
push edx
lea edx, [ebp - 0x1c]
push edx
push 1
push 0xffffffffffffffff
push ecx
call dword [eax + 0x10]
cmp dword [ebp - 0x24], 0
je 0x46ce0a
push 0x73b9d0
lea ecx, [ebp - 0x4ec]
call fcn.00411aae
mov byte [ebp - 4], 0x81
push str.Name
lea ecx, [ebp - 0x2064]
call fcn.00499d54
mov ecx, eax
call fcn.00499d22
push eax
lea ecx, [ebp - 0x72c]
call fcn.00411aae
mov byte [ebp - 4], 0x82
lea edx, [ebp - 0x72c]
lea ecx, [ebp - 0x1344]
call fcn.00461060
mov byte [ebp - 4], 0x83
mov esi, dword [ebp - 0x1c]
mov edi, dword [esi]
push ebx
push ebx
lea ecx, [ebp - 0x28c]
push ecx
push ebx
mov ecx, eax
call fcn.004a61a8
push eax
push esi
call dword [edi + 0x10]
neg eax
sbb al, al
inc al
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0x82
push ebx
push 1
lea ecx, [ebp - 0x1344]
call fcn.004ab703
mov byte [ebp - 4], 0x81
push ebx
push 1
lea ecx, [ebp - 0x72c]
call fcn.00411bc8
cmp byte [ebp - 0x30], 0
je 0x46cbf4
push dword [ebp - 0x284]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
push eax
push dword [ebp - 0x284]
lea ecx, [ebp - 0x138c]
call fcn.004a6421
mov byte [ebp - 4], 0x84
mov edx, eax
lea ecx, [ebp - 0x1374]
call fcn.0046237a
mov byte [ebp - 4], 0x85
mov edx, eax
lea ecx, [ebp - 0x135c]
call fcn.00461197
mov byte [ebp - 4], 0x86
push eax
lea ecx, [ebp - 0x4ec]
call fcn.0041b490
mov byte [ebp - 4], 0x85
push ebx
push 1
lea ecx, [ebp - 0x135c]
call fcn.00411bc8
mov byte [ebp - 4], 0x84
push ebx
push 1
lea ecx, [ebp - 0x1374]
call fcn.004ab703
mov byte [ebp - 4], 0x81
push ebx
push 1
lea ecx, [ebp - 0x138c]
call fcn.004ab703
push ecx
lea ecx, [ebp - 0x3668]
call fcn.0048beba
mov ecx, eax
call fcn.0048be88
push eax
lea ecx, [ebp - 0x744]
call fcn.00411aae
mov byte [ebp - 4], 0x87
lea edx, [ebp - 0x744]
lea ecx, [ebp - 0x13a4]
call fcn.00461060
mov byte [ebp - 4], 0x88
mov esi, dword [ebp - 0x1c]
mov edi, dword [esi]
push ebx
push ebx
lea ecx, [ebp - 0x28c]
push ecx
push ebx
mov ecx, eax
call fcn.004a61a8
push eax
push esi
call dword [edi + 0x10]
neg eax
sbb al, al
inc al
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0x87
push ebx
push 1
lea ecx, [ebp - 0x13a4]
call fcn.004ab703
mov byte [ebp - 4], 0x81
push ebx
push 1
lea ecx, [ebp - 0x744]
call fcn.00411bc8
mov esi, ebx
cmp byte [ebp - 0x30], 0
cmovne esi, dword [ebp - 0x284]
push str._block_
lea ecx, [ebp - 0x2724]
call fcn.0049741b
mov ecx, eax
call fcn.004973e9
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
push ecx
lea ecx, [ebp - 0x40b8]
call fcn.0048bdf0
mov ecx, eax
call fcn.0048bdbe
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
mov edx, esi
lea ecx, [ebp - 0x141c]
call fcn.00413c6d
mov edi, eax
mov byte [ebp - 4], 0x89
lea eax, [ebp - 0x4ec]
push eax
push ecx
lea ecx, [ebp - 0x228c]
call fcn.0048bd85
mov ecx, eax
call fcn.0048bd53
mov edx, eax
lea ecx, [ebp - 0x1404]
call fcn.004b0946
mov esi, eax
mov byte [ebp - 4], 0x8a
lea ecx, [ebp - 0x2748]
call fcn.0048bd1b
mov ecx, eax
call fcn.0048bce9
push eax
mov edx, esi
lea ecx, [ebp - 0x13ec]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x8b
push edi
mov edx, eax
lea ecx, [ebp - 0x13d4]
call fcn.004b1821
mov esi, eax
mov byte [ebp - 4], 0x8c
lea ecx, [ebp - 0x3624]
call fcn.0048bc86
mov ecx, eax
call fcn.0048bc54
push eax
mov edx, esi
lea ecx, [ebp - 0x13bc]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x8d
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x50]
call fcn.00411fef
mov byte [ebp - 4], 0x8c
push ebx
push 1
lea ecx, [ebp - 0x13bc]
call fcn.00411bc8
mov byte [ebp - 4], 0x8b
push ebx
push 1
lea ecx, [ebp - 0x13d4]
call fcn.00411bc8
mov byte [ebp - 4], 0x8a
push ebx
push 1
lea ecx, [ebp - 0x13ec]
call fcn.00411bc8
mov byte [ebp - 4], 0x89
push ebx
push 1
lea ecx, [ebp - 0x1404]
call fcn.00411bc8
mov byte [ebp - 4], 0x81
push ebx
push 1
lea ecx, [ebp - 0x141c]
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0x2cc8]
call fcn.0048bc0e
mov ecx, eax
call fcn.0048bbdc
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
lea eax, [ebp - 0x28c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x62
push ebx
push 1
lea ecx, [ebp - 0x4ec]
call fcn.00411bc8
jmp 0x46caa5
mov dword [ebp - 0x28], ebx
push ecx
lea ecx, [ebp - 0x4524]
call fcn.0048bb25
mov ecx, eax
call fcn.0048baf3
push eax
lea ecx, [ebp - 0x75c]
call fcn.00411aae
mov byte [ebp - 4], 0x8e
lea edx, [ebp - 0x75c]
lea ecx, [ebp - 0x1434]
call fcn.00461060
mov byte [ebp - 4], 0x8f
mov ecx, dword [ebp - 0x20]
mov esi, dword [ecx]
lea ecx, [ebp - 0x28]
push ecx
push ebx
push 0x30
mov ecx, eax
call fcn.004a61a8
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
push eax
push 0x73bbb8
push dword [ebp - 0x20]
call dword [esi + 0x50]
mov esi, eax
mov byte [ebp - 4], 0x8e
push ebx
push 1
lea ecx, [ebp - 0x1434]
call fcn.004ab703
mov byte [ebp - 4], 0x62
push ebx
push 1
lea ecx, [ebp - 0x75c]
call fcn.00411bc8
test esi, esi
js 0x46c439
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x24], ebx
mov ecx, dword [ebp - 0x28]
test ecx, ecx
je 0x46d335
mov eax, dword [ecx]
lea edx, [ebp - 0x24]
push edx
lea edx, [ebp - 0x1c]
push edx
push 1
push 0xffffffffffffffff
push ecx
call dword [eax + 0x10]
cmp dword [ebp - 0x24], 0
je 0x46d335
push 0x73b9d0
lea ecx, [ebp - 0x404]
call fcn.00411aae
mov byte [ebp - 4], 0x90
push ecx
lea ecx, [ebp - 0x3958]
call fcn.0048ba85
mov ecx, eax
call fcn.0048ba53
push eax
lea ecx, [ebp - 0x774]
call fcn.00411aae
mov byte [ebp - 4], 0x91
lea edx, [ebp - 0x774]
lea ecx, [ebp - 0x144c]
call fcn.00461060
mov byte [ebp - 4], 0x92
mov esi, dword [ebp - 0x1c]
mov edi, dword [esi]
push ebx
push ebx
lea ecx, [ebp - 0x29c]
push ecx
push ebx
mov ecx, eax
call fcn.004a61a8
push eax
push esi
call dword [edi + 0x10]
neg eax
sbb al, al
inc al
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0x91
push ebx
push 1
lea ecx, [ebp - 0x144c]
call fcn.004ab703
mov byte [ebp - 4], 0x90
push ebx
push 1
lea ecx, [ebp - 0x774]
call fcn.00411bc8
cmp byte [ebp - 0x30], 0
je 0x46d231
mov edx, dword [ebp - 0x294]
cmp edx, 0x186a0
jle 0x46d115
push ecx
lea ecx, [ebp - 0x4218]
call fcn.0048b9c5
mov ecx, eax
call fcn.0048b993
push eax
lea ecx, [ebp - 0x78c]
call fcn.00411aae
mov byte [ebp - 4], 0x93
lea edx, [ebp - 0x78c]
lea ecx, [ebp - 0x1464]
call fcn.00461060
mov byte [ebp - 4], 0x94
mov esi, dword [ebp - 0x1c]
mov edi, dword [esi]
push ebx
push ebx
lea ecx, [ebp - 0x29c]
push ecx
push ebx
mov ecx, eax
call fcn.004a61a8
push eax
push esi
call dword [edi + 0x10]
mov byte [ebp - 4], 0x93
push ebx
push 1
lea ecx, [ebp - 0x1464]
call fcn.004ab703
mov byte [ebp - 4], 0x90
push ebx
push 1
lea ecx, [ebp - 0x78c]
call fcn.00411bc8
mov edx, dword [ebp - 0x294]
cmp edx, 0x64
jne 0x46d0b1
lea ecx, [ebp - 0x14ac]
call fcn.00413c6d
mov byte [ebp - 4], 0x95
push eax
push ecx
lea ecx, [ebp - 0x38b8]
call fcn.0048b925
mov ecx, eax
call fcn.0048b8f3
mov edx, eax
lea ecx, [ebp - 0x1494]
call fcn.004b09c3
pop ecx
mov esi, eax
mov byte [ebp - 4], 0x96
mov word [ebp - 0x208], bx
mov byte [ebp - 0x206], bl
mov dword [ebp - 0x204], 0x1c
mov dword [ebp - 0x200], 0x4b
lea ecx, [ebp - 0x208]
call fcn.0048b8c1
push eax
mov edx, esi
lea ecx, [ebp - 0x147c]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x97
push eax
lea ecx, [ebp - 0x404]
call fcn.0041b490
mov byte [ebp - 4], 0x96
push ebx
push 1
lea ecx, [ebp - 0x147c]
call fcn.00411bc8
mov byte [ebp - 4], 0x95
push ebx
push 1
lea ecx, [ebp - 0x1494]
call fcn.00411bc8
mov byte [ebp - 4], 0x90
lea ecx, [ebp - 0x14ac]
jmp 0x46d229
lea ecx, [ebp - 0x14dc]
call fcn.00413c6d
mov esi, eax
mov byte [ebp - 4], 0x98
push ecx
lea ecx, [ebp - 0x4128]
call fcn.0048b82f
mov ecx, eax
call fcn.0048b7fd
push eax
mov edx, esi
