Function at 0x40c430
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x439ba6
mov eax, dword fs:[0]
push eax
sub esp, 0xdb8
mov eax, dword [0x448ad0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x108], 0
cmp dword [ebp + 0x1c], 0
jne 0x40c472
mov eax, 0x80020008
jmp 0x41a90c
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 0xc
jbe 0x40c485
mov eax, 0x8002000e
jmp 0x41a90c
cmp dword [ebp + 0x20], 0
je 0x40c495
mov ecx, dword [ebp + 0x20]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 0xc], 0
jbe 0x40c4bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 0xc], 1
jne 0x40c4b2
mov ecx, dword [ebp + 0x1c]
mov edx, dword [ecx + 4]
cmp dword [edx], 0xfffffffd
je 0x40c4bc
mov eax, 0x80020007
jmp 0x41a90c
push 0x41ab50
push 0x41ab30
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fcb0
mov dword [ebp - 4], 0
mov dword [ebp - 0x14], 0
jmp 0x40c4ef
mov ecx, dword [ebp - 0x14]
add ecx, 1
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp + 0x1c]
mov eax, dword [ebp - 0x14]
cmp eax, dword [edx + 8]
jae 0x40c511
mov ecx, dword [ebp - 0x14]
shl ecx, 4
mov edx, dword [ebp + 0x1c]
add ecx, dword [edx]
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x104], ecx
jmp 0x40c4e6
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0xdc4], ecx
mov edx, dword [ebp - 0xdc4]
sub edx, 1
mov dword [ebp - 0xdc4], edx
cmp dword [ebp - 0xdc4], 0x81
ja case.default.0x40c53f
mov eax, dword [ebp - 0xdc4]
jmp dword [eax*4 + 0x41a920]
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 3
je 0x40c580
mov dword [ebp - 0x7d4], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x7d4]
jmp 0x41a90c
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x40c605
mov eax, dword [ebp - 0xfc]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea ecx, [ebp - 0xb4]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x40c605
cmp dword [ebp + 0x28], 0
je 0x40c5d4
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 2
mov dword [ebp - 0x7d8], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x7d8]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x120], ecx
mov edx, dword [ebp - 0x100]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x40c696
mov edx, dword [ebp - 0x100]
push edx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea eax, [ebp - 0xc4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x40c696
cmp dword [ebp + 0x28], 0
je 0x40c665
mov eax, dword [ebp + 0x28]
mov dword [eax], 1
mov dword [ebp - 0x7dc], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x7dc]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x12c], eax
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x40c727
mov ecx, dword [ebp - 0x104]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea edx, [ebp - 0xd4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x40c727
cmp dword [ebp + 0x28], 0
je 0x40c6f6
mov edx, dword [ebp + 0x28]
mov dword [edx], 0
mov dword [ebp - 0x7e0], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x7e0]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x124], edx
lea eax, [ebp - 0x128]
push eax
mov ecx, dword [ebp - 0x124]
push ecx
mov edx, dword [ebp - 0x12c]
push edx
mov eax, dword [ebp - 0x120]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0x1c]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40c780
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x128]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 3
je 0x40c7bf
mov dword [ebp - 0x7e4], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x7e4]
jmp 0x41a90c
mov edx, dword [ebp - 0xfc]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x40c844
mov edx, dword [ebp - 0xfc]
push edx
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea eax, [ebp - 0xb4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x40c844
cmp dword [ebp + 0x28], 0
je 0x40c813
mov eax, dword [ebp + 0x28]
mov dword [eax], 2
mov dword [ebp - 0x7e8], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x7e8]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x130], eax
mov ecx, dword [ebp - 0x100]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x40c8d5
mov ecx, dword [ebp - 0x100]
push ecx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea edx, [ebp - 0xc4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x40c8d5
cmp dword [ebp + 0x28], 0
je 0x40c8a4
mov edx, dword [ebp + 0x28]
mov dword [edx], 1
mov dword [ebp - 0x7ec], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x7ec]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x40c966
mov eax, dword [ebp - 0x104]
push eax
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x40c966
cmp dword [ebp + 0x28], 0
je 0x40c935
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 0
mov dword [ebp - 0x7f0], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x7f0]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x134], ecx
lea edx, [ebp - 0x138]
push edx
mov eax, dword [ebp - 0x134]
push eax
mov ecx, dword [ebp - 0x13c]
push ecx
mov edx, dword [ebp - 0x130]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x20]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40c9bf
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x138]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 0
je 0x40c9fe
mov dword [ebp - 0x7f4], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x7f4]
jmp 0x41a90c
lea ecx, [ebp - 0x140]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0x24]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40ca36
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x140]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 0
je 0x40ca75
mov dword [ebp - 0x7f8], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x7f8]
jmp 0x41a90c
lea eax, [ebp - 0x144]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0x28]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40caad
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x144]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 4
je 0x40caec
mov dword [ebp - 0x7fc], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x7fc]
jmp 0x41a90c
mov dword [ebp - 0x148], 0
mov edx, dword [ebp - 0xf8]
movzx eax, word [edx]
cmp eax, 0x400c
jne 0x40cb35
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [ebp - 0x10]
add ecx, 8
mov dword [ebp - 0x148], ecx
mov edx, 3
mov eax, dword [ebp - 0x10]
mov word [eax], dx
jmp 0x40cb44
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x148], edx
mov dword [ebp - 0x158], 0
mov eax, dword [ebp - 0xfc]
movzx ecx, word [eax]
cmp ecx, 0x400c
jne 0x40cb8e
mov edx, dword [ebp - 0xfc]
mov eax, dword [edx + 8]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edx, dword [ebp - 0x10]
add edx, 8
mov dword [ebp - 0x158], edx
mov eax, 3
mov ecx, dword [ebp - 0x10]
mov word [ecx], ax
jmp 0x40cb9d
mov edx, dword [ebp - 0xfc]
mov eax, dword [edx + 8]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x150], 0
mov ecx, dword [ebp - 0x100]
movzx edx, word [ecx]
cmp edx, 0x400c
jne 0x40cbe4
mov eax, dword [ebp - 0x100]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x150], eax
mov ecx, 0xc
mov edx, dword [ebp - 0x10]
mov word [edx], cx
jmp 0x40cbf3
mov eax, dword [ebp - 0x100]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x150], ecx
mov dword [ebp - 0x154], 0
mov edx, dword [ebp - 0x104]
movzx eax, word [edx]
cmp eax, 0x400c
jne 0x40cc3c
mov ecx, dword [ebp - 0x104]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [ebp - 0x10]
add ecx, 8
mov dword [ebp - 0x154], ecx
mov edx, 3
mov eax, dword [ebp - 0x10]
mov word [eax], dx
jmp 0x40cc4b
mov ecx, dword [ebp - 0x104]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x154], edx
lea eax, [ebp - 0x14c]
push eax
mov ecx, dword [ebp - 0x154]
push ecx
mov edx, dword [ebp - 0x150]
push edx
mov eax, dword [ebp - 0x158]
push eax
mov ecx, dword [ebp - 0x148]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0x2c]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40cc9f
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x14c]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 1
je 0x40ccde
mov dword [ebp - 0x800], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x800]
jmp 0x41a90c
mov dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x104]
movzx ecx, word [eax]
cmp ecx, 0x400c
jne 0x40cd25
mov edx, dword [ebp - 0x104]
mov eax, dword [edx + 8]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x15c], edx
mov eax, 0xc
mov ecx, dword [ebp - 0x10]
mov word [ecx], ax
jmp 0x40cd34
mov edx, dword [ebp - 0x104]
mov eax, dword [edx + 8]
mov dword [ebp - 0x15c], eax
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp - 0x15c]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x30]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40cd73
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x160]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 1
je 0x40cdb2
mov dword [ebp - 0x804], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x804]
jmp 0x41a90c
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x40ce37
mov ecx, dword [ebp - 0x104]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea edx, [ebp - 0xd4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x40ce37
cmp dword [ebp + 0x28], 0
je 0x40ce06
mov edx, dword [ebp + 0x28]
mov dword [edx], 0
mov dword [ebp - 0x808], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x808]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x164], edx
lea eax, [ebp - 0x168]
push eax
mov ecx, dword [ebp - 0x164]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0x34]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40ce82
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x168]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 1
je 0x40cec1
mov dword [ebp - 0x80c], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x80c]
jmp 0x41a90c
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 3
je 0x40cf46
mov eax, dword [ebp - 0x104]
push eax
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x10], ecx
push 3
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x40cf46
cmp dword [ebp + 0x28], 0
je 0x40cf15
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 0
mov dword [ebp - 0x810], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x810]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x16c], ecx
lea edx, [ebp - 0x170]
push edx
mov eax, dword [ebp - 0x16c]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0x38]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40cf91
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x170]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 1
je 0x40cfd0
mov dword [ebp - 0x814], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x814]
jmp 0x41a90c
mov dword [ebp - 0x174], 0
mov edx, dword [ebp - 0x104]
movzx eax, word [edx]
cmp eax, 0x400c
jne 0x40d045
mov ecx, dword [ebp - 0x104]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x10], edx
xor eax, eax
je 0x40d03a
cmp dword [ebp + 0x28], 0
je 0x40d009
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 0
mov dword [ebp - 0x818], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x818]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x174], eax
jmp 0x40d0c0
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 0x400c
je 0x40d0b4
push 0x400c
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x40d0b4
cmp dword [ebp + 0x28], 0
je 0x40d083
mov eax, dword [ebp + 0x28]
mov dword [eax], 0
mov dword [ebp - 0x81c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x81c]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x174], eax
lea ecx, [ebp - 0x178]
push ecx
mov edx, dword [ebp - 0x174]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x3c]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40d0ff
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x178]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 1
je 0x40d13e