lea ecx, [ebp - 0x14c4]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x99
push eax
lea ecx, [ebp - 0x404]
call fcn.0041b490
mov byte [ebp - 4], 0x98
push ebx
push 1
lea ecx, [ebp - 0x14c4]
call fcn.00411bc8
mov byte [ebp - 4], 0x90
lea ecx, [ebp - 0x14dc]
jmp 0x46d229
lea ecx, [ebp - 0x1554]
call fcn.00413c6d
mov esi, eax
mov byte [ebp - 4], 0x9a
mov eax, dword [ebp - 0x294]
cdq
push ebx
push 0x3c
push edx
push eax
call fcn.0068a690
push edx
push eax
lea ecx, [ebp - 0x153c]
call fcn.004624fd
pop ecx
pop ecx
mov edi, eax
mov byte [ebp - 4], 0x9b
mov word [ebp - 0x214], bx
mov byte [ebp - 0x212], bl
mov dword [ebp - 0x210], 0x6b
mov dword [ebp - 0x20c], 0x24
lea ecx, [ebp - 0x214]
call fcn.0048b7cb
push eax
mov edx, edi
lea ecx, [ebp - 0x1524]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x9c
push esi
mov edx, eax
lea ecx, [ebp - 0x150c]
call fcn.004b1821
mov esi, eax
mov byte [ebp - 4], 0x9d
mov dword [esp], str.___remaining
lea ecx, [ebp - 0x3524]
call fcn.00499919
mov ecx, eax
call fcn.004998e7
push eax
mov edx, esi
lea ecx, [ebp - 0x14f4]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x9e
push eax
lea ecx, [ebp - 0x404]
call fcn.0041b490
mov byte [ebp - 4], 0x9d
push ebx
push 1
lea ecx, [ebp - 0x14f4]
call fcn.00411bc8
mov byte [ebp - 4], 0x9c
push ebx
push 1
lea ecx, [ebp - 0x150c]
call fcn.00411bc8
mov byte [ebp - 4], 0x9b
push ebx
push 1
lea ecx, [ebp - 0x1524]
call fcn.00411bc8
mov byte [ebp - 4], 0x9a
push ebx
push 1
lea ecx, [ebp - 0x153c]
call fcn.00411bc8
mov byte [ebp - 4], 0x90
lea ecx, [ebp - 0x1554]
push ebx
push 1
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0x276c]
call fcn.0048b78e
mov ecx, eax
call fcn.0048b75c
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
push str._val1_Battery__val1_
lea ecx, [ebp - 0x3ef8]
call fcn.00496d1e
mov ecx, eax
call fcn.00496cec
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
lea eax, [ebp - 0x404]
push eax
push ecx
lea ecx, [ebp - 0x22ac]
call fcn.0048b723
mov ecx, eax
call fcn.0048b6f1
mov edx, eax
lea ecx, [ebp - 0x1584]
call fcn.004b0946
mov esi, eax
mov byte [ebp - 4], 0x9f
lea ecx, [ebp - 0x2790]
call fcn.0048b6b4
mov ecx, eax
call fcn.0048b682
push eax
mov edx, esi
lea ecx, [ebp - 0x156c]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0xa0
push eax
lea ecx, [ebp - 0x50]
call fcn.004119e3
mov byte [ebp - 4], 0x9f
push ebx
push 1
lea ecx, [ebp - 0x156c]
call fcn.00411bc8
mov byte [ebp - 4], 0x90
push ebx
push 1
lea ecx, [ebp - 0x1584]
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0x2cf4]
call fcn.0048b63c
mov ecx, eax
call fcn.0048b60a
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
lea eax, [ebp - 0x29c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x62
push ebx
push 1
lea ecx, [ebp - 0x404]
call fcn.00411bc8
jmp 0x46ce9f
mov dword [ebp - 0x28], ebx
push ecx
lea ecx, [ebp - 0x4ee8]
call fcn.0048b513
mov ecx, eax
call fcn.0048b4e1
push eax
lea ecx, [ebp - 0x7a4]
call fcn.00411aae
mov byte [ebp - 4], 0xa1
lea edx, [ebp - 0x7a4]
lea ecx, [ebp - 0x159c]
call fcn.00461060
mov byte [ebp - 4], 0xa2
mov ecx, dword [ebp - 0x20]
mov esi, dword [ecx]
lea ecx, [ebp - 0x28]
push ecx
push ebx
push 0x30
mov ecx, eax
call fcn.004a61a8
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
push eax
push 0x73bbb8
push dword [ebp - 0x20]
call dword [esi + 0x50]
mov esi, eax
mov byte [ebp - 4], 0xa1
push ebx
push 1
lea ecx, [ebp - 0x159c]
call fcn.004ab703
mov byte [ebp - 4], 0x62
push ebx
push 1
lea ecx, [ebp - 0x7a4]
call fcn.00411bc8
test esi, esi
js 0x46c439
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov dword [ebp - 0x58], esi
mov ecx, dword [ebp - 0x28]
test ecx, ecx
je 0x46d883
mov eax, dword [ecx]
lea edx, [ebp - 0x24]
push edx
lea edx, [ebp - 0x1c]
push edx
push 1
push 0xffffffffffffffff
push ecx
call dword [eax + 0x10]
cmp dword [ebp - 0x24], 0
je 0x46d883
inc esi
mov dword [ebp - 0x58], esi
mov esi, 0x73b9d0
push esi
lea ecx, [ebp - 0x51c]
call fcn.00411aae
mov byte [ebp - 4], 0xa3
push esi
lea ecx, [ebp - 0x504]
call fcn.00411aae
mov byte [ebp - 4], 0xa4
mov dword [ebp - 0x39c], ebx
mov byte [ebp - 0x398], bl
mov dword [ebp - 0x394], 0x61
mov dword [ebp - 0x390], 0x4d
mov dword [ebp - 0x38c], 0x33
mov dword [ebp - 0x388], 0x1a
lea ecx, [ebp - 0x39c]
call fcn.0048b4af
push eax
lea ecx, [ebp - 0x7bc]
call fcn.00411aae
mov byte [ebp - 4], 0xa5
lea edx, [ebp - 0x7bc]
lea ecx, [ebp - 0x15b4]
call fcn.00461060
mov byte [ebp - 4], 0xa6
mov esi, dword [ebp - 0x1c]
mov edi, dword [esi]
push ebx
push ebx
lea ecx, [ebp - 0x1fc]
push ecx
push ebx
mov ecx, eax
call fcn.004a61a8
push eax
push esi
call dword [edi + 0x10]
neg eax
sbb al, al
inc al
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0xa5
push ebx
push 1
lea ecx, [ebp - 0x15b4]
call fcn.004ab703
mov byte [ebp - 4], 0xa4
push ebx
push 1
lea ecx, [ebp - 0x7bc]
call fcn.00411bc8
cmp byte [ebp - 0x30], 0
je 0x46d55b
push dword [ebp - 0x1f4]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
push eax
push dword [ebp - 0x1f4]
lea ecx, [ebp - 0x15fc]
call fcn.004a6421
mov byte [ebp - 4], 0xa7
mov edx, eax
lea ecx, [ebp - 0x15e4]
call fcn.0046237a
mov byte [ebp - 4], 0xa8
mov edx, eax
lea ecx, [ebp - 0x15cc]
call fcn.00461197
mov byte [ebp - 4], 0xa9
push eax
lea ecx, [ebp - 0x51c]
call fcn.0041b490
mov byte [ebp - 4], 0xa8
push ebx
push 1
lea ecx, [ebp - 0x15cc]
call fcn.00411bc8
mov byte [ebp - 4], 0xa7
push ebx
push 1
lea ecx, [ebp - 0x15e4]
call fcn.004ab703
mov byte [ebp - 4], 0xa4
push ebx
push 1
lea ecx, [ebp - 0x15fc]
call fcn.004ab703
push ecx
lea ecx, [ebp - 0x36ac]
call fcn.0048b455
mov ecx, eax
call fcn.0048b423
push eax
lea ecx, [ebp - 0x7d4]
call fcn.00411aae
mov byte [ebp - 4], 0xaa
lea edx, [ebp - 0x7d4]
lea ecx, [ebp - 0x1614]
call fcn.00461060
mov byte [ebp - 4], 0xab
mov esi, dword [ebp - 0x1c]
mov edi, dword [esi]
push ebx
push ebx
lea ecx, [ebp - 0x1fc]
push ecx
push ebx
mov ecx, eax
call fcn.004a61a8
push eax
push esi
call dword [edi + 0x10]
neg eax
sbb al, al
inc al
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0xaa
push ebx
push 1
lea ecx, [ebp - 0x1614]
call fcn.004ab703
mov byte [ebp - 4], 0xa4
push ebx
push 1
lea ecx, [ebp - 0x7d4]
call fcn.00411bc8
cmp byte [ebp - 0x30], 0
je 0x46d66b
push dword [ebp - 0x1f4]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
push eax
push dword [ebp - 0x1f4]
lea ecx, [ebp - 0x165c]
call fcn.004a6421
mov byte [ebp - 4], 0xac
mov edx, eax
lea ecx, [ebp - 0x1644]
call fcn.0046237a
mov byte [ebp - 4], 0xad
mov edx, eax
lea ecx, [ebp - 0x162c]
call fcn.00461197
mov byte [ebp - 4], 0xae
push eax
lea ecx, [ebp - 0x504]
call fcn.0041b490
mov byte [ebp - 4], 0xad
push ebx
push 1
lea ecx, [ebp - 0x162c]
call fcn.00411bc8
mov byte [ebp - 4], 0xac
push ebx
push 1
lea ecx, [ebp - 0x1644]
call fcn.004ab703
mov byte [ebp - 4], 0xa4
push ebx
push 1
lea ecx, [ebp - 0x165c]
call fcn.004ab703
push ecx
lea ecx, [ebp - 0x27b4]
call fcn.0048b3e6
mov ecx, eax
call fcn.0048b3b4
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
mov edx, dword [ebp - 0x58]
lea ecx, [ebp - 0x16a4]
call fcn.00413c6d
mov byte [ebp - 4], 0xaf
push eax
push ecx
lea ecx, [ebp - 0x3ce4]
call fcn.0048b32d
mov ecx, eax
call fcn.0048b2fb
mov edx, eax
lea ecx, [ebp - 0x168c]
call fcn.004b09c3
mov esi, eax
mov byte [ebp - 4], 0xb0
lea ecx, [ebp - 0x2d20]
call fcn.0048b2b8
mov ecx, eax
call fcn.0048b286
push eax
mov edx, esi
lea ecx, [ebp - 0x1674]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0xb1
push eax
lea ecx, [ebp - 0x50]
call fcn.004119e3
mov byte [ebp - 4], 0xb0
push ebx
push 1
lea ecx, [ebp - 0x1674]
call fcn.00411bc8
mov byte [ebp - 4], 0xaf
push ebx
push 1
lea ecx, [ebp - 0x168c]
call fcn.00411bc8
mov byte [ebp - 4], 0xa4
push ebx
push 1
lea ecx, [ebp - 0x16a4]
call fcn.00411bc8
lea eax, [ebp - 0x51c]
push eax
push str._val2_
lea ecx, [ebp - 0x22cc]
call fcn.00496795
mov ecx, eax
call fcn.00496763
mov edx, eax
lea ecx, [ebp - 0x1704]
call fcn.004b0946
pop ecx
mov esi, eax
mov byte [ebp - 4], 0xb2
mov word [ebp - 0x220], bx
mov byte [ebp - 0x21e], bl
mov dword [ebp - 0x21c], 0x26
mov dword [ebp - 0x218], 0x54
lea ecx, [ebp - 0x220]
call fcn.0048b254
push eax
mov edx, esi
lea ecx, [ebp - 0x16ec]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0xb3
lea ecx, [ebp - 0x504]
push ecx
mov edx, eax
lea ecx, [ebp - 0x16d4]
call fcn.0041ce76
mov esi, eax
mov byte [ebp - 4], 0xb4
lea ecx, [ebp - 0x2d4c]
call fcn.0048b211
mov ecx, eax
call fcn.0048b1df
push eax
mov edx, esi
lea ecx, [ebp - 0x16bc]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0xb5
push eax
lea ecx, [ebp - 0x50]
call fcn.004119e3
mov byte [ebp - 4], 0xb4
push ebx
push 1
lea ecx, [ebp - 0x16bc]
call fcn.00411bc8
mov byte [ebp - 4], 0xb3
push ebx
push 1
lea ecx, [ebp - 0x16d4]
call fcn.00411bc8
mov byte [ebp - 4], 0xb2
push ebx
push 1
lea ecx, [ebp - 0x16ec]
call fcn.00411bc8
mov byte [ebp - 4], 0xa4
push ebx
push 1
lea ecx, [ebp - 0x1704]
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0x2d78]
call fcn.0048b199
mov ecx, eax
call fcn.0048b167
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
lea eax, [ebp - 0x1fc]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xa3
push ebx
push 1
lea ecx, [ebp - 0x504]
call fcn.00411bc8
mov byte [ebp - 4], 0x62
push ebx
push 1
lea ecx, [ebp - 0x51c]
call fcn.00411bc8
mov esi, dword [ebp - 0x58]
jmp 0x46d3cf
mov dword [ebp - 0xa4], ebx
mov dword [ebp - 0xa0], ebx
mov dword [ebp - 0x9c], ebx
mov byte [ebp - 4], 0xb6
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x90], ebx
mov byte [ebp - 4], 0xb7
lea ecx, [ebp - 0x4b0]
call fcn.00468e6a
mov byte [ebp - 4], 0xb8
push eax
lea ecx, [ebp - 0xa4]
call fcn.004a4a46
mov byte [ebp - 4], 0xb7
lea ecx, [ebp - 0x4b0]
call fcn.004a9f73
lea ecx, [ebp - 0x4bc]
call fcn.00468c97
mov byte [ebp - 4], 0xb9
push eax
lea ecx, [ebp - 0x98]
call fcn.004a4a46
mov byte [ebp - 4], 0xb7
lea ecx, [ebp - 0x4bc]
call fcn.004a9f73
mov dword [ebp - 0x28], ebx
push ecx
lea ecx, [ebp - 0x4b80]
call fcn.0048b072
mov ecx, eax
call fcn.0048b040
push eax
lea ecx, [ebp - 0x7ec]
call fcn.00411aae
mov byte [ebp - 4], 0xba
lea edx, [ebp - 0x7ec]
lea ecx, [ebp - 0x171c]
call fcn.00461060
mov byte [ebp - 4], 0xbb
mov ecx, dword [ebp - 0x20]
mov esi, dword [ecx]
lea ecx, [ebp - 0x28]
push ecx
push ebx
push 0x30
mov ecx, eax
call fcn.004a61a8
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
push eax
push 0x73bbb8
push dword [ebp - 0x20]
call dword [esi + 0x50]
mov esi, eax
mov byte [ebp - 4], 0xba
push ebx
push 1
lea ecx, [ebp - 0x171c]
call fcn.004ab703
mov byte [ebp - 4], 0xb7
push ebx
push 1
lea ecx, [ebp - 0x7ec]
call fcn.00411bc8
test esi, esi
jns 0x46da43
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
push 0x73a9e8
mov edi, dword [ebp - 0x54]
mov ecx, edi
call fcn.00411aae
or dword [ebp - 0x18], 1
mov byte [ebp - 4], 0xb6
lea ecx, [ebp - 0x98]
call fcn.004a9f73
mov byte [ebp - 4], 0x62
lea ecx, [ebp - 0xa4]
call fcn.004a9f73
mov byte [ebp - 4], 0x61
push ebx
push 1
lea ecx, [ebp - 0x190]
call fcn.004ab703
mov byte [ebp - 4], 0x52
push ebx
push 1
lea ecx, [ebp - 0x1a8]
call fcn.004ab703
mov byte [ebp - 4], 7
push ebx
push 1
lea ecx, [ebp - 0x78]
call fcn.00411bc8
mov byte [ebp - 4], 4
push ebx
push 1
lea ecx, [ebp - 0xbc]
call fcn.00411bc8
mov byte [ebp - 4], 2
push ebx
push 1
lea ecx, [ebp - 0x50]
call fcn.00411bc8
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x8c]
call fcn.0041164a
jmp 0x46a072
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov dword [ebp - 0x58], esi
mov ecx, dword [ebp - 0x28]
test ecx, ecx
je 0x46e238
mov eax, dword [ebp - 0x94]
sub eax, dword [ebp - 0x98]
cdq
push 0x18
pop edi
idiv edi
cmp esi, eax
jae 0x46e238
mov eax, dword [ecx]
lea edx, [ebp - 0x24]
push edx
lea edx, [ebp - 0x1c]
push edx
push 1
push 0xffffffffffffffff
push ecx
call dword [eax + 0x10]
cmp dword [ebp - 0x24], 0
je 0x46e238
push 0x73b9d0
lea ecx, [ebp - 0x534]
call fcn.00411aae
mov byte [ebp - 4], 0xbc
mov dword [ebp - 0xf0], ebx
mov dword [ebp - 0xf4], ebx
mov dword [ebp - 0x3b4], ebx
mov byte [ebp - 0x3b0], bl
mov dword [ebp - 0x3ac], 0xa
mov dword [ebp - 0x3a8], 0xb
mov dword [ebp - 0x3a4], 0x19
mov dword [ebp - 0x3a0], 0x3a
lea ecx, [ebp - 0x3b4]
call fcn.0048b00e
push eax
lea ecx, [ebp - 0x804]
call fcn.00411aae
mov byte [ebp - 4], 0xbd
lea edx, [ebp - 0x804]
lea ecx, [ebp - 0x1734]
call fcn.00461060
mov byte [ebp - 4], 0xbe
mov esi, dword [ebp - 0x1c]
mov edi, dword [esi]
push ebx
push ebx
lea ecx, [ebp - 0x1bc]
push ecx
push ebx
mov ecx, eax
call fcn.004a61a8
push eax
push esi
call dword [edi + 0x10]
neg eax
sbb al, al
inc al
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0xbd
push ebx
push 1
lea ecx, [ebp - 0x1734]
call fcn.004ab703
mov byte [ebp - 4], 0xbc
push ebx
push 1
lea ecx, [ebp - 0x804]
call fcn.00411bc8
cmp byte [ebp - 0x30], 0
je 0x46dbeb
push dword [ebp - 0x1b4]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
push eax
push dword [ebp - 0x1b4]
lea ecx, [ebp - 0x177c]
call fcn.004a6421
mov byte [ebp - 4], 0xbf
mov edx, eax
lea ecx, [ebp - 0x1764]
call fcn.0046237a
mov byte [ebp - 4], 0xc0
mov edx, eax
lea ecx, [ebp - 0x174c]
call fcn.00461197
mov byte [ebp - 4], 0xc1
push eax
lea ecx, [ebp - 0x534]
call fcn.0041b490
mov byte [ebp - 4], 0xc0
push ebx
push 1
lea ecx, [ebp - 0x174c]
call fcn.00411bc8
mov byte [ebp - 4], 0xbf
push ebx
push 1
lea ecx, [ebp - 0x1764]
call fcn.004ab703
mov byte [ebp - 4], 0xbc
push ebx
push 1
lea ecx, [ebp - 0x177c]
call fcn.004ab703
push ecx
lea ecx, [ebp - 0x3214]
call fcn.0048afb8
mov ecx, eax
call fcn.0048af86
push eax
lea ecx, [ebp - 0x81c]
call fcn.00411aae
mov byte [ebp - 4], 0xc2
lea edx, [ebp - 0x81c]
lea ecx, [ebp - 0x1794]
call fcn.00461060
mov byte [ebp - 4], 0xc3
mov esi, dword [ebp - 0x1c]
mov edi, dword [esi]
push ebx
push ebx
lea ecx, [ebp - 0x1bc]
push ecx
push ebx
mov ecx, eax
call fcn.004a61a8
push eax
push esi
call dword [edi + 0x10]
neg eax
sbb al, al
inc al
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0xc2
push ebx
push 1
lea ecx, [ebp - 0x1794]
call fcn.004ab703
mov byte [ebp - 4], 0xbc
push ebx
push 1
lea ecx, [ebp - 0x81c]
call fcn.00411bc8
mov eax, ebx
cmp byte [ebp - 0x30], al
cmovne eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0xf0], eax
push ecx
lea ecx, [ebp - 0x3564]
call fcn.0048af2c
mov ecx, eax
call fcn.0048aefa
push eax
lea ecx, [ebp - 0x834]
call fcn.00411aae
mov byte [ebp - 4], 0xc4
lea edx, [ebp - 0x834]
lea ecx, [ebp - 0x17ac]
call fcn.00461060
mov byte [ebp - 4], 0xc5
mov esi, dword [ebp - 0x1c]
mov edi, dword [esi]
push ebx
push ebx
lea ecx, [ebp - 0x1bc]
push ecx
push ebx
mov ecx, eax
call fcn.004a61a8
push eax
push esi
call dword [edi + 0x10]
neg eax
sbb al, al
inc al
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0xc4
push ebx
push 1
lea ecx, [ebp - 0x17ac]
call fcn.004ab703
mov byte [ebp - 4], 0xbc
push ebx
push 1
lea ecx, [ebp - 0x834]
call fcn.00411bc8
mov edi, ebx
cmp byte [ebp - 0x30], 0
cmovne edi, dword [ebp - 0x1b4]
mov dword [ebp - 0xf4], edi
mov esi, dword [ebp - 0x58]
cmp dword [ebp - 0x5c], 0
jne 0x46dd41
test edi, edi
jne 0x46dd41
mov ecx, esi
call fcn.004742b2
mov eax, dword [0x7a01c4]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0xf0], eax
mov edi, dword [0x7a01c8]
mov dword [ebp - 0xf4], edi