mov dword [ebp - 0x820], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x820]
jmp 0x41a90c
mov dword [ebp - 0x17c], 0
mov ecx, dword [ebp - 0x104]
movzx edx, word [ecx]
cmp edx, 0x400c
jne 0x40d185
mov eax, dword [ebp - 0x104]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x17c], eax
mov ecx, 0xc
mov edx, dword [ebp - 0x10]
mov word [edx], cx
jmp 0x40d194
mov eax, dword [ebp - 0x104]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x17c], ecx
lea edx, [ebp - 0x180]
push edx
mov eax, dword [ebp - 0x17c]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0x40]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40d1d3
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x180]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 0
je 0x40d212
mov dword [ebp - 0x824], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x824]
jmp 0x41a90c
lea edx, [ebp - 0x184]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x44]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40d24a
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x184]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 0
je 0x40d289
mov dword [ebp - 0x828], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x828]
jmp 0x41a90c
lea ecx, [ebp - 0x188]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0x48]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40d2c1
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x188]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 0
je 0x40d300
mov dword [ebp - 0x82c], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x82c]
jmp 0x41a90c
lea eax, [ebp - 0x18c]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0x4c]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40d338
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x18c]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 2
je 0x40d377
mov dword [ebp - 0x830], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x830]
jmp 0x41a90c
mov edx, dword [ebp - 0x100]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 3
je 0x40d3fc
mov edx, dword [ebp - 0x100]
push edx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea eax, [ebp - 0xc4]
mov dword [ebp - 0x10], eax
push 3
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x40d3fc
cmp dword [ebp + 0x28], 0
je 0x40d3cb
mov eax, dword [ebp + 0x28]
mov dword [eax], 1
mov dword [ebp - 0x834], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x834]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x198], 0
mov ecx, dword [ebp - 0x104]
movzx edx, word [ecx]
cmp edx, 0x400c
jne 0x40d44f
mov eax, dword [ebp - 0x104]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x198], eax
mov ecx, 0xc
mov edx, dword [ebp - 0x10]
mov word [edx], cx
jmp 0x40d45e
mov eax, dword [ebp - 0x104]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x198], ecx
lea edx, [ebp - 0x194]
push edx
mov eax, dword [ebp - 0x198]
push eax
mov ecx, dword [ebp - 0x190]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0x50]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40d4a4
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x194]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 1
je 0x40d4e3
mov dword [ebp - 0x838], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x838]
jmp 0x41a90c
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x40d568
mov eax, dword [ebp - 0x104]
push eax
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x40d568
cmp dword [ebp + 0x28], 0
je 0x40d537
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 0
mov dword [ebp - 0x83c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x83c]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x19c], ecx
lea edx, [ebp - 0x1a0]
push edx
mov eax, dword [ebp - 0x19c]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0x54]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40d5b3
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x1a0]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 0
je 0x40d5f2
mov dword [ebp - 0x840], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x840]
jmp 0x41a90c
lea edx, [ebp - 0x1a4]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x58]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40d62a
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x1a4]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 3
je 0x40d669
mov dword [ebp - 0x844], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x844]
jmp 0x41a90c
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 3
je 0x40d6ee
mov ecx, dword [ebp - 0xfc]
push ecx
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea edx, [ebp - 0xb4]
mov dword [ebp - 0x10], edx
push 3
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x40d6ee
cmp dword [ebp + 0x28], 0
je 0x40d6bd
mov edx, dword [ebp + 0x28]
mov dword [edx], 2
mov dword [ebp - 0x848], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x848]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x1a8], edx
mov dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x100]
movzx ecx, word [eax]
cmp ecx, 0x400c
jne 0x40d741
mov edx, dword [ebp - 0x100]
mov eax, dword [edx + 8]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x1b4], edx
mov eax, 0xc
mov ecx, dword [ebp - 0x10]
mov word [ecx], ax
jmp 0x40d750
mov edx, dword [ebp - 0x100]
mov eax, dword [edx + 8]
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1ac], 0
mov ecx, dword [ebp - 0x104]
movzx edx, word [ecx]
cmp edx, 0x400c
jne 0x40d797
mov eax, dword [ebp - 0x104]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x1ac], eax
mov ecx, 0xc
mov edx, dword [ebp - 0x10]
mov word [edx], cx
jmp 0x40d7a6
mov eax, dword [ebp - 0x104]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x1ac], ecx
lea edx, [ebp - 0x1b0]
push edx
mov eax, dword [ebp - 0x1ac]
push eax
mov ecx, dword [ebp - 0x1b4]
push ecx
mov edx, dword [ebp - 0x1a8]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x5c]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40d7f3
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x1b0]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 6
je 0x40d832
mov dword [ebp - 0x84c], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x84c]
jmp 0x41a90c
mov ecx, dword [ebp - 0xf0]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x40d8b7
mov ecx, dword [ebp - 0xf0]
push ecx
lea ecx, [ebp - 0x84]
call fcn.0041ab70
lea edx, [ebp - 0x84]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x40d8b7
cmp dword [ebp + 0x28], 0
je 0x40d886
mov edx, dword [ebp + 0x28]
mov dword [edx], 5
mov dword [ebp - 0x850], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x850]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x1bc], edx
mov dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0xf4]
movzx ecx, word [eax]
cmp ecx, 0x400c
jne 0x40d90a
mov edx, dword [ebp - 0xf4]
mov eax, dword [edx + 8]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x1d0], edx
mov eax, 0xc
mov ecx, dword [ebp - 0x10]
mov word [ecx], ax
jmp 0x40d919
mov edx, dword [ebp - 0xf4]
mov eax, dword [edx + 8]
mov dword [ebp - 0x1d0], eax
mov dword [ebp - 0x1c4], 0
mov ecx, dword [ebp - 0xf8]
movzx edx, word [ecx]
cmp edx, 0x400c
jne 0x40d960
mov eax, dword [ebp - 0xf8]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x1c4], eax
mov ecx, 0xc
mov edx, dword [ebp - 0x10]
mov word [edx], cx
jmp 0x40d96f
mov eax, dword [ebp - 0xf8]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x1c4], ecx
mov dword [ebp - 0x1c8], 0
mov edx, dword [ebp - 0xfc]
movzx eax, word [edx]
cmp eax, 0x400c
jne 0x40d9b5
mov ecx, dword [ebp - 0xfc]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x1c8], ecx
mov edx, 0xc
mov eax, dword [ebp - 0x10]
mov word [eax], dx
jmp 0x40d9c4
mov ecx, dword [ebp - 0xfc]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x1c8], edx
mov dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x100]
movzx ecx, word [eax]
cmp ecx, 0x400c
jne 0x40da0b
mov edx, dword [ebp - 0x100]
mov eax, dword [edx + 8]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x1c0], edx
mov eax, 0xc
mov ecx, dword [ebp - 0x10]
mov word [ecx], ax
jmp 0x40da1a
mov edx, dword [ebp - 0x100]
mov eax, dword [edx + 8]
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x1b8], 0
mov ecx, dword [ebp - 0x104]
movzx edx, word [ecx]
cmp edx, 0x400c
jne 0x40da64
mov eax, dword [ebp - 0x104]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x10]
add eax, 8
mov dword [ebp - 0x1b8], eax
mov ecx, 3
mov edx, dword [ebp - 0x10]
mov word [edx], cx
jmp 0x40da73
mov eax, dword [ebp - 0x104]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x1b8], ecx
lea edx, [ebp - 0x1cc]
push edx
mov eax, dword [ebp - 0x1b8]
push eax
mov ecx, dword [ebp - 0x1c0]
push ecx
mov edx, dword [ebp - 0x1c8]
push edx
mov eax, dword [ebp - 0x1c4]
push eax
mov ecx, dword [ebp - 0x1d0]
push ecx
mov edx, dword [ebp - 0x1bc]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x60]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40dad5
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x1cc]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 3
je 0x40db14
mov dword [ebp - 0x854], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x854]
jmp 0x41a90c
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x40db99
mov ecx, dword [ebp - 0xfc]
push ecx
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea edx, [ebp - 0xb4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x40db99
cmp dword [ebp + 0x28], 0
je 0x40db68
mov edx, dword [ebp + 0x28]
mov dword [edx], 2
mov dword [ebp - 0x858], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x858]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x1d4], edx
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 3
je 0x40dc2a
mov eax, dword [ebp - 0x100]
push eax
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x10], ecx
push 3
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x40dc2a
cmp dword [ebp + 0x28], 0
je 0x40dbf9
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 1
mov dword [ebp - 0x85c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x85c]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x1e0], ecx
mov dword [ebp - 0x1d8], 0
mov edx, dword [ebp - 0x104]
movzx eax, word [edx]
cmp eax, 0x400c
jne 0x40dc7c
mov ecx, dword [ebp - 0x104]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x1d8], ecx
mov edx, 0xc
mov eax, dword [ebp - 0x10]
mov word [eax], dx
jmp 0x40dc8b
mov ecx, dword [ebp - 0x104]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x1d8], edx
lea eax, [ebp - 0x1dc]
push eax
mov ecx, dword [ebp - 0x1d8]
push ecx
mov edx, dword [ebp - 0x1e0]
push edx
mov eax, dword [ebp - 0x1d4]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0x64]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40dcd8
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x1dc]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 1
je 0x40dd17
mov dword [ebp - 0x860], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x860]
jmp 0x41a90c
mov edx, dword [ebp - 0x104]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x40dd9c
mov edx, dword [ebp - 0x104]
push edx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea eax, [ebp - 0xd4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x40dd9c
cmp dword [ebp + 0x28], 0
je 0x40dd6b
mov eax, dword [ebp + 0x28]
mov dword [eax], 0
mov dword [ebp - 0x864], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x864]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x1e4], eax
lea ecx, [ebp - 0x1e8]
push ecx
mov edx, dword [ebp - 0x1e4]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x68]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40dde7
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x1e8]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 8
je 0x40de26
mov dword [ebp - 0x868], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x868]
jmp 0x41a90c
mov ecx, dword [ebp - 0xe8]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x40dea5