mov eax, dword [ebp - 0xa0]
sub eax, dword [ebp - 0xa4]
cdq
push 0x18
pop ecx
idiv ecx
test eax, eax
je 0x46ddc5
imul edx, esi, 0x18
add edx, dword [ebp - 0xa4]
lea ecx, [ebp - 0x17f4]
call fcn.00461197
mov esi, eax
mov byte [ebp - 4], 0xc6
or dword [ebp - 0x18], 0x2000
mov word [ebp - 0x22c], bx
mov byte [ebp - 0x22a], bl
mov dword [ebp - 0x228], 0xe
mov dword [ebp - 0x224], 0x1e
lea ecx, [ebp - 0x22c]
call fcn.0048aec8
push eax
mov edx, esi
lea ecx, [ebp - 0x17dc]
call fcn.0041cdde
pop ecx
mov dword [ebp - 4], 0xc7
mov ecx, dword [ebp - 0x18]
or ecx, 0x4000
jmp 0x46dde5
push 0x73a418
lea ecx, [ebp - 0x17c4]
call fcn.00411aae
mov dword [ebp - 4], 0xc8
mov ecx, dword [ebp - 0x18]
or ecx, 0x8000
mov dword [ebp - 0x18], ecx
push eax
lea ecx, [ebp - 0x84c]
call fcn.00411a44
mov dword [ebp - 4], 0xca
mov eax, dword [ebp - 0x18]
test eax, 0x8000
je 0x46de1e
and eax, 0xffff7fff
mov dword [ebp - 0x18], eax
push ebx
push 1
lea ecx, [ebp - 0x17c4]
call fcn.00411bc8
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 0xcb
test eax, 0x4000
je 0x46de42
and eax, 0xffffbfff
mov dword [ebp - 0x18], eax
push ebx
push 1
lea ecx, [ebp - 0x17dc]
call fcn.00411bc8
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 0xcc
test eax, 0x2000
je 0x46de63
and eax, 0xffffdfff
mov dword [ebp - 0x18], eax
push ebx
push 1
lea ecx, [ebp - 0x17f4]
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0x291c]
call fcn.0049620e
mov ecx, eax
call fcn.004961dc
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
mov edx, dword [ebp - 0x58]
lea edx, [edx + 1]
lea ecx, [ebp - 0x183c]
call fcn.00413c6d
mov byte [ebp - 4], 0xcd
push eax
push ecx
lea ecx, [ebp - 0x3904]
call fcn.0048ae55
mov ecx, eax
call fcn.0048ae23
mov edx, eax
lea ecx, [ebp - 0x1824]
call fcn.004b09c3
mov esi, eax
mov byte [ebp - 4], 0xce
lea ecx, [ebp - 0x2da4]
call fcn.0048addd
mov ecx, eax
call fcn.0048adab
push eax
mov edx, esi
lea ecx, [ebp - 0x180c]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0xcf
push eax
lea ecx, [ebp - 0x50]
call fcn.004119e3
mov byte [ebp - 4], 0xce
push ebx
push 1
lea ecx, [ebp - 0x180c]
call fcn.00411bc8
mov byte [ebp - 4], 0xcd
push ebx
push 1
lea ecx, [ebp - 0x1824]
call fcn.00411bc8
mov byte [ebp - 4], 0xcc
push ebx
push 1
lea ecx, [ebp - 0x183c]
call fcn.00411bc8
imul edx, dword [ebp - 0x58], 0x18
add edx, dword [ebp - 0x98]
lea ecx, [ebp - 0x195c]
call fcn.00461197
mov dword [ebp - 0xd0], eax
mov byte [ebp - 4], 0xd0
mov edx, edi
lea ecx, [ebp - 0x1944]
call fcn.00413c6d
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0xd1
mov edx, dword [ebp - 0x5c]
lea ecx, [ebp - 0x192c]
call fcn.00413c6d
mov esi, eax
mov byte [ebp - 4], 0xd2
lea eax, [ebp - 0x84c]
push eax
push ecx
lea ecx, [ebp - 0x22ec]
call fcn.0048ad72
mov ecx, eax
call fcn.0048ad40
mov edx, eax
lea ecx, [ebp - 0x1914]
call fcn.004b0946
pop ecx
mov byte [ebp - 4], 0xd3
lea ecx, [ebp - 0x534]
push ecx
mov edx, eax
lea ecx, [ebp - 0x18fc]
call fcn.0041ce76
pop ecx
mov edi, eax
mov byte [ebp - 4], 0xd4
mov word [ebp - 0x238], bx
mov byte [ebp - 0x236], bl
mov dword [ebp - 0x234], 0x11
mov dword [ebp - 0x230], 0x29
lea ecx, [ebp - 0x238]
call fcn.0048ad0e
push eax
mov edx, edi
lea ecx, [ebp - 0x18e4]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0xd5
push esi
mov edx, eax
lea ecx, [ebp - 0x18cc]
call fcn.004b1821
pop ecx
mov edi, eax
mov byte [ebp - 4], 0xd6
xor eax, eax
mov word [ebp - 0x124], ax
mov dword [ebp - 0x120], 0x72
mov esi, ebx
mov dword [ebp - 0x174], esi
cmp esi, 1
jae 0x46e044
imul ecx, dword [ebp + esi*4 - 0x120], 0x3f
push 0x3f
pop eax
sub eax, ecx
cdq
push 0x7f
pop ecx
idiv ecx
lea eax, [ecx + edx]
cdq
idiv ecx
mov byte [ebp + esi - 0x124], dl
inc esi
jmp 0x46e016
mov byte [ebp - 0x123], bl
lea eax, [ebp - 0x124]
push eax
mov edx, edi
lea ecx, [ebp - 0x18b4]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0xd7
push dword [ebp - 0x30]
mov edx, eax
lea ecx, [ebp - 0x189c]
call fcn.004b1821
pop ecx
mov esi, eax
mov byte [ebp - 4], 0xd8
mov dword [ebp - 0x344], ebx
push 0x13
pop eax
mov dword [ebp - 0x340], eax
mov dword [ebp - 0x33c], 0xd
mov dword [ebp - 0x338], eax
lea ecx, [ebp - 0x344]
call fcn.0048acdc
push eax
mov edx, esi
lea ecx, [ebp - 0x1884]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0xd9
push dword [ebp - 0xd0]
mov edx, eax
lea ecx, [ebp - 0x186c]
call fcn.004b1821
mov esi, eax
mov byte [ebp - 4], 0xda
lea ecx, [ebp - 0x324c]
call fcn.0048ac81
mov ecx, eax
call fcn.0048ac4f
push eax
mov edx, esi
lea ecx, [ebp - 0x1854]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0xdb
push eax
lea ecx, [ebp - 0x50]
call fcn.004119e3
mov byte [ebp - 4], 0xda
push ebx
push 1
lea ecx, [ebp - 0x1854]
call fcn.00411bc8
mov byte [ebp - 4], 0xd9
push ebx
push 1
lea ecx, [ebp - 0x186c]
call fcn.00411bc8
mov byte [ebp - 4], 0xd8
push ebx
push 1
lea ecx, [ebp - 0x1884]
call fcn.00411bc8
mov byte [ebp - 4], 0xd7
push ebx
push 1
lea ecx, [ebp - 0x189c]
call fcn.00411bc8
mov byte [ebp - 4], 0xd6
push ebx
push 1
lea ecx, [ebp - 0x18b4]
call fcn.00411bc8
mov byte [ebp - 4], 0xd5
push ebx
push 1
lea ecx, [ebp - 0x18cc]
call fcn.00411bc8
mov byte [ebp - 4], 0xd4
push ebx
push 1
lea ecx, [ebp - 0x18e4]
call fcn.00411bc8
mov byte [ebp - 4], 0xd3
push ebx
push 1
lea ecx, [ebp - 0x18fc]
call fcn.00411bc8
mov byte [ebp - 4], 0xd2
push ebx
push 1
lea ecx, [ebp - 0x1914]
call fcn.00411bc8
mov byte [ebp - 4], 0xd1
push ebx
push 1
lea ecx, [ebp - 0x192c]
call fcn.00411bc8
mov byte [ebp - 4], 0xd0
push ebx
push 1
lea ecx, [ebp - 0x1944]
call fcn.00411bc8
mov byte [ebp - 4], 0xcc
push ebx
push 1
lea ecx, [ebp - 0x195c]
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0x2dd0]
call fcn.0048ac09
mov ecx, eax
call fcn.0048abd7
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
lea eax, [ebp - 0x1bc]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, dword [ebp - 0x58]
inc esi
mov dword [ebp - 0x58], esi
mov byte [ebp - 4], 0xbc
push ebx
push 1
lea ecx, [ebp - 0x84c]
call fcn.00411bc8
mov byte [ebp - 4], 0xb7
push ebx
push 1
lea ecx, [ebp - 0x534]
call fcn.00411bc8
jmp 0x46da4e
mov dword [ebp - 0x28], ebx
push ecx
lea ecx, [ebp - 0x4f98]
call fcn.0048aad8
mov ecx, eax
call fcn.0048aaa6
push eax
lea ecx, [ebp - 0x864]
call fcn.00411aae
mov byte [ebp - 4], 0xdc
lea edx, [ebp - 0x864]
lea ecx, [ebp - 0x1974]
call fcn.00461060
mov byte [ebp - 4], 0xdd
mov ecx, dword [ebp - 0x20]
mov esi, dword [ecx]
lea ecx, [ebp - 0x28]
push ecx
push ebx
push 0x30
mov ecx, eax
call fcn.004a61a8
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
push eax
push 0x73bbb8
push dword [ebp - 0x20]
call dword [esi + 0x50]
mov esi, eax
mov byte [ebp - 4], 0xdc
push ebx
push 1
lea ecx, [ebp - 0x1974]
call fcn.004ab703
mov byte [ebp - 4], 0xb7
push ebx
push 1
lea ecx, [ebp - 0x864]
call fcn.00411bc8
test esi, esi
js 0x46d992
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x24], ebx
mov ecx, dword [ebp - 0x28]
test ecx, ecx
je 0x46ee04
mov eax, dword [ecx]
lea edx, [ebp - 0x24]
push edx
lea edx, [ebp - 0x1c]
push edx
push 1
push 0xffffffffffffffff
push ecx
call dword [eax + 0x10]
cmp dword [ebp - 0x24], 0
je 0x46ee04
mov esi, 0x73b9d0
push esi
lea ecx, [ebp - 0x5ac]
call fcn.00411aae
mov byte [ebp - 4], 0xde
push esi
lea ecx, [ebp - 0x594]
call fcn.00411aae
mov byte [ebp - 4], 0xdf
push esi
lea ecx, [ebp - 0x57c]
call fcn.00411aae
mov byte [ebp - 4], 0xe0
push esi
lea ecx, [ebp - 0x564]
call fcn.00411aae
mov byte [ebp - 4], 0xe1
push esi
lea ecx, [ebp - 0x54c]
call fcn.00411aae
mov byte [ebp - 4], 0xe2
push esi
lea ecx, [ebp - 0x5c4]
call fcn.00411aae
mov byte [ebp - 4], 0xe3
push ecx
lea ecx, [ebp - 0x27fc]
call fcn.0048aa69