mov ecx, dword [ebp - 0xe8]
push ecx
lea ecx, [ebp - 0x64]
call fcn.0041ab70
lea edx, [ebp - 0x64]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x40dea5
cmp dword [ebp + 0x28], 0
je 0x40de74
mov edx, dword [ebp + 0x28]
mov dword [edx], 7
mov dword [ebp - 0x86c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x86c]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x1f8], edx
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 3
je 0x40df30
mov eax, dword [ebp - 0xec]
push eax
lea ecx, [ebp - 0x74]
call fcn.0041ab70
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x10], ecx
push 3
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x40df30
cmp dword [ebp + 0x28], 0
je 0x40deff
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 6
mov dword [ebp - 0x870], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x870]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x20c], ecx
mov dword [ebp - 0x200], 0
mov edx, dword [ebp - 0xf0]
movzx eax, word [edx]
cmp eax, 0x400c
jne 0x40df82
mov ecx, dword [ebp - 0xf0]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x200], ecx
mov edx, 0xc
mov eax, dword [ebp - 0x10]
mov word [eax], dx
jmp 0x40df91
mov ecx, dword [ebp - 0xf0]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x200], edx
mov dword [ebp - 0x204], 0
mov eax, dword [ebp - 0xf4]
movzx ecx, word [eax]
cmp ecx, 0x400c
jne 0x40dfdb
mov edx, dword [ebp - 0xf4]
mov eax, dword [edx + 8]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edx, dword [ebp - 0x10]
add edx, 8
mov dword [ebp - 0x204], edx
mov eax, 3
mov ecx, dword [ebp - 0x10]
mov word [ecx], ax
jmp 0x40dfea
mov edx, dword [ebp - 0xf4]
mov eax, dword [edx + 8]
mov dword [ebp - 0x204], eax
mov dword [ebp - 0x1fc], 0
mov ecx, dword [ebp - 0xf8]
movzx edx, word [ecx]
cmp edx, 0x400c
jne 0x40e031
mov eax, dword [ebp - 0xf8]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x1fc], eax
mov ecx, 0xc
mov edx, dword [ebp - 0x10]
mov word [edx], cx
jmp 0x40e040
mov eax, dword [ebp - 0xf8]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x1fc], ecx
mov dword [ebp - 0x1f4], 0
mov edx, dword [ebp - 0xfc]
movzx eax, word [edx]
cmp eax, 0x400c
jne 0x40e086
mov ecx, dword [ebp - 0xfc]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x1f4], ecx
mov edx, 0xc
mov eax, dword [ebp - 0x10]
mov word [eax], dx
jmp 0x40e095
mov ecx, dword [ebp - 0xfc]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x1f4], edx
mov dword [ebp - 0x208], 0
mov eax, dword [ebp - 0x100]
movzx ecx, word [eax]
cmp ecx, 0x400c
jne 0x40e0df
mov edx, dword [ebp - 0x100]
mov eax, dword [edx + 8]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edx, dword [ebp - 0x10]
add edx, 8
mov dword [ebp - 0x208], edx
mov eax, 3
mov ecx, dword [ebp - 0x10]
mov word [ecx], ax
jmp 0x40e0ee
mov edx, dword [ebp - 0x100]
mov eax, dword [edx + 8]
mov dword [ebp - 0x208], eax
mov dword [ebp - 0x1ec], 0
mov ecx, dword [ebp - 0x104]
movzx edx, word [ecx]
cmp edx, 0x400c
jne 0x40e138
mov eax, dword [ebp - 0x104]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x10]
add eax, 8
mov dword [ebp - 0x1ec], eax
mov ecx, 3
mov edx, dword [ebp - 0x10]
mov word [edx], cx
jmp 0x40e147
mov eax, dword [ebp - 0x104]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x1ec], ecx
lea edx, [ebp - 0x1f0]
push edx
mov eax, dword [ebp - 0x1ec]
push eax
mov ecx, dword [ebp - 0x208]
push ecx
mov edx, dword [ebp - 0x1f4]
push edx
mov eax, dword [ebp - 0x1fc]
push eax
mov ecx, dword [ebp - 0x204]
push ecx
mov edx, dword [ebp - 0x200]
push edx
mov eax, dword [ebp - 0x20c]
push eax
mov ecx, dword [ebp - 0x1f8]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0x6c]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40e1b7
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x1f0]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 2
je 0x40e1f6
mov dword [ebp - 0x874], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x874]
jmp 0x41a90c
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x40e27b
mov eax, dword [ebp - 0x100]
push eax
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x40e27b
cmp dword [ebp + 0x28], 0
je 0x40e24a
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 1
mov dword [ebp - 0x878], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x878]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x210], ecx
mov edx, dword [ebp - 0x104]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x40e30c
mov edx, dword [ebp - 0x104]
push edx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea eax, [ebp - 0xd4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x40e30c
cmp dword [ebp + 0x28], 0
je 0x40e2db
mov eax, dword [ebp + 0x28]
mov dword [eax], 0
mov dword [ebp - 0x87c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x87c]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x218], eax
lea ecx, [ebp - 0x214]
push ecx
mov edx, dword [ebp - 0x218]
push edx
mov eax, dword [ebp - 0x210]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0x70]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40e35e
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x214]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 2
je 0x40e39d
mov dword [ebp - 0x880], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x880]
jmp 0x41a90c
mov edx, dword [ebp - 0x100]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x40e422
mov edx, dword [ebp - 0x100]
push edx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea eax, [ebp - 0xc4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x40e422
cmp dword [ebp + 0x28], 0
je 0x40e3f1
mov eax, dword [ebp + 0x28]
mov dword [eax], 1
mov dword [ebp - 0x884], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x884]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x21c], eax
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x40e4b3
mov ecx, dword [ebp - 0x104]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea edx, [ebp - 0xd4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x40e4b3
cmp dword [ebp + 0x28], 0
je 0x40e482
mov edx, dword [ebp + 0x28]
mov dword [edx], 0
mov dword [ebp - 0x888], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x888]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x224], edx
lea eax, [ebp - 0x220]
push eax
mov ecx, dword [ebp - 0x224]
push ecx
mov edx, dword [ebp - 0x21c]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x74]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40e505
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x220]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 1
je 0x40e544
mov dword [ebp - 0x88c], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x88c]
jmp 0x41a90c
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x40e5c9
mov ecx, dword [ebp - 0x104]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea edx, [ebp - 0xd4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x40e5c9
cmp dword [ebp + 0x28], 0
je 0x40e598
mov edx, dword [ebp + 0x28]
mov dword [edx], 0
mov dword [ebp - 0x890], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x890]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x228], edx
lea eax, [ebp - 0x22c]
push eax
mov ecx, dword [ebp - 0x228]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0x78]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40e614
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x22c]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 1
je 0x40e653
mov dword [ebp - 0x894], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x894]
jmp 0x41a90c
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x40e6d8
mov eax, dword [ebp - 0x104]
push eax
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x40e6d8
cmp dword [ebp + 0x28], 0
je 0x40e6a7
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 0
mov dword [ebp - 0x898], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x898]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x230], ecx
lea edx, [ebp - 0x234]
push edx
mov eax, dword [ebp - 0x230]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0x7c]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40e723
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x234]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 1
je 0x40e762
mov dword [ebp - 0x89c], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x89c]
jmp 0x41a90c
mov edx, dword [ebp - 0x104]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x40e7e7
mov edx, dword [ebp - 0x104]
push edx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea eax, [ebp - 0xd4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x40e7e7
cmp dword [ebp + 0x28], 0
je 0x40e7b6
mov eax, dword [ebp + 0x28]
mov dword [eax], 0
mov dword [ebp - 0x8a0], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x8a0]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x238], eax
lea ecx, [ebp - 0x23c]
push ecx
mov edx, dword [ebp - 0x238]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x80]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40e835
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x23c]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 1
je 0x40e874
mov dword [ebp - 0x8a4], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x8a4]
jmp 0x41a90c
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x40e8f9
mov ecx, dword [ebp - 0x104]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea edx, [ebp - 0xd4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x40e8f9
cmp dword [ebp + 0x28], 0
je 0x40e8c8
mov edx, dword [ebp + 0x28]
mov dword [edx], 0
mov dword [ebp - 0x8a8], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x8a8]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x240], edx
lea eax, [ebp - 0x244]
push eax
mov ecx, dword [ebp - 0x240]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0x84]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40e947
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x244]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 3
je 0x40e986
mov dword [ebp - 0x8ac], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x8ac]
jmp 0x41a90c
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x40ea0b
mov eax, dword [ebp - 0xfc]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea ecx, [ebp - 0xb4]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x40ea0b
cmp dword [ebp + 0x28], 0
je 0x40e9da
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 2
mov dword [ebp - 0x8b0], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x8b0]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x248], ecx
mov edx, dword [ebp - 0x100]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 3
je 0x40ea9c
mov edx, dword [ebp - 0x100]
push edx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea eax, [ebp - 0xc4]
mov dword [ebp - 0x10], eax
push 3
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x40ea9c
cmp dword [ebp + 0x28], 0
je 0x40ea6b
mov eax, dword [ebp + 0x28]
mov dword [eax], 1
mov dword [ebp - 0x8b4], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x8b4]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x254], eax
mov dword [ebp - 0x24c], 0
mov ecx, dword [ebp - 0x104]
movzx edx, word [ecx]
cmp edx, 0x400c
jne 0x40eaef
mov eax, dword [ebp - 0x104]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x24c], eax
mov ecx, 0xc
mov edx, dword [ebp - 0x10]
mov word [edx], cx
jmp 0x40eafe
mov eax, dword [ebp - 0x104]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x24c], ecx
lea edx, [ebp - 0x250]
push edx
mov eax, dword [ebp - 0x24c]
push eax
mov ecx, dword [ebp - 0x254]
push ecx
mov edx, dword [ebp - 0x248]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x88]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40eb4e
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x250]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 4
je 0x40eb8d
mov dword [ebp - 0x8b8], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x8b8]
jmp 0x41a90c
mov ecx, dword [ebp - 0xf8]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x40ec12
mov ecx, dword [ebp - 0xf8]
push ecx
lea ecx, [ebp - 0xa4]
call fcn.0041ab70
lea edx, [ebp - 0xa4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x40ec12
cmp dword [ebp + 0x28], 0
je 0x40ebe1
mov edx, dword [ebp + 0x28]
mov dword [edx], 3
mov dword [ebp - 0x8bc], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x8bc]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x258], edx
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x40eca3
mov eax, dword [ebp - 0xfc]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea ecx, [ebp - 0xb4]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x40eca3
cmp dword [ebp + 0x28], 0
je 0x40ec72
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 2
mov dword [ebp - 0x8c0], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x8c0]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x268], ecx
mov dword [ebp - 0x260], 0
mov edx, dword [ebp - 0x100]
movzx eax, word [edx]
cmp eax, 0x400c
jne 0x40ecf5
mov ecx, dword [ebp - 0x100]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x260], ecx
mov edx, 0xc
mov eax, dword [ebp - 0x10]
mov word [eax], dx
jmp 0x40ed04
mov ecx, dword [ebp - 0x100]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x260], edx
mov dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x104]
movzx ecx, word [eax]
cmp ecx, 0x400c
jne 0x40ed4b
mov edx, dword [ebp - 0x104]
mov eax, dword [edx + 8]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x264], edx
mov eax, 0xc
mov ecx, dword [ebp - 0x10]
mov word [ecx], ax
jmp 0x40ed5a
mov edx, dword [ebp - 0x104]
mov eax, dword [edx + 8]
mov dword [ebp - 0x264], eax
lea ecx, [ebp - 0x25c]
push ecx
mov edx, dword [ebp - 0x264]
push edx
mov eax, dword [ebp - 0x260]
push eax
mov ecx, dword [ebp - 0x268]
push ecx
mov edx, dword [ebp - 0x258]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x8c]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40edb1
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x25c]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 2
je 0x40edf0
mov dword [ebp - 0x8c4], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x8c4]
jmp 0x41a90c
mov ecx, dword [ebp - 0x100]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x40ee75
mov ecx, dword [ebp - 0x100]
push ecx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea edx, [ebp - 0xc4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x40ee75
cmp dword [ebp + 0x28], 0
je 0x40ee44
mov edx, dword [ebp + 0x28]
mov dword [edx], 1
mov dword [ebp - 0x8c8], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x8c8]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x26c], edx
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x40ef06
mov eax, dword [ebp - 0x104]
push eax
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x40ef06
cmp dword [ebp + 0x28], 0
je 0x40eed5
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 0
mov dword [ebp - 0x8cc], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x8cc]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x274], ecx
lea edx, [ebp - 0x270]
push edx
mov eax, dword [ebp - 0x274]
push eax
mov ecx, dword [ebp - 0x26c]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0x90]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40ef5b
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x270]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 0
je 0x40ef9a
mov dword [ebp - 0x8d0], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x8d0]
jmp 0x41a90c
lea eax, [ebp - 0x278]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0x94]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40efd5
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x278]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 0
je 0x40f014
mov dword [ebp - 0x8d4], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x8d4]
jmp 0x41a90c
lea edx, [ebp - 0x27c]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x98]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40f04f
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x27c]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 0
je 0x40f08e
mov dword [ebp - 0x8d8], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x8d8]
jmp 0x41a90c
lea ecx, [ebp - 0x280]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0x9c]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40f0c9
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x280]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 3
je 0x40f108
mov dword [ebp - 0x8dc], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x8dc]
jmp 0x41a90c
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 3
je 0x40f18d
mov eax, dword [ebp - 0xfc]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea ecx, [ebp - 0xb4]
mov dword [ebp - 0x10], ecx
push 3
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x40f18d
cmp dword [ebp + 0x28], 0
je 0x40f15c
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 2
mov dword [ebp - 0x8e0], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x8e0]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x284], ecx
mov dword [ebp - 0x290], 0
mov edx, dword [ebp - 0x100]
movzx eax, word [edx]
cmp eax, 0x400c
jne 0x40f1df
mov ecx, dword [ebp - 0x100]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x290], ecx
mov edx, 0xc
mov eax, dword [ebp - 0x10]
mov word [eax], dx
jmp 0x40f1ee
mov ecx, dword [ebp - 0x100]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x290], edx
mov dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x104]
movzx ecx, word [eax]
cmp ecx, 0x400c
jne 0x40f235
mov edx, dword [ebp - 0x104]
mov eax, dword [edx + 8]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x288], edx
mov eax, 0xc
mov ecx, dword [ebp - 0x10]
mov word [ecx], ax
jmp 0x40f244
mov edx, dword [ebp - 0x104]
mov eax, dword [edx + 8]
mov dword [ebp - 0x288], eax
lea ecx, [ebp - 0x28c]
push ecx
mov edx, dword [ebp - 0x288]
push edx
mov eax, dword [ebp - 0x290]
push eax
mov ecx, dword [ebp - 0x284]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0xa0]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40f294
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x28c]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 1
je 0x40f2d3
mov dword [ebp - 0x8e4], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x8e4]
jmp 0x41a90c
mov dword [ebp - 0x294], 0
mov eax, dword [ebp - 0x104]
movzx ecx, word [eax]
cmp ecx, 0x400c
jne 0x40f31d
mov edx, dword [ebp - 0x104]
mov eax, dword [edx + 8]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edx, dword [ebp - 0x10]
add edx, 8
mov dword [ebp - 0x294], edx
mov eax, 3
mov ecx, dword [ebp - 0x10]
mov word [ecx], ax
jmp 0x40f32c
mov edx, dword [ebp - 0x104]
mov eax, dword [edx + 8]
mov dword [ebp - 0x294], eax
lea ecx, [ebp - 0x298]
push ecx
mov edx, dword [ebp - 0x294]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0xa4]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40f36e
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x298]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 1
je 0x40f3ad
mov dword [ebp - 0x8e8], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x8e8]
jmp 0x41a90c
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 3
je 0x40f432
mov ecx, dword [ebp - 0x104]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea edx, [ebp - 0xd4]
mov dword [ebp - 0x10], edx
push 3
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x40f432
cmp dword [ebp + 0x28], 0
je 0x40f401
mov edx, dword [ebp + 0x28]
mov dword [edx], 0
mov dword [ebp - 0x8ec], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x8ec]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x29c], edx
lea eax, [ebp - 0x2a0]
push eax
mov ecx, dword [ebp - 0x29c]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0xa8]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40f480
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x2a0]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 1
je 0x40f4bf
mov dword [ebp - 0x8f0], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x8f0]
jmp 0x41a90c
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 3
je 0x40f544
mov eax, dword [ebp - 0x104]
push eax
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x10], ecx
push 3
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x40f544
cmp dword [ebp + 0x28], 0
je 0x40f513
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 0
mov dword [ebp - 0x8f4], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x8f4]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2a4], ecx
lea edx, [ebp - 0x2a8]
push edx
mov eax, dword [ebp - 0x2a4]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0xac]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40f592
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x2a8]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 1
je 0x40f5d1
mov dword [ebp - 0x8f8], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x8f8]
jmp 0x41a90c
mov edx, dword [ebp - 0x104]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 3
je 0x40f656
mov edx, dword [ebp - 0x104]
push edx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea eax, [ebp - 0xd4]
mov dword [ebp - 0x10], eax
push 3
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x40f656
cmp dword [ebp + 0x28], 0
je 0x40f625
mov eax, dword [ebp + 0x28]
mov dword [eax], 0
mov dword [ebp - 0x8fc], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x8fc]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x2ac], eax
lea ecx, [ebp - 0x2b0]
push ecx
mov edx, dword [ebp - 0x2ac]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0xb0]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40f6a4
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x2b0]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 1
je 0x40f6e3
mov dword [ebp - 0x900], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x900]
jmp 0x41a90c
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x40f768
mov ecx, dword [ebp - 0x104]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea edx, [ebp - 0xd4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x40f768
cmp dword [ebp + 0x28], 0
je 0x40f737
mov edx, dword [ebp + 0x28]
mov dword [edx], 0
mov dword [ebp - 0x904], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x904]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x2b4], edx
lea eax, [ebp - 0x2b8]
push eax
mov ecx, dword [ebp - 0x2b4]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0xb4]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40f7b6
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x2b8]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 1
je 0x40f7f5
mov dword [ebp - 0x908], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x908]
jmp 0x41a90c
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 3
je 0x40f87a
mov eax, dword [ebp - 0x104]
push eax
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x10], ecx
push 3
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x40f87a
cmp dword [ebp + 0x28], 0
je 0x40f849
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 0
mov dword [ebp - 0x90c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x90c]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2bc], ecx
lea edx, [ebp - 0x2c0]
push edx
mov eax, dword [ebp - 0x2bc]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0xb8]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40f8c8
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x2c0]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 2
je 0x40f907
mov dword [ebp - 0x910], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x910]
jmp 0x41a90c
mov edx, dword [ebp - 0x100]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 3