mov ecx, eax
call fcn.0048aa37
push eax
lea ecx, [ebp - 0x87c]
call fcn.00411aae
mov byte [ebp - 4], 0xe4
lea edx, [ebp - 0x87c]
lea ecx, [ebp - 0x198c]
call fcn.00461060
mov byte [ebp - 4], 0xe5
mov esi, dword [ebp - 0x1c]
mov edi, dword [esi]
push ebx
push ebx
lea ecx, [ebp - 0xcc]
push ecx
push ebx
mov ecx, eax
call fcn.004a61a8
push eax
push esi
call dword [edi + 0x10]
neg eax
sbb al, al
inc al
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0xe4
push ebx
push 1
lea ecx, [ebp - 0x198c]
call fcn.004ab703
mov byte [ebp - 4], 0xe3
push ebx
push 1
lea ecx, [ebp - 0x87c]
call fcn.00411bc8
cmp byte [ebp - 0x30], 0
je 0x46e469
push dword [ebp - 0xc4]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
push eax
push dword [ebp - 0xc4]
lea ecx, [ebp - 0x19d4]
call fcn.004a6421
mov byte [ebp - 4], 0xe6
mov edx, eax
lea ecx, [ebp - 0x19bc]
call fcn.0046237a
mov byte [ebp - 4], 0xe7
mov edx, eax
lea ecx, [ebp - 0x19a4]
call fcn.00461197
mov byte [ebp - 4], 0xe8
push eax
lea ecx, [ebp - 0x5ac]
call fcn.0041b490
mov byte [ebp - 4], 0xe7
push ebx
push 1
lea ecx, [ebp - 0x19a4]
call fcn.00411bc8
mov byte [ebp - 4], 0xe6
push ebx
push 1
lea ecx, [ebp - 0x19bc]
call fcn.004ab703
mov byte [ebp - 4], 0xe3
push ebx
push 1
lea ecx, [ebp - 0x19d4]
call fcn.004ab703
push ecx
lea ecx, [ebp - 0x31a4]
call fcn.0048a9eb
mov ecx, eax
call fcn.0048a9b9
push eax
lea ecx, [ebp - 0xa5c]
call fcn.00411aae
mov byte [ebp - 4], 0xe9
lea edx, [ebp - 0xa5c]
lea ecx, [ebp - 0x19ec]
call fcn.00461060
mov byte [ebp - 4], 0xea
mov esi, dword [ebp - 0x1c]
mov edi, dword [esi]
push ebx
push ebx
lea ecx, [ebp - 0xcc]
push ecx
push ebx
mov ecx, eax
call fcn.004a61a8
push eax
push esi
call dword [edi + 0x10]
neg eax
sbb al, al
inc al
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0xe9
push ebx
push 1
lea ecx, [ebp - 0x19ec]
call fcn.004ab703
mov byte [ebp - 4], 0xe3
push ebx
push 1
lea ecx, [ebp - 0xa5c]
call fcn.00411bc8
cmp byte [ebp - 0x30], 0
je 0x46e522
mov edx, dword [ebp - 0xc4]
lea ecx, [ebp - 0x1a04]
call fcn.0046285f
mov byte [ebp - 4], 0xeb
push eax
lea ecx, [ebp - 0x594]
call fcn.0041b490
mov byte [ebp - 4], 0xe3
push ebx
push 1
lea ecx, [ebp - 0x1a04]
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0x2820]
call fcn.0048a97c
mov ecx, eax
call fcn.0048a94a
push eax
lea ecx, [ebp - 0x8ac]
call fcn.00411aae
mov byte [ebp - 4], 0xec
lea edx, [ebp - 0x8ac]
lea ecx, [ebp - 0x1a1c]
call fcn.00461060
mov byte [ebp - 4], 0xed
mov esi, dword [ebp - 0x1c]
mov edi, dword [esi]
push ebx
push ebx
lea ecx, [ebp - 0xcc]
push ecx
push ebx
mov ecx, eax
call fcn.004a61a8
push eax
push esi
call dword [edi + 0x10]
neg eax
sbb al, al
inc al
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0xec
push ebx
push 1
lea ecx, [ebp - 0x1a1c]
call fcn.004ab703
mov byte [ebp - 4], 0xe3
push ebx
push 1
lea ecx, [ebp - 0x8ac]
call fcn.00411bc8
cmp byte [ebp - 0x30], 0
je 0x46e632
push dword [ebp - 0xc4]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
push eax
push dword [ebp - 0xc4]
lea ecx, [ebp - 0x1a64]
call fcn.004a6421
mov byte [ebp - 4], 0xee
mov edx, eax
lea ecx, [ebp - 0x1a4c]
call fcn.0046237a
mov byte [ebp - 4], 0xef
mov edx, eax
lea ecx, [ebp - 0x1a34]
call fcn.00461197
mov byte [ebp - 4], 0xf0
push eax
lea ecx, [ebp - 0x57c]
call fcn.0041b490
mov byte [ebp - 4], 0xef
push ebx
push 1
lea ecx, [ebp - 0x1a34]
call fcn.00411bc8
mov byte [ebp - 4], 0xee
push ebx
push 1
lea ecx, [ebp - 0x1a4c]
call fcn.004ab703
mov byte [ebp - 4], 0xe3
push ebx
push 1
lea ecx, [ebp - 0x1a64]
call fcn.004ab703
push ecx
lea ecx, [ebp - 0x3284]
call fcn.0048a8f4
mov ecx, eax
call fcn.0048a8c2
push eax
lea ecx, [ebp - 0x8c4]
call fcn.00411aae
mov byte [ebp - 4], 0xf1
lea edx, [ebp - 0x8c4]
lea ecx, [ebp - 0x1a7c]
call fcn.00461060
mov byte [ebp - 4], 0xf2
mov esi, dword [ebp - 0x1c]
mov edi, dword [esi]
push ebx
push ebx
lea ecx, [ebp - 0xcc]
push ecx
push ebx
mov ecx, eax
call fcn.004a61a8
push eax
push esi
call dword [edi + 0x10]
neg eax
sbb al, al
inc al
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0xf1
push ebx
push 1
lea ecx, [ebp - 0x1a7c]
call fcn.004ab703
mov byte [ebp - 4], 0xe3
push ebx
push 1
lea ecx, [ebp - 0x8c4]
call fcn.00411bc8
cmp byte [ebp - 0x30], 0
je 0x46e742
push dword [ebp - 0xc4]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
push eax
push dword [ebp - 0xc4]
lea ecx, [ebp - 0x1ac4]
call fcn.004a6421
mov byte [ebp - 4], 0xf3
mov edx, eax
lea ecx, [ebp - 0x1aac]
call fcn.0046237a
mov byte [ebp - 4], 0xf4
mov edx, eax
lea ecx, [ebp - 0x1a94]
call fcn.00461197
mov byte [ebp - 4], 0xf5
push eax
lea ecx, [ebp - 0x564]
call fcn.0041b490
mov byte [ebp - 4], 0xf4
push ebx
push 1
lea ecx, [ebp - 0x1a94]
call fcn.00411bc8
mov byte [ebp - 4], 0xf3
push ebx
push 1
lea ecx, [ebp - 0x1aac]
call fcn.004ab703
mov byte [ebp - 4], 0xe3
push ebx
push 1
lea ecx, [ebp - 0x1ac4]
call fcn.004ab703
push ecx
lea ecx, [ebp - 0x32bc]
call fcn.0048a874
mov ecx, eax
call fcn.0048a842
push eax
lea ecx, [ebp - 0x8dc]
call fcn.00411aae
mov byte [ebp - 4], 0xf6
lea edx, [ebp - 0x8dc]
lea ecx, [ebp - 0x1adc]
call fcn.00461060
mov byte [ebp - 4], 0xf7
mov esi, dword [ebp - 0x1c]
mov edi, dword [esi]
push ebx
push ebx
lea ecx, [ebp - 0xcc]
push ecx
push ebx
mov ecx, eax
call fcn.004a61a8
push eax
push esi
call dword [edi + 0x10]
neg eax
sbb al, al
inc al
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0xf6
push ebx
push 1
lea ecx, [ebp - 0x1adc]
call fcn.004ab703
mov byte [ebp - 4], 0xe3
push ebx
push 1
lea ecx, [ebp - 0x8dc]
call fcn.00411bc8
cmp byte [ebp - 0x30], 0
je 0x46e8b1
push dword [ebp - 0xc4]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
push eax
push dword [ebp - 0xc4]
lea ecx, [ebp - 0x1b24]
call fcn.004a6421
mov byte [ebp - 4], 0xf8
mov edx, eax
lea ecx, [ebp - 0x1b0c]
call fcn.0046237a
mov byte [ebp - 4], 0xf9
mov edx, eax
lea ecx, [ebp - 0x1af4]
call fcn.00461197
mov byte [ebp - 4], 0xfa
push eax
lea ecx, [ebp - 0x54c]
call fcn.0041b490
mov byte [ebp - 4], 0xf9
push ebx
push 1
lea ecx, [ebp - 0x1af4]
call fcn.00411bc8
mov byte [ebp - 4], 0xf8
push ebx
push 1
lea ecx, [ebp - 0x1b0c]
call fcn.004ab703
mov byte [ebp - 4], 0xe3
push ebx
push 1
lea ecx, [ebp - 0x1b24]
call fcn.004ab703
lea edx, [ebp - 0x54c]
lea ecx, [ebp - 0x1b54]
call fcn.00461060
mov byte [ebp - 4], 0xfb
push ecx
mov ecx, eax
call fcn.004a61a8
mov edx, eax
lea ecx, [ebp - 0x1b3c]
call fcn.0046913e
pop ecx
mov byte [ebp - 4], 0xfc
push eax
lea ecx, [ebp - 0x5c4]
call fcn.0041b490
mov byte [ebp - 4], 0xfb
push ebx
push 1
lea ecx, [ebp - 0x1b3c]
call fcn.00411bc8
mov byte [ebp - 4], 0xe3
push ebx
push 1
lea ecx, [ebp - 0x1b54]
call fcn.004ab703
push ecx
lea ecx, [ebp - 0x2844]
call fcn.0048a805
mov ecx, eax
call fcn.0048a7d3
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
push ecx
lea ecx, [ebp - 0x4870]
call fcn.0048a704
mov ecx, eax
call fcn.0048a6d2
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
lea eax, [ebp - 0x5ac]
push eax
push ecx
lea ecx, [ebp - 0x230c]
call fcn.0048a699
mov ecx, eax
call fcn.0048a667
mov edx, eax
lea ecx, [ebp - 0x1b84]
call fcn.004b0946
mov esi, eax
mov byte [ebp - 4], 0xfd
mov dword [esp], str.__val2_
lea ecx, [ebp - 0x2868]
call fcn.0049f24d
mov ecx, eax
call fcn.0049f21b
push eax
mov edx, esi
lea ecx, [ebp - 0x1b6c]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0xfe
push eax
lea ecx, [ebp - 0x50]
call fcn.004119e3
mov byte [ebp - 4], 0xfd
push ebx
push 1
lea ecx, [ebp - 0x1b6c]
call fcn.00411bc8
mov byte [ebp - 4], 0xe3
push ebx
push 1
lea ecx, [ebp - 0x1b84]
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0x2dfc]
call fcn.0048a621
mov ecx, eax
call fcn.0048a5ef