je 0x40f98c
mov edx, dword [ebp - 0x100]
push edx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea eax, [ebp - 0xc4]
mov dword [ebp - 0x10], eax
push 3
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x40f98c
cmp dword [ebp + 0x28], 0
je 0x40f95b
mov eax, dword [ebp + 0x28]
mov dword [eax], 1
mov dword [ebp - 0x914], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x914]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x2c4], eax
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x40fa1d
mov ecx, dword [ebp - 0x104]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea edx, [ebp - 0xd4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x40fa1d
cmp dword [ebp + 0x28], 0
je 0x40f9ec
mov edx, dword [ebp + 0x28]
mov dword [edx], 0
mov dword [ebp - 0x918], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x918]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x2cc], edx
lea eax, [ebp - 0x2c8]
push eax
mov ecx, dword [ebp - 0x2cc]
push ecx
mov edx, dword [ebp - 0x2c4]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0xbc]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40fa72
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x2c8]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 2
je 0x40fab1
mov dword [ebp - 0x91c], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x91c]
jmp 0x41a90c
mov ecx, dword [ebp - 0x100]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 3
je 0x40fb36
mov ecx, dword [ebp - 0x100]
push ecx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea edx, [ebp - 0xc4]
mov dword [ebp - 0x10], edx
push 3
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x40fb36
cmp dword [ebp + 0x28], 0
je 0x40fb05
mov edx, dword [ebp + 0x28]
mov dword [edx], 1
mov dword [ebp - 0x920], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x920]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x2d0], edx
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x40fbc7
mov eax, dword [ebp - 0x104]
push eax
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x40fbc7
cmp dword [ebp + 0x28], 0
je 0x40fb96
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 0
mov dword [ebp - 0x924], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x924]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2d8], ecx
lea edx, [ebp - 0x2d4]
push edx
mov eax, dword [ebp - 0x2d8]
push eax
mov ecx, dword [ebp - 0x2d0]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0xc0]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40fc1c
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x2d4]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 1
je 0x40fc5b
mov dword [ebp - 0x928], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x928]
jmp 0x41a90c
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x40fce0
mov eax, dword [ebp - 0x104]
push eax
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x40fce0
cmp dword [ebp + 0x28], 0
je 0x40fcaf
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 0
mov dword [ebp - 0x92c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x92c]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2dc], ecx
lea edx, [ebp - 0x2e0]
push edx
mov eax, dword [ebp - 0x2dc]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0xc4]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40fd2e
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x2e0]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 2
je 0x40fd6d
mov dword [ebp - 0x930], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x930]
jmp 0x41a90c
mov edx, dword [ebp - 0x100]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x40fdf2
mov edx, dword [ebp - 0x100]
push edx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea eax, [ebp - 0xc4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x40fdf2
cmp dword [ebp + 0x28], 0
je 0x40fdc1
mov eax, dword [ebp + 0x28]
mov dword [eax], 1
mov dword [ebp - 0x934], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x934]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x2e4], eax
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x40fe83
mov ecx, dword [ebp - 0x104]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea edx, [ebp - 0xd4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x40fe83
cmp dword [ebp + 0x28], 0
je 0x40fe52
mov edx, dword [ebp + 0x28]
mov dword [edx], 0
mov dword [ebp - 0x938], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x938]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x2ec], edx
lea eax, [ebp - 0x2e8]
push eax
mov ecx, dword [ebp - 0x2ec]
push ecx
mov edx, dword [ebp - 0x2e4]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0xc8]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x40fed8
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x2e8]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 4
je 0x40ff17
mov dword [ebp - 0x93c], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x93c]
jmp 0x41a90c
mov ecx, dword [ebp - 0xf8]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 3
je 0x40ff9c
mov ecx, dword [ebp - 0xf8]
push ecx
lea ecx, [ebp - 0xa4]
call fcn.0041ab70
lea edx, [ebp - 0xa4]
mov dword [ebp - 0x10], edx
push 3
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x40ff9c
cmp dword [ebp + 0x28], 0
je 0x40ff6b
mov edx, dword [ebp + 0x28]
mov dword [edx], 3
mov dword [ebp - 0x940], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x940]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x2f0], edx
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 3
je 0x41002d
mov eax, dword [ebp - 0xfc]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea ecx, [ebp - 0xb4]
mov dword [ebp - 0x10], ecx
push 3
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x41002d
cmp dword [ebp + 0x28], 0
je 0x40fffc
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 2
mov dword [ebp - 0x944], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x944]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x300], ecx
mov edx, dword [ebp - 0x100]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x4100be
mov edx, dword [ebp - 0x100]
push edx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea eax, [ebp - 0xc4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x4100be
cmp dword [ebp + 0x28], 0
je 0x41008d
mov eax, dword [ebp + 0x28]
mov dword [eax], 1
mov dword [ebp - 0x948], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x948]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x2f8], eax
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x41014f
mov ecx, dword [ebp - 0x104]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea edx, [ebp - 0xd4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x41014f
cmp dword [ebp + 0x28], 0
je 0x41011e
mov edx, dword [ebp + 0x28]
mov dword [edx], 0
mov dword [ebp - 0x94c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x94c]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x2fc], edx
lea eax, [ebp - 0x2f4]
push eax
mov ecx, dword [ebp - 0x2fc]
push ecx
mov edx, dword [ebp - 0x2f8]
push edx
mov eax, dword [ebp - 0x300]
push eax
mov ecx, dword [ebp - 0x2f0]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0xcc]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x4101b2
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x2f4]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 1
je 0x4101f1
mov dword [ebp - 0x950], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x950]
jmp 0x41a90c
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 3
je 0x410276
mov eax, dword [ebp - 0x104]
push eax
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x10], ecx
push 3
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x410276
cmp dword [ebp + 0x28], 0
je 0x410245
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 0
mov dword [ebp - 0x954], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x954]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x304], ecx
lea edx, [ebp - 0x308]
push edx
mov eax, dword [ebp - 0x304]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0xd0]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x4102c4
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x308]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 1
je 0x410303
mov dword [ebp - 0x958], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x958]
jmp 0x41a90c
mov edx, dword [ebp - 0x104]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 3
je 0x410388
mov edx, dword [ebp - 0x104]
push edx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea eax, [ebp - 0xd4]
mov dword [ebp - 0x10], eax
push 3
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x410388
cmp dword [ebp + 0x28], 0
je 0x410357
mov eax, dword [ebp + 0x28]
mov dword [eax], 0
mov dword [ebp - 0x95c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x95c]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x30c], eax
lea ecx, [ebp - 0x310]
push ecx
mov edx, dword [ebp - 0x30c]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0xd4]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x4103d6
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x310]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 1
je 0x410415
mov dword [ebp - 0x960], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x960]
jmp 0x41a90c
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x41049a
mov ecx, dword [ebp - 0x104]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea edx, [ebp - 0xd4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x41049a
cmp dword [ebp + 0x28], 0
je 0x410469
mov edx, dword [ebp + 0x28]
mov dword [edx], 0
mov dword [ebp - 0x964], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x964]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x314], edx
lea eax, [ebp - 0x318]
push eax
mov ecx, dword [ebp - 0x314]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0xd8]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x4104e8
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x318]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 2
je 0x410527
mov dword [ebp - 0x968], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x968]
jmp 0x41a90c
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x4105ac
mov eax, dword [ebp - 0x100]
push eax
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x4105ac
cmp dword [ebp + 0x28], 0
je 0x41057b
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 1
mov dword [ebp - 0x96c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x96c]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x31c], ecx
mov edx, dword [ebp - 0x104]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x41063d
mov edx, dword [ebp - 0x104]
push edx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea eax, [ebp - 0xd4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x41063d
cmp dword [ebp + 0x28], 0
je 0x41060c
mov eax, dword [ebp + 0x28]
mov dword [eax], 0
mov dword [ebp - 0x970], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x970]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x324], eax
lea ecx, [ebp - 0x320]
push ecx
mov edx, dword [ebp - 0x324]
push edx
mov eax, dword [ebp - 0x31c]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0xdc]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x410692
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x320]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 1
je 0x4106d1
mov dword [ebp - 0x974], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x974]
jmp 0x41a90c
mov dword [ebp - 0x328], 0
mov edx, dword [ebp - 0x104]
movzx eax, word [edx]
cmp eax, 0x400c
jne 0x410717
mov ecx, dword [ebp - 0x104]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x328], ecx
mov edx, 0xc
mov eax, dword [ebp - 0x10]
mov word [eax], dx
jmp 0x410726
mov ecx, dword [ebp - 0x104]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x328], edx
lea eax, [ebp - 0x32c]
push eax