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
push ecx
lea ecx, [ebp - 0x288c]
call fcn.0048a5b2
mov ecx, eax
call fcn.0048a580
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
push str._val1_OS_language__val1_
lea ecx, [ebp - 0x4294]
call fcn.0048f3a9
mov ecx, eax
call fcn.0048f377
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
lea eax, [ebp - 0x594]
push eax
push ecx
lea ecx, [ebp - 0x232c]
call fcn.0048a547
mov ecx, eax
call fcn.0048a515
mov edx, eax
lea ecx, [ebp - 0x1bb4]
call fcn.004b0946
mov esi, eax
mov byte [ebp - 4], 0xff
lea ecx, [ebp - 0x28b0]
call fcn.0048a4d8
mov ecx, eax
call fcn.0048a4a6
push eax
mov edx, esi
lea ecx, [ebp - 0x1b9c]
call fcn.0041cdde
pop ecx
mov dword [ebp - 4], 0x100
push eax
lea ecx, [ebp - 0x50]
call fcn.004119e3
mov dword [ebp - 4], 0xff
push ebx
push 1
lea ecx, [ebp - 0x1b9c]
call fcn.00411bc8
mov byte [ebp - 4], 0xe3
push ebx
push 1
lea ecx, [ebp - 0x1bb4]
call fcn.00411bc8
mov edi, str.__block_
push edi
lea ecx, [ebp - 0x2e28]
call fcn.0049c458
mov ecx, eax
call fcn.0049c426
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
push ecx
lea ecx, [ebp - 0x28d4]
call fcn.0048a469
mov ecx, eax
call fcn.0048a437
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
push ecx
lea ecx, [ebp - 0x46b8]
call fcn.0048a36e
mov ecx, eax
call fcn.0048a33c
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
lea ecx, [ebp - 0x1bfc]
call fcn.00461435
mov dword [ebp - 4], 0x101
push eax
push ecx
lea ecx, [ebp - 0x234c]
call fcn.0048a303
mov ecx, eax
call fcn.0048a2d1
mov edx, eax
lea ecx, [ebp - 0x1be4]
call fcn.004b09c3
mov esi, eax
mov byte [ebp - 4], 2
mov dword [esp], str.__val2_
lea ecx, [ebp - 0x28f8]
call fcn.0048a24a
mov ecx, eax
call fcn.0048a218
push eax
mov edx, esi
lea ecx, [ebp - 0x1bcc]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x50]
call fcn.004119e3
mov byte [ebp - 4], 2
push ebx
push 1
lea ecx, [ebp - 0x1bcc]
call fcn.00411bc8
mov byte [ebp - 4], 1
push ebx
push 1
lea ecx, [ebp - 0x1be4]
call fcn.00411bc8
mov dword [ebp - 4], 0xe3
push ebx
push 1
lea ecx, [ebp - 0x1bfc]
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0x2e54]
call fcn.0048a1d2
mov ecx, eax
call fcn.0048a1a0
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
push ecx
lea ecx, [ebp - 0x2a60]
call fcn.0048a163
mov ecx, eax
call fcn.0048a131
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
push ecx
lea ecx, [ebp - 0x419c]
call fcn.0048a09e
mov ecx, eax
call fcn.0048a06c
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
lea eax, [ebp - 0x57c]
push eax
push ecx
lea ecx, [ebp - 0x236c]
call fcn.0048a036
mov ecx, eax
call fcn.0048a004
mov edx, eax
lea ecx, [ebp - 0x1c5c]
call fcn.004b0946
mov esi, eax
mov dword [ebp - 4], 0x104
lea ecx, [ebp - 0x30a0]
call fcn.00489fbb
mov ecx, eax
call fcn.00489f89
push eax
mov edx, esi
lea ecx, [ebp - 0x1c44]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x564]
push ecx
mov edx, eax
lea ecx, [ebp - 0x1c2c]
call fcn.0041ce76
mov esi, eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2e80]
call fcn.00489f43
mov ecx, eax
call fcn.00489f11
push eax
mov edx, esi
lea ecx, [ebp - 0x1c14]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x50]
call fcn.004119e3
mov byte [ebp - 4], 6
push ebx
push 1
lea ecx, [ebp - 0x1c14]
call fcn.00411bc8
mov byte [ebp - 4], 5
push ebx
push 1
lea ecx, [ebp - 0x1c2c]
call fcn.00411bc8
mov byte [ebp - 4], 4
push ebx
push 1
lea ecx, [ebp - 0x1c44]
call fcn.00411bc8
mov dword [ebp - 4], 0xe3
push ebx
push 1
lea ecx, [ebp - 0x1c5c]
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0x2eac]
call fcn.00489ecb
mov ecx, eax
call fcn.00489e99
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
push ecx
lea ecx, [ebp - 0x2940]
call fcn.00489e5c
mov ecx, eax
call fcn.00489e2a
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
push ecx
lea ecx, [ebp - 0x4748]
call fcn.00489d69
mov ecx, eax
call fcn.00489d37
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
lea eax, [ebp - 0x5c4]
push eax
push ecx
lea ecx, [ebp - 0x238c]
call fcn.00489cfe
mov ecx, eax
call fcn.00489ccc
mov edx, eax
lea ecx, [ebp - 0x1c8c]
call fcn.004b0946
mov esi, eax
mov dword [ebp - 4], 0x108
lea ecx, [ebp - 0x2964]
call fcn.00489c8f
mov ecx, eax
call fcn.00489c5d
push eax
mov edx, esi
lea ecx, [ebp - 0x1c74]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x50]
call fcn.004119e3
mov byte [ebp - 4], 8
push ebx
push 1
lea ecx, [ebp - 0x1c74]
call fcn.00411bc8
mov dword [ebp - 4], 0xe3
push ebx
push 1
lea ecx, [ebp - 0x1c8c]
call fcn.00411bc8
push edi
lea ecx, [ebp - 0x2ed8]
call fcn.00494ee4
mov ecx, eax
call fcn.00494eb2
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
lea eax, [ebp - 0xcc]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xe2
push ebx
push 1
lea ecx, [ebp - 0x5c4]
call fcn.00411bc8
mov byte [ebp - 4], 0xe1
push ebx
push 1
lea ecx, [ebp - 0x54c]
call fcn.00411bc8
mov byte [ebp - 4], 0xe0
push ebx
push 1
lea ecx, [ebp - 0x564]
call fcn.00411bc8
mov byte [ebp - 4], 0xdf
push ebx
push 1
lea ecx, [ebp - 0x57c]
call fcn.00411bc8
mov byte [ebp - 4], 0xde
push ebx
push 1
lea ecx, [ebp - 0x594]
call fcn.00411bc8
mov byte [ebp - 4], 0xb7
push ebx
push 1
lea ecx, [ebp - 0x5ac]
call fcn.00411bc8
jmp 0x46e2cd
xorps xmm0, xmm0
movlpd qword [ebp - 0xdc], xmm0
mov dword [ebp - 0x28], ebx
push ecx
lea ecx, [ebp - 0x4c2c]
call fcn.00489b5c
mov ecx, eax
call fcn.00489b2a
push eax
lea ecx, [ebp - 0x8f4]
call fcn.00411aae
mov dword [ebp - 4], 0x10a
lea edx, [ebp - 0x8f4]
lea ecx, [ebp - 0x1ca4]
call fcn.00461060
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x20]
mov esi, dword [ecx]
lea ecx, [ebp - 0x28]
push ecx
push ebx
push 0x30
mov ecx, eax
call fcn.004a61a8
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
push eax
push 0x73bbb8
push dword [ebp - 0x20]
call dword [esi + 0x50]
mov esi, eax
mov byte [ebp - 4], 0xa
push ebx
push 1
lea ecx, [ebp - 0x1ca4]
call fcn.004ab703
mov dword [ebp - 4], 0xb7
push ebx
push 1
lea ecx, [ebp - 0x8f4]
call fcn.00411bc8
test esi, esi
js 0x46d992
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x24], ebx
mov eax, ebx
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 0x28]
test ecx, ecx
je 0x46f2d4
mov eax, dword [ecx]
lea edx, [ebp - 0x24]
push edx
lea edx, [ebp - 0x1c]
push edx
push 1
push 0xffffffffffffffff
push ecx
call dword [eax + 0x10]
cmp dword [ebp - 0x24], 0
je 0x46f2d4
xorps xmm0, xmm0
movlpd qword [ebp - 0xd4], xmm0
push 0x73b9d0
lea ecx, [ebp - 0x60c]
call fcn.00411aae
mov dword [ebp - 4], 0x10c
push ecx
lea ecx, [ebp - 0x2f04]
call fcn.00489ae9
mov ecx, eax
call fcn.00489ab7
push eax
lea ecx, [ebp - 0x90c]
call fcn.00411aae
mov byte [ebp - 4], 0xd
lea edx, [ebp - 0x90c]
lea ecx, [ebp - 0x1cbc]
call fcn.00461060
mov byte [ebp - 4], 0xe
mov esi, dword [ebp - 0x1c]
mov edi, dword [esi]
push ebx
push ebx
lea ecx, [ebp - 0x2d4]
push ecx
push ebx
mov ecx, eax
call fcn.004a61a8
push eax
push esi
call dword [edi + 0x10]
neg eax
sbb al, al
inc al
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0xd
push ebx
push 1
lea ecx, [ebp - 0x1cbc]
call fcn.004ab703
mov byte [ebp - 4], 0xc
push ebx
push 1
lea ecx, [ebp - 0x90c]
call fcn.00411bc8
cmp byte [ebp - 0x30], 0
je 0x46efcd
push dword [ebp - 0x2cc]
lea ecx, [ebp - 0x924]
call fcn.004a63fc
mov byte [ebp - 4], 0xf
push ecx
lea ecx, [ebp - 0x924]
call fcn.00422bf6
pop ecx
mov esi, eax
mov dword [ebp - 0x60], esi
mov edi, edx
mov dword [ebp - 0x7c], edi
mov byte [ebp - 4], 0xc
push ebx
push 1
lea ecx, [ebp - 0x924]
call fcn.004ab703
add dword [ebp - 0xdc], esi
adc dword [ebp - 0xd8], edi
jmp 0x46efdf
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x60], eax