mov ecx, dword [ebp - 0x328]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0xe0]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x410768
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x32c]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 0
je 0x4107a7
mov dword [ebp - 0x978], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x978]
jmp 0x41a90c
lea eax, [ebp - 0x330]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0xe4]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x4107e2
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x330]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 0
je 0x410821
mov dword [ebp - 0x97c], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x97c]
jmp 0x41a90c
lea edx, [ebp - 0x334]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0xe8]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x41085c
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x334]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 2
je 0x41089b
mov dword [ebp - 0x980], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x980]
jmp 0x41a90c
mov ecx, dword [ebp - 0x100]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x410920
mov ecx, dword [ebp - 0x100]
push ecx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea edx, [ebp - 0xc4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x410920
cmp dword [ebp + 0x28], 0
je 0x4108ef
mov edx, dword [ebp + 0x28]
mov dword [edx], 1
mov dword [ebp - 0x984], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x984]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x338], edx
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x4109b1
mov eax, dword [ebp - 0x104]
push eax
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x4109b1
cmp dword [ebp + 0x28], 0
je 0x410980
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 0
mov dword [ebp - 0x988], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x988]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x340], ecx
lea edx, [ebp - 0x33c]
push edx
mov eax, dword [ebp - 0x340]
push eax
mov ecx, dword [ebp - 0x338]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0xec]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x410a06
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x33c]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 3
je 0x410a45
mov dword [ebp - 0x98c], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x98c]
jmp 0x41a90c
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x410aca
mov eax, dword [ebp - 0xfc]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea ecx, [ebp - 0xb4]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x410aca
cmp dword [ebp + 0x28], 0
je 0x410a99
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 2
mov dword [ebp - 0x990], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x990]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x344], ecx
mov edx, dword [ebp - 0x100]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x410b5b
mov edx, dword [ebp - 0x100]
push edx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea eax, [ebp - 0xc4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x410b5b
cmp dword [ebp + 0x28], 0
je 0x410b2a
mov eax, dword [ebp + 0x28]
mov dword [eax], 1
mov dword [ebp - 0x994], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x994]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x350], eax
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x410bec
mov ecx, dword [ebp - 0x104]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea edx, [ebp - 0xd4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x410bec
cmp dword [ebp + 0x28], 0
je 0x410bbb
mov edx, dword [ebp + 0x28]
mov dword [edx], 0
mov dword [ebp - 0x998], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x998]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x348], edx
lea eax, [ebp - 0x34c]
push eax
mov ecx, dword [ebp - 0x348]
push ecx
mov edx, dword [ebp - 0x350]
push edx
mov eax, dword [ebp - 0x344]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0xf0]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x410c48
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x34c]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 3
je 0x410c87
mov dword [ebp - 0x99c], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x99c]
jmp 0x41a90c
mov edx, dword [ebp - 0xfc]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x410d0c
mov edx, dword [ebp - 0xfc]
push edx
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea eax, [ebp - 0xb4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x410d0c
cmp dword [ebp + 0x28], 0
je 0x410cdb
mov eax, dword [ebp + 0x28]
mov dword [eax], 2
mov dword [ebp - 0x9a0], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x9a0]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x354], eax
mov ecx, dword [ebp - 0x100]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x410d9d
mov ecx, dword [ebp - 0x100]
push ecx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea edx, [ebp - 0xc4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x410d9d
cmp dword [ebp + 0x28], 0
je 0x410d6c
mov edx, dword [ebp + 0x28]
mov dword [edx], 1
mov dword [ebp - 0x9a4], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x9a4]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x360], edx
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 3
je 0x410e2e
mov eax, dword [ebp - 0x104]
push eax
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x10], ecx
push 3
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x410e2e
cmp dword [ebp + 0x28], 0
je 0x410dfd
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 0
mov dword [ebp - 0x9a8], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x9a8]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x358], ecx
lea edx, [ebp - 0x35c]
push edx
mov eax, dword [ebp - 0x358]
push eax
mov ecx, dword [ebp - 0x360]
push ecx
mov edx, dword [ebp - 0x354]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0xf4]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x410e8a
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x35c]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 0
je 0x410ec9
mov dword [ebp - 0x9ac], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x9ac]
jmp 0x41a90c
lea ecx, [ebp - 0x364]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0xf8]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x410f04
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x364]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 0
je 0x410f43
mov dword [ebp - 0x9b0], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x9b0]
jmp 0x41a90c
lea eax, [ebp - 0x368]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0xfc]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x410f7e
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x368]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 2
je 0x410fbd
mov dword [ebp - 0x9b4], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x9b4]
jmp 0x41a90c
mov edx, dword [ebp - 0x100]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x411042
mov edx, dword [ebp - 0x100]
push edx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea eax, [ebp - 0xc4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x411042
cmp dword [ebp + 0x28], 0
je 0x411011
mov eax, dword [ebp + 0x28]
mov dword [eax], 1
mov dword [ebp - 0x9b8], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x9b8]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x36c], eax
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x4110d3
mov ecx, dword [ebp - 0x104]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea edx, [ebp - 0xd4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x4110d3
cmp dword [ebp + 0x28], 0
je 0x4110a2
mov edx, dword [ebp + 0x28]
mov dword [edx], 0
mov dword [ebp - 0x9bc], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x9bc]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x374], edx
lea eax, [ebp - 0x370]
push eax
mov ecx, dword [ebp - 0x374]
push ecx
mov edx, dword [ebp - 0x36c]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x100]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x411128
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x370]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 2
je 0x411167
mov dword [ebp - 0x9c0], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x9c0]
jmp 0x41a90c
mov ecx, dword [ebp - 0x100]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x4111ec
mov ecx, dword [ebp - 0x100]
push ecx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea edx, [ebp - 0xc4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x4111ec
cmp dword [ebp + 0x28], 0
je 0x4111bb
mov edx, dword [ebp + 0x28]
mov dword [edx], 1
mov dword [ebp - 0x9c4], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x9c4]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x378], edx
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 3
je 0x41127d
mov eax, dword [ebp - 0x104]
push eax
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x10], ecx
push 3
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x41127d
cmp dword [ebp + 0x28], 0
je 0x41124c
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 0
mov dword [ebp - 0x9c8], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x9c8]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x380], ecx
lea edx, [ebp - 0x37c]
push edx
mov eax, dword [ebp - 0x380]
push eax
mov ecx, dword [ebp - 0x378]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0x104]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x4112d2
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x37c]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 2
je 0x411311
mov dword [ebp - 0x9cc], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x9cc]
jmp 0x41a90c
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x411396
mov eax, dword [ebp - 0x100]
push eax
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x411396
cmp dword [ebp + 0x28], 0
je 0x411365
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 1
mov dword [ebp - 0x9d0], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x9d0]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x384], ecx
mov edx, dword [ebp - 0x104]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x411427
mov edx, dword [ebp - 0x104]
push edx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea eax, [ebp - 0xd4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x411427
cmp dword [ebp + 0x28], 0
je 0x4113f6
mov eax, dword [ebp + 0x28]
mov dword [eax], 0
mov dword [ebp - 0x9d4], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x9d4]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x38c], eax
lea ecx, [ebp - 0x388]
push ecx
mov edx, dword [ebp - 0x38c]
push edx
mov eax, dword [ebp - 0x384]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0x108]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x41147c
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x388]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 7
je 0x4114bb
mov dword [ebp - 0x9d8], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x9d8]
jmp 0x41a90c
mov edx, dword [ebp - 0xec]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x41153a
mov edx, dword [ebp - 0xec]
push edx
lea ecx, [ebp - 0x74]
call fcn.0041ab70
lea eax, [ebp - 0x74]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x41153a
cmp dword [ebp + 0x28], 0
je 0x411509
mov eax, dword [ebp + 0x28]
mov dword [eax], 6
mov dword [ebp - 0x9dc], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x9dc]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x398], eax
mov ecx, dword [ebp - 0xf0]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x4115cb
mov ecx, dword [ebp - 0xf0]
push ecx
lea ecx, [ebp - 0x84]
call fcn.0041ab70
lea edx, [ebp - 0x84]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x4115cb
cmp dword [ebp + 0x28], 0
je 0x41159a
mov edx, dword [ebp + 0x28]
mov dword [edx], 5
mov dword [ebp - 0x9e0], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x9e0]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x3ac], edx
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x41165c
mov eax, dword [ebp - 0xf4]
push eax
lea ecx, [ebp - 0x94]
call fcn.0041ab70
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x41165c
cmp dword [ebp + 0x28], 0
je 0x41162b
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 4
mov dword [ebp - 0x9e4], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x9e4]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x3a0], ecx
mov edx, dword [ebp - 0xf8]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x4116ed
mov edx, dword [ebp - 0xf8]
push edx
lea ecx, [ebp - 0xa4]
call fcn.0041ab70
lea eax, [ebp - 0xa4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x4116ed
cmp dword [ebp + 0x28], 0
je 0x4116bc
mov eax, dword [ebp + 0x28]
mov dword [eax], 3
mov dword [ebp - 0x9e8], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x9e8]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x3a4], eax
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x41177e
mov ecx, dword [ebp - 0xfc]
push ecx
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea edx, [ebp - 0xb4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x41177e
cmp dword [ebp + 0x28], 0
je 0x41174d
mov edx, dword [ebp + 0x28]
mov dword [edx], 2
mov dword [ebp - 0x9ec], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x9ec]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x39c], edx
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x41180f
mov eax, dword [ebp - 0x100]
push eax
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x41180f
cmp dword [ebp + 0x28], 0
je 0x4117de
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 1
mov dword [ebp - 0x9f0], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0x9f0]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x394], ecx
mov edx, dword [ebp - 0x104]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 3
je 0x4118a0
mov edx, dword [ebp - 0x104]
push edx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea eax, [ebp - 0xd4]
mov dword [ebp - 0x10], eax
push 3
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x4118a0
cmp dword [ebp + 0x28], 0
je 0x41186f
mov eax, dword [ebp + 0x28]
mov dword [eax], 0
mov dword [ebp - 0x9f4], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0x9f4]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x3a8], eax
lea ecx, [ebp - 0x390]
push ecx
mov edx, dword [ebp - 0x3a8]
push edx
mov eax, dword [ebp - 0x394]
push eax
mov ecx, dword [ebp - 0x39c]
push ecx
mov edx, dword [ebp - 0x3a4]
push edx
mov eax, dword [ebp - 0x3a0]
push eax
mov ecx, dword [ebp - 0x3ac]
push ecx
mov edx, dword [ebp - 0x398]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x10c]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x411918
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x390]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 7
je 0x411957
mov dword [ebp - 0x9f8], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x9f8]
jmp 0x41a90c
mov ecx, dword [ebp - 0xec]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x4119d6
mov ecx, dword [ebp - 0xec]
push ecx
lea ecx, [ebp - 0x74]
call fcn.0041ab70
lea edx, [ebp - 0x74]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x4119d6
cmp dword [ebp + 0x28], 0
je 0x4119a5
mov edx, dword [ebp + 0x28]
mov dword [edx], 6
mov dword [ebp - 0x9fc], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0x9fc]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x3b8], edx
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x411a67
mov eax, dword [ebp - 0xf0]
push eax
lea ecx, [ebp - 0x84]
call fcn.0041ab70
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x411a67
cmp dword [ebp + 0x28], 0
je 0x411a36
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 5
mov dword [ebp - 0xa00], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xa00]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x3cc], ecx
mov edx, dword [ebp - 0xf4]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x411af8
mov edx, dword [ebp - 0xf4]
push edx
lea ecx, [ebp - 0x94]
call fcn.0041ab70
lea eax, [ebp - 0x94]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x411af8
cmp dword [ebp + 0x28], 0
je 0x411ac7
mov eax, dword [ebp + 0x28]
mov dword [eax], 4
mov dword [ebp - 0xa04], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xa04]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x3c0], eax
mov ecx, dword [ebp - 0xf8]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x411b89
mov ecx, dword [ebp - 0xf8]
push ecx
lea ecx, [ebp - 0xa4]
call fcn.0041ab70
lea edx, [ebp - 0xa4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x411b89
cmp dword [ebp + 0x28], 0
je 0x411b58
mov edx, dword [ebp + 0x28]
mov dword [edx], 3
mov dword [ebp - 0xa08], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xa08]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x3c4], edx
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x411c1a
mov eax, dword [ebp - 0xfc]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea ecx, [ebp - 0xb4]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x411c1a
cmp dword [ebp + 0x28], 0
je 0x411be9
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 2
mov dword [ebp - 0xa0c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xa0c]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x3bc], ecx
mov edx, dword [ebp - 0x100]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x411cab
mov edx, dword [ebp - 0x100]
push edx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea eax, [ebp - 0xc4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x411cab
cmp dword [ebp + 0x28], 0
je 0x411c7a
mov eax, dword [ebp + 0x28]
mov dword [eax], 1
mov dword [ebp - 0xa10], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xa10]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x3b4], eax
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 3
je 0x411d3c
mov ecx, dword [ebp - 0x104]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea edx, [ebp - 0xd4]
mov dword [ebp - 0x10], edx
push 3
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x411d3c
cmp dword [ebp + 0x28], 0
je 0x411d0b
mov edx, dword [ebp + 0x28]
mov dword [edx], 0
mov dword [ebp - 0xa14], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xa14]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x3c8], edx
lea eax, [ebp - 0x3b0]
push eax
mov ecx, dword [ebp - 0x3c8]
push ecx
mov edx, dword [ebp - 0x3b4]
push edx
mov eax, dword [ebp - 0x3bc]
push eax
mov ecx, dword [ebp - 0x3c4]
push ecx
mov edx, dword [ebp - 0x3c0]
push edx
mov eax, dword [ebp - 0x3cc]
push eax
mov ecx, dword [ebp - 0x3b8]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0x110]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x411db4
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x3b0]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 2
je 0x411df3
mov dword [ebp - 0xa18], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xa18]
jmp 0x41a90c
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 3
je 0x411e78
mov eax, dword [ebp - 0x100]
push eax
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x10], ecx
push 3
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x411e78
cmp dword [ebp + 0x28], 0
je 0x411e47
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 1
mov dword [ebp - 0xa1c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xa1c]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x3d0], ecx
mov edx, dword [ebp - 0x104]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 3
je 0x411f09
mov edx, dword [ebp - 0x104]
push edx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea eax, [ebp - 0xd4]
mov dword [ebp - 0x10], eax
push 3
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x411f09
cmp dword [ebp + 0x28], 0
je 0x411ed8
mov eax, dword [ebp + 0x28]
mov dword [eax], 0
mov dword [ebp - 0xa20], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xa20]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x3d8], eax
lea ecx, [ebp - 0x3d4]
push ecx
mov edx, dword [ebp - 0x3d8]
push edx
mov eax, dword [ebp - 0x3d0]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0x114]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x411f5e
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x3d4]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 2
je 0x411f9d
mov dword [ebp - 0xa24], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xa24]
jmp 0x41a90c
mov edx, dword [ebp - 0x100]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x412022
mov edx, dword [ebp - 0x100]
push edx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea eax, [ebp - 0xc4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x412022
cmp dword [ebp + 0x28], 0
je 0x411ff1
mov eax, dword [ebp + 0x28]
mov dword [eax], 1
mov dword [ebp - 0xa28], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xa28]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x3dc], eax
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x4120b3
mov ecx, dword [ebp - 0x104]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea edx, [ebp - 0xd4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x4120b3
cmp dword [ebp + 0x28], 0
je 0x412082
mov edx, dword [ebp + 0x28]
mov dword [edx], 0
mov dword [ebp - 0xa2c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xa2c]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x3e4], edx
lea eax, [ebp - 0x3e0]
push eax
mov ecx, dword [ebp - 0x3e4]
push ecx
mov edx, dword [ebp - 0x3dc]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x118]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x412108
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x3e0]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 4
je 0x412147
mov dword [ebp - 0xa30], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xa30]
jmp 0x41a90c
mov ecx, dword [ebp - 0xf8]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x4121cc
mov ecx, dword [ebp - 0xf8]
push ecx
lea ecx, [ebp - 0xa4]
call fcn.0041ab70
lea edx, [ebp - 0xa4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x4121cc
cmp dword [ebp + 0x28], 0
je 0x41219b
mov edx, dword [ebp + 0x28]
mov dword [edx], 3
mov dword [ebp - 0xa34], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xa34]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x3e8], edx
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x41225d
mov eax, dword [ebp - 0xfc]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea ecx, [ebp - 0xb4]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x41225d
cmp dword [ebp + 0x28], 0
je 0x41222c
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 2
mov dword [ebp - 0xa38], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xa38]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x3f8], ecx
mov edx, dword [ebp - 0x100]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x4122ee
mov edx, dword [ebp - 0x100]
push edx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea eax, [ebp - 0xc4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x4122ee
cmp dword [ebp + 0x28], 0
je 0x4122bd
mov eax, dword [ebp + 0x28]
mov dword [eax], 1
mov dword [ebp - 0xa3c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xa3c]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x3f0], eax
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x41237f
mov ecx, dword [ebp - 0x104]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea edx, [ebp - 0xd4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x41237f
cmp dword [ebp + 0x28], 0
je 0x41234e
mov edx, dword [ebp + 0x28]
mov dword [edx], 0
mov dword [ebp - 0xa40], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xa40]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x3f4], edx