push str.Speed
lea ecx, [ebp - 0x20b4]
call fcn.0049ef66
mov ecx, eax
call fcn.0049ef34
push eax
lea ecx, [ebp - 0x93c]
call fcn.00411aae
mov byte [ebp - 4], 0x10
lea edx, [ebp - 0x93c]
lea ecx, [ebp - 0x1cd4]
call fcn.00461060
mov byte [ebp - 4], 0x11
mov esi, dword [ebp - 0x1c]
mov edi, dword [esi]
push ebx
push ebx
lea ecx, [ebp - 0x2d4]
push ecx
push ebx
mov ecx, eax
call fcn.004a61a8
push eax
push esi
call dword [edi + 0x10]
neg eax
sbb al, al
inc al
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0x10
push ebx
push 1
lea ecx, [ebp - 0x1cd4]
call fcn.004ab703
mov byte [ebp - 4], 0xc
push ebx
push 1
lea ecx, [ebp - 0x93c]
call fcn.00411bc8
cmp byte [ebp - 0x30], 0
je 0x46f09c
mov edx, dword [ebp - 0x2cc]
lea ecx, [ebp - 0x1cec]
call fcn.00413c6d
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x60c]
call fcn.0041b490
mov byte [ebp - 4], 0xc
push ebx
push 1
lea ecx, [ebp - 0x1cec]
call fcn.00411bc8
push str._block_
lea ecx, [ebp - 0x2988]
call fcn.0049eead
mov ecx, eax
call fcn.0049ee7b
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
mov edi, dword [ebp - 0x5c]
inc edi
mov dword [ebp - 0x5c], edi
mov edx, edi
lea ecx, [ebp - 0x1d34]
call fcn.00413c6d
mov byte [ebp - 4], 0x13
push eax
push ecx
lea ecx, [ebp - 0x39ac]
call fcn.00489a41
mov ecx, eax
call fcn.00489a0f
mov edx, eax
lea ecx, [ebp - 0x1d1c]
call fcn.004b09c3
mov esi, eax
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x2f30]
call fcn.004899c9
mov ecx, eax
call fcn.00489997
push eax
mov edx, esi
lea ecx, [ebp - 0x1d04]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x15
push eax
lea ecx, [ebp - 0x50]
call fcn.004119e3
mov byte [ebp - 4], 0x14
push ebx
push 1
lea ecx, [ebp - 0x1d04]
call fcn.00411bc8
mov byte [ebp - 4], 0x13
push ebx
push 1
lea ecx, [ebp - 0x1d1c]
call fcn.00411bc8
mov byte [ebp - 4], 0xc
push ebx
push 1
lea ecx, [ebp - 0x1d34]
call fcn.00411bc8
push dword [ebp - 0x7c]
push dword [ebp - 0x60]
lea ecx, [ebp - 0x1dac]
call fcn.004618fb
pop ecx
pop ecx
mov byte [ebp - 4], 0x16
push eax
push str._val2_
lea ecx, [ebp - 0x23ac]
call fcn.00494aa3
mov ecx, eax
call fcn.00494a71
mov edx, eax
lea ecx, [ebp - 0x1d94]
call fcn.004b09c3
pop ecx
mov esi, eax
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x354], ebx
push 0x79
pop eax
mov dword [ebp - 0x350], eax
mov dword [ebp - 0x34c], 0x55
mov dword [ebp - 0x348], eax
lea ecx, [ebp - 0x354]
call fcn.00489965
push eax
mov edx, esi
lea ecx, [ebp - 0x1d7c]
call fcn.0041cdde
pop ecx
push 0x18
pop ecx
mov byte [ebp - 4], cl
lea ecx, [ebp - 0x60c]
push ecx
mov edx, eax
lea ecx, [ebp - 0x1d64]
call fcn.0041ce76
mov esi, eax
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x32f4]
call fcn.0048990a
mov ecx, eax
call fcn.004898d8
push eax
mov edx, esi
lea ecx, [ebp - 0x1d4c]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x1a
push eax
lea ecx, [ebp - 0x50]
call fcn.004119e3
mov byte [ebp - 4], 0x19
push ebx
push 1
lea ecx, [ebp - 0x1d4c]
call fcn.00411bc8
push 0x18
pop eax
mov byte [ebp - 4], al
push ebx
push 1
lea ecx, [ebp - 0x1d64]
call fcn.00411bc8
mov byte [ebp - 4], 0x17
push ebx
push 1
lea ecx, [ebp - 0x1d7c]
call fcn.00411bc8
mov byte [ebp - 4], 0x16
push ebx
push 1
lea ecx, [ebp - 0x1d94]
call fcn.00411bc8
mov byte [ebp - 4], 0xc
push ebx
push 1
lea ecx, [ebp - 0x1dac]
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0x2f5c]
call fcn.00489892
mov ecx, eax
call fcn.00489860
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
lea eax, [ebp - 0x2d4]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x58], edi
mov dword [ebp - 4], 0xb7
push ebx
push 1
lea ecx, [ebp - 0x60c]
call fcn.00411bc8
jmp 0x46eeb2
mov dword [ebp - 0x28], ebx
push ecx
lea ecx, [ebp - 0x4cd8]
call fcn.0048975f
mov ecx, eax
call fcn.0048972d
push eax
lea ecx, [ebp - 0x954]
call fcn.00411aae
mov dword [ebp - 4], 0x11b
lea edx, [ebp - 0x954]
lea ecx, [ebp - 0x1dc4]
call fcn.00461060
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x20]
mov esi, dword [ecx]
lea ecx, [ebp - 0x28]
push ecx
push ebx
push 0x30
mov ecx, eax
call fcn.004a61a8
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
push eax
push 0x73bbb8
push dword [ebp - 0x20]
call dword [esi + 0x50]
mov esi, eax
mov byte [ebp - 4], 0x1b
push ebx
push 1
lea ecx, [ebp - 0x1dc4]
call fcn.004ab703
mov dword [ebp - 4], 0xb7
push ebx
push 1
lea ecx, [ebp - 0x954]
call fcn.00411bc8
test esi, esi
js 0x46d992
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x24], ebx
mov ecx, dword [ebp - 0x28]
test ecx, ecx
je 0x46f65f
mov eax, dword [ecx]
lea edx, [ebp - 0x24]
push edx
lea edx, [ebp - 0x1c]
push edx
push 1
push 0xffffffffffffffff
push ecx
call dword [eax + 0x10]
cmp dword [ebp - 0x24], 0
je 0x46f65f
push 0x73b9d0
lea ecx, [ebp - 0x99c]
call fcn.00411aae
mov dword [ebp - 4], 0x11d
push ecx
lea ecx, [ebp - 0x35a4]
call fcn.004896d9
mov ecx, eax
call fcn.004896a7
push eax
lea ecx, [ebp - 0x96c]
call fcn.00411aae
mov byte [ebp - 4], 0x1e
lea edx, [ebp - 0x96c]
lea ecx, [ebp - 0x1ddc]
call fcn.00461060
mov byte [ebp - 4], 0x1f
mov esi, dword [ebp - 0x1c]
mov edi, dword [esi]
push ebx
push ebx
lea ecx, [ebp - 0x2e4]
push ecx
push ebx
mov ecx, eax
call fcn.004a61a8
push eax
push esi
call dword [edi + 0x10]
neg eax
sbb al, al
inc al
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0x1e
push ebx
push 1
lea ecx, [ebp - 0x1ddc]
call fcn.004ab703
mov byte [ebp - 4], 0x1d
push ebx
push 1
lea ecx, [ebp - 0x96c]
call fcn.00411bc8
cmp byte [ebp - 0x30], 0
je 0x46f4bd
push dword [ebp - 0x2dc]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
push eax
push dword [ebp - 0x2dc]
lea ecx, [ebp - 0x1e24]
call fcn.004a6421
mov byte [ebp - 4], 0x20
mov edx, eax
lea ecx, [ebp - 0x1e0c]
call fcn.0046237a
mov byte [ebp - 4], 0x21
mov edx, eax
lea ecx, [ebp - 0x1df4]
call fcn.00461197
mov byte [ebp - 4], 0x22
push eax
lea ecx, [ebp - 0x99c]
call fcn.0041b490
mov byte [ebp - 4], 0x21
push ebx
push 1
lea ecx, [ebp - 0x1df4]
call fcn.00411bc8
mov byte [ebp - 4], 0x20
push ebx
push 1
lea ecx, [ebp - 0x1e0c]
call fcn.004ab703
mov byte [ebp - 4], 0x1d
push ebx
push 1
lea ecx, [ebp - 0x1e24]
call fcn.004ab703
push ecx
lea ecx, [ebp - 0x20d0]
call fcn.0048967c
mov ecx, eax
call fcn.0048964a
push eax
lea ecx, [ebp - 0x984]
call fcn.00411aae
mov byte [ebp - 4], 0x23
lea edx, [ebp - 0x984]
lea ecx, [ebp - 0x1e3c]
call fcn.00461060
mov byte [ebp - 4], 0x24
mov esi, dword [ebp - 0x1c]
mov edi, dword [esi]
push ebx
push ebx
lea ecx, [ebp - 0x2e4]
push ecx
push ebx
mov ecx, eax
call fcn.004a61a8
push eax
push esi
call dword [edi + 0x10]
mov byte [ebp - 4], 0x23
push ebx
push 1
lea ecx, [ebp - 0x1e3c]
call fcn.004ab703
mov byte [ebp - 4], 0x1d
push ebx
push 1
lea ecx, [ebp - 0x984]
call fcn.00411bc8
push str._block_
lea ecx, [ebp - 0x29ac]
call fcn.0049bf3d
mov ecx, eax
call fcn.0049bf0b
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
push ecx
lea ecx, [ebp - 0x449c]
call fcn.004895a3
mov ecx, eax
call fcn.00489571
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
push dword [ebp - 0xd8]
push dword [ebp - 0xdc]
lea ecx, [ebp - 0x1e84]
call fcn.004618fb
pop ecx
pop ecx
mov byte [ebp - 4], 0x25
push eax
push ecx
lea ecx, [ebp - 0x23cc]
call fcn.00489538
mov ecx, eax
call fcn.00489506
mov edx, eax
lea ecx, [ebp - 0x1e6c]
call fcn.004b09c3
mov esi, eax
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x29d0]
call fcn.004894c9
mov ecx, eax
call fcn.00489497
push eax
mov edx, esi
lea ecx, [ebp - 0x1e54]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x27
push eax
lea ecx, [ebp - 0x50]
call fcn.004119e3
mov byte [ebp - 4], 0x26
push ebx
push 1
lea ecx, [ebp - 0x1e54]
call fcn.00411bc8
mov byte [ebp - 4], 0x25
push ebx
push 1
lea ecx, [ebp - 0x1e6c]
call fcn.00411bc8
mov byte [ebp - 4], 0x1d
push ebx
push 1
lea ecx, [ebp - 0x1e84]
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0x2f88]
call fcn.00489451
mov ecx, eax
call fcn.0048941f
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
lea eax, [ebp - 0x2e4]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0xb7
push ebx
push 1
lea ecx, [ebp - 0x99c]
call fcn.00411bc8
mov dword [ebp - 0x28], ebx
push ecx
lea ecx, [ebp - 0x4310]
call fcn.0048937a
mov ecx, eax
call fcn.00489348
push eax
lea ecx, [ebp - 0x9b4]
call fcn.00411aae
mov dword [ebp - 4], 0x128
lea edx, [ebp - 0x9b4]
lea ecx, [ebp - 0x1e9c]
call fcn.00461060
mov byte [ebp - 4], 0x29
mov ecx, dword [ebp - 0x20]
mov esi, dword [ecx]
lea ecx, [ebp - 0x28]
push ecx
push ebx
push 0x30
mov ecx, eax
call fcn.004a61a8
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
push eax
push 0x73bbb8
push dword [ebp - 0x20]
call dword [esi + 0x50]
mov esi, eax
mov byte [ebp - 4], 0x28
push ebx
push 1
lea ecx, [ebp - 0x1e9c]
call fcn.004ab703
mov dword [ebp - 4], 0xb7
push ebx
push 1
lea ecx, [ebp - 0x9b4]
call fcn.00411bc8
test esi, esi
jns 0x46f7a7
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
push 0x73a9e8
mov esi, dword [ebp - 0x54]
mov ecx, esi
call fcn.00411aae
or dword [ebp - 0x18], 1
mov byte [ebp - 4], 0xb6
lea ecx, [ebp - 0x98]
call fcn.004a9f73
mov byte [ebp - 4], 0x62
lea ecx, [ebp - 0xa4]
call fcn.004a9f73
mov byte [ebp - 4], 0x61
push ebx
push 1
lea ecx, [ebp - 0x190]
call fcn.004ab703
mov byte [ebp - 4], 0x52
push ebx
push 1
lea ecx, [ebp - 0x1a8]
call fcn.004ab703
mov byte [ebp - 4], 7
push ebx
push 1
lea ecx, [ebp - 0x78]
call fcn.00411bc8
mov byte [ebp - 4], 4
push ebx
push 1
lea ecx, [ebp - 0xbc]
call fcn.00411bc8
mov byte [ebp - 4], 2
push ebx
push 1
lea ecx, [ebp - 0x50]
call fcn.00411bc8
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x8c]
call fcn.0041164a
mov eax, esi
jmp 0x46a074
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x24], ebx
mov ecx, dword [ebp - 0x28]
test ecx, ecx
je 0x46fbb5
mov eax, dword [ecx]
lea edx, [ebp - 0x24]
push edx
lea edx, [ebp - 0x1c]
push edx
push 1
push 0xffffffffffffffff
push ecx
call dword [eax + 0x10]
cmp dword [ebp - 0x24], 0
je 0x46fbb5
mov esi, 0x73b9d0
push esi
lea ecx, [ebp - 0x5f4]
call fcn.00411aae
mov dword [ebp - 4], 0x12a
push esi
lea ecx, [ebp - 0x5dc]
call fcn.00411aae
mov byte [ebp - 4], 0x2b
push str.Manufacturer
lea ecx, [ebp - 0x35e4]
call fcn.0048ee5c
mov ecx, eax
call fcn.0048ee2a
push eax
lea ecx, [ebp - 0x9cc]
call fcn.00411aae
mov byte [ebp - 4], 0x2c
lea edx, [ebp - 0x9cc]
lea ecx, [ebp - 0x1eb4]
call fcn.00461060
mov byte [ebp - 4], 0x2d
mov esi, dword [ebp - 0x1c]
mov edi, dword [esi]
push ebx
push ebx
lea ecx, [ebp - 0x1dc]
push ecx
push ebx
mov ecx, eax
call fcn.004a61a8
push eax
push esi
call dword [edi + 0x10]
neg eax
sbb al, al
inc al
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0x2c
push ebx
push 1
lea ecx, [ebp - 0x1eb4]
call fcn.004ab703
mov byte [ebp - 4], 0x2b
push ebx
push 1
lea ecx, [ebp - 0x9cc]
call fcn.00411bc8
cmp byte [ebp - 0x30], 0
je 0x46f910
push dword [ebp - 0x1d4]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
push eax
push dword [ebp - 0x1d4]
lea ecx, [ebp - 0x1efc]
call fcn.004a6421
mov byte [ebp - 4], 0x2e
mov edx, eax
lea ecx, [ebp - 0x1ee4]
call fcn.0046237a
mov byte [ebp - 4], 0x2f
mov edx, eax
lea ecx, [ebp - 0x1ecc]
call fcn.00461197
mov byte [ebp - 4], 0x30
push eax
lea ecx, [ebp - 0x5f4]
call fcn.0041b490
mov byte [ebp - 4], 0x2f
push ebx
push 1
lea ecx, [ebp - 0x1ecc]
call fcn.00411bc8
mov byte [ebp - 4], 0x2e
push ebx
push 1
lea ecx, [ebp - 0x1ee4]
call fcn.004ab703
mov byte [ebp - 4], 0x2b
push ebx
push 1
lea ecx, [ebp - 0x1efc]
call fcn.004ab703
push ecx
lea ecx, [ebp - 0x29f4]
call fcn.0048930b
mov ecx, eax
call fcn.004892d9
push eax
lea ecx, [ebp - 0x9e4]
call fcn.00411aae
mov byte [ebp - 4], 0x31
lea edx, [ebp - 0x9e4]
lea ecx, [ebp - 0x1f14]
call fcn.00461060
mov byte [ebp - 4], 0x32
mov esi, dword [ebp - 0x1c]
mov edi, dword [esi]
push ebx
push ebx
lea ecx, [ebp - 0x1dc]
push ecx
push ebx
mov ecx, eax
call fcn.004a61a8
push eax
push esi
call dword [edi + 0x10]
neg eax
sbb al, al
inc al
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0x31
push ebx
push 1
lea ecx, [ebp - 0x1f14]
call fcn.004ab703
mov byte [ebp - 4], 0x2b
push ebx
push 1
lea ecx, [ebp - 0x9e4]
call fcn.00411bc8
cmp byte [ebp - 0x30], 0
je 0x46fa20
push dword [ebp - 0x1d4]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
push eax
push dword [ebp - 0x1d4]
lea ecx, [ebp - 0x1f5c]
call fcn.004a6421
mov byte [ebp - 4], 0x33
mov edx, eax
lea ecx, [ebp - 0x1f44]
call fcn.0046237a
mov byte [ebp - 4], 0x34
mov edx, eax
lea ecx, [ebp - 0x1f2c]
call fcn.00461197
mov byte [ebp - 4], 0x35
push eax
lea ecx, [ebp - 0x5dc]
call fcn.0041b490
mov byte [ebp - 4], 0x34
push ebx
push 1
lea ecx, [ebp - 0x1f2c]
call fcn.00411bc8
mov byte [ebp - 4], 0x33
push ebx
push 1
lea ecx, [ebp - 0x1f44]
call fcn.004ab703
mov byte [ebp - 4], 0x2b
push ebx
push 1
lea ecx, [ebp - 0x1f5c]
call fcn.004ab703
push ecx
lea ecx, [ebp - 0x2a18]
call fcn.0048929c
mov ecx, eax
call fcn.0048926a
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
push ecx
lea ecx, [ebp - 0x3a5c]
call fcn.004891f7
mov ecx, eax
call fcn.004891c5
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
lea eax, [ebp - 0x5f4]
push eax
push ecx
lea ecx, [ebp - 0x23ec]
call fcn.0048918c
mov ecx, eax
call fcn.0048915f
mov edx, eax
lea ecx, [ebp - 0x1fbc]
call fcn.004b0946
pop ecx
mov esi, eax
mov byte [ebp - 4], 0x36
mov word [ebp - 0x244], bx
mov byte [ebp - 0x242], bl
mov dword [ebp - 0x240], 0x52
mov dword [ebp - 0x23c], 0x3a
lea ecx, [ebp - 0x244]
call fcn.0048912d
push eax
mov edx, esi
lea ecx, [ebp - 0x1fa4]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x5dc]
push ecx
mov edx, eax
lea ecx, [ebp - 0x1f8c]
call fcn.0041ce76
mov esi, eax
mov byte [ebp - 4], 0x38
mov dword [esp], str.__val2_
lea ecx, [ebp - 0x2a3c]
call fcn.004926ba
mov ecx, eax
call fcn.00492688
push eax
mov edx, esi
lea ecx, [ebp - 0x1f74]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x39
push eax
lea ecx, [ebp - 0x50]
call fcn.004119e3
mov byte [ebp - 4], 0x38
push ebx
push 1
lea ecx, [ebp - 0x1f74]
call fcn.00411bc8
mov byte [ebp - 4], 0x37
push ebx
push 1
lea ecx, [ebp - 0x1f8c]
call fcn.00411bc8
mov byte [ebp - 4], 0x36
push ebx
push 1
lea ecx, [ebp - 0x1fa4]
call fcn.00411bc8
mov byte [ebp - 4], 0x2b
push ebx
push 1
lea ecx, [ebp - 0x1fbc]
call fcn.00411bc8
push ecx
lea ecx, [ebp - 0x2fb4]
call fcn.004890e7
mov ecx, eax
call fcn.004890b5
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
lea eax, [ebp - 0x1dc]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x2a
push ebx
push 1
lea ecx, [ebp - 0x5dc]
call fcn.00411bc8
mov dword [ebp - 4], 0xb7
push ebx
push 1
lea ecx, [ebp - 0x5f4]
call fcn.00411bc8
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
push ecx
lea ecx, [ebp - 0x240c]
call fcn.0048907c
mov ecx, eax
call fcn.0048904a
push eax
lea ecx, [ebp - 0x50]
call fcn.004119c4
push ecx
push ecx
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x3b04]
call fcn.004a844d
mov dword [ebp - 4], 0x13a
mov edx, eax
lea ecx, [ebp - 0x9fc]
call fcn.00444af6
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x3b04]
call fcn.004525e5
mov byte [0x7a00f2], bl
lea eax, [ebp - 0x9fc]
push eax
mov esi, dword [ebp - 0x54]
mov ecx, esi
call fcn.00411a44
or dword [ebp - 0x18], 1
mov dword [ebp - 4], 0xb7
push ebx
push 1
lea ecx, [ebp - 0x9fc]
call fcn.00411bc8
jmp 0x46f71f