lea eax, [ebp - 0x3ec]
push eax
mov ecx, dword [ebp - 0x3f4]
push ecx
mov edx, dword [ebp - 0x3f0]
push edx
mov eax, dword [ebp - 0x3f8]
push eax
mov ecx, dword [ebp - 0x3e8]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0x11c]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x4123e2
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x3ec]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 9
je 0x412421
mov dword [ebp - 0xa44], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xa44]
jmp 0x41a90c
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x4124a0
mov eax, dword [ebp - 0xe4]
push eax
lea ecx, [ebp - 0x54]
call fcn.0041ab70
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x4124a0
cmp dword [ebp + 0x28], 0
je 0x41246f
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 8
mov dword [ebp - 0xa48], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xa48]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x408], ecx
mov edx, dword [ebp - 0xe8]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x41252b
mov edx, dword [ebp - 0xe8]
push edx
lea ecx, [ebp - 0x64]
call fcn.0041ab70
lea eax, [ebp - 0x64]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x41252b
cmp dword [ebp + 0x28], 0
je 0x4124fa
mov eax, dword [ebp + 0x28]
mov dword [eax], 7
mov dword [ebp - 0xa4c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xa4c]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x420], eax
mov ecx, dword [ebp - 0xec]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x4125b6
mov ecx, dword [ebp - 0xec]
push ecx
lea ecx, [ebp - 0x74]
call fcn.0041ab70
lea edx, [ebp - 0x74]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x4125b6
cmp dword [ebp + 0x28], 0
je 0x412585
mov edx, dword [ebp + 0x28]
mov dword [edx], 6
mov dword [ebp - 0xa50], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xa50]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x414], edx
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 3
je 0x412647
mov eax, dword [ebp - 0xf0]
push eax
lea ecx, [ebp - 0x84]
call fcn.0041ab70
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x10], ecx
push 3
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x412647
cmp dword [ebp + 0x28], 0
je 0x412616
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 5
mov dword [ebp - 0xa54], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xa54]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x418], ecx
mov edx, dword [ebp - 0xf4]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x4126d8
mov edx, dword [ebp - 0xf4]
push edx
lea ecx, [ebp - 0x94]
call fcn.0041ab70
lea eax, [ebp - 0x94]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x4126d8
cmp dword [ebp + 0x28], 0
je 0x4126a7
mov eax, dword [ebp + 0x28]
mov dword [eax], 4
mov dword [ebp - 0xa58], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xa58]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x410], eax
mov ecx, dword [ebp - 0xf8]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x412769
mov ecx, dword [ebp - 0xf8]
push ecx
lea ecx, [ebp - 0xa4]
call fcn.0041ab70
lea edx, [ebp - 0xa4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x412769
cmp dword [ebp + 0x28], 0
je 0x412738
mov edx, dword [ebp + 0x28]
mov dword [edx], 3
mov dword [ebp - 0xa5c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xa5c]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x404], edx
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x4127fa
mov eax, dword [ebp - 0xfc]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea ecx, [ebp - 0xb4]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x4127fa
cmp dword [ebp + 0x28], 0
je 0x4127c9
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 2
mov dword [ebp - 0xa60], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xa60]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x41c], ecx
mov edx, dword [ebp - 0x100]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 3
je 0x41288b
mov edx, dword [ebp - 0x100]
push edx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea eax, [ebp - 0xc4]
mov dword [ebp - 0x10], eax
push 3
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x41288b
cmp dword [ebp + 0x28], 0
je 0x41285a
mov eax, dword [ebp + 0x28]
mov dword [eax], 1
mov dword [ebp - 0xa64], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xa64]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x3fc], eax
mov dword [ebp - 0x400], 0
mov ecx, dword [ebp - 0x104]
movzx edx, word [ecx]
cmp edx, 0x400c
jne 0x4128de
mov eax, dword [ebp - 0x104]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x400], eax
mov ecx, 0xc
mov edx, dword [ebp - 0x10]
mov word [edx], cx
jmp 0x4128ed
mov eax, dword [ebp - 0x104]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x400], ecx
lea edx, [ebp - 0x40c]
push edx
mov eax, dword [ebp - 0x400]
push eax
mov ecx, dword [ebp - 0x3fc]
push ecx
mov edx, dword [ebp - 0x41c]
push edx
mov eax, dword [ebp - 0x404]
push eax
mov ecx, dword [ebp - 0x410]
push ecx
mov edx, dword [ebp - 0x418]
push edx
mov eax, dword [ebp - 0x414]
push eax
mov ecx, dword [ebp - 0x420]
push ecx
mov edx, dword [ebp - 0x408]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x120]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x412967
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x40c]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 6
je 0x4129a6
mov dword [ebp - 0xa68], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xa68]
jmp 0x41a90c
mov ecx, dword [ebp - 0xf0]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x412a2b
mov ecx, dword [ebp - 0xf0]
push ecx
lea ecx, [ebp - 0x84]
call fcn.0041ab70
lea edx, [ebp - 0x84]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x412a2b
cmp dword [ebp + 0x28], 0
je 0x4129fa
mov edx, dword [ebp + 0x28]
mov dword [edx], 5
mov dword [ebp - 0xa6c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xa6c]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x428], edx
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 3
je 0x412abc
mov eax, dword [ebp - 0xf4]
push eax
lea ecx, [ebp - 0x94]
call fcn.0041ab70
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x10], ecx
push 3
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x412abc
cmp dword [ebp + 0x28], 0
je 0x412a8b
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 4
mov dword [ebp - 0xa70], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xa70]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x43c], ecx
mov edx, dword [ebp - 0xf8]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x412b4d
mov edx, dword [ebp - 0xf8]
push edx
lea ecx, [ebp - 0xa4]
call fcn.0041ab70
lea eax, [ebp - 0xa4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x412b4d
cmp dword [ebp + 0x28], 0
je 0x412b1c
mov eax, dword [ebp + 0x28]
mov dword [eax], 3
mov dword [ebp - 0xa74], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xa74]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x430], eax
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x412bde
mov ecx, dword [ebp - 0xfc]
push ecx
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea edx, [ebp - 0xb4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x412bde
cmp dword [ebp + 0x28], 0
je 0x412bad
mov edx, dword [ebp + 0x28]
mov dword [edx], 2
mov dword [ebp - 0xa78], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xa78]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x434], edx
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 3
je 0x412c6f
mov eax, dword [ebp - 0x100]
push eax
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x10], ecx
push 3
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x412c6f
cmp dword [ebp + 0x28], 0
je 0x412c3e
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 1
mov dword [ebp - 0xa7c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xa7c]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x42c], ecx
mov edx, dword [ebp - 0x104]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x412d00
mov edx, dword [ebp - 0x104]
push edx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea eax, [ebp - 0xd4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x412d00
cmp dword [ebp + 0x28], 0
je 0x412ccf
mov eax, dword [ebp + 0x28]
mov dword [eax], 0
mov dword [ebp - 0xa80], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xa80]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x424], eax
lea ecx, [ebp - 0x438]
push ecx
mov edx, dword [ebp - 0x424]
push edx
mov eax, dword [ebp - 0x42c]
push eax
mov ecx, dword [ebp - 0x434]
push ecx
mov edx, dword [ebp - 0x430]
push edx
mov eax, dword [ebp - 0x43c]
push eax
mov ecx, dword [ebp - 0x428]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0x124]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x412d71
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x438]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 8
je 0x412db0
mov dword [ebp - 0xa84], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xa84]
jmp 0x41a90c
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x412e2f
mov eax, dword [ebp - 0xe8]
push eax
lea ecx, [ebp - 0x64]
call fcn.0041ab70
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x412e2f
cmp dword [ebp + 0x28], 0
je 0x412dfe
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 7
mov dword [ebp - 0xa88], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xa88]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x44c], ecx
mov edx, dword [ebp - 0xec]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x412eba
mov edx, dword [ebp - 0xec]
push edx
lea ecx, [ebp - 0x74]
call fcn.0041ab70
lea eax, [ebp - 0x74]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x412eba
cmp dword [ebp + 0x28], 0
je 0x412e89
mov eax, dword [ebp + 0x28]
mov dword [eax], 6
mov dword [ebp - 0xa8c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xa8c]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x460], eax
mov ecx, dword [ebp - 0xf0]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x412f4b
mov ecx, dword [ebp - 0xf0]
push ecx
lea ecx, [ebp - 0x84]
call fcn.0041ab70
lea edx, [ebp - 0x84]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x412f4b
cmp dword [ebp + 0x28], 0
je 0x412f1a
mov edx, dword [ebp + 0x28]
mov dword [edx], 5
mov dword [ebp - 0xa90], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xa90]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x454], edx
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x412fdc
mov eax, dword [ebp - 0xf4]
push eax
lea ecx, [ebp - 0x94]
call fcn.0041ab70
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x412fdc
cmp dword [ebp + 0x28], 0
je 0x412fab
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 4
mov dword [ebp - 0xa94], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xa94]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x458], ecx
mov edx, dword [ebp - 0xf8]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x41306d
mov edx, dword [ebp - 0xf8]
push edx
lea ecx, [ebp - 0xa4]
call fcn.0041ab70
lea eax, [ebp - 0xa4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x41306d
cmp dword [ebp + 0x28], 0
je 0x41303c
mov eax, dword [ebp + 0x28]
mov dword [eax], 3
mov dword [ebp - 0xa98], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xa98]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x450], eax
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x4130fe
mov ecx, dword [ebp - 0xfc]
push ecx
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea edx, [ebp - 0xb4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x4130fe
cmp dword [ebp + 0x28], 0
je 0x4130cd
mov edx, dword [ebp + 0x28]
mov dword [edx], 2
mov dword [ebp - 0xa9c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xa9c]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x448], edx
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 3
je 0x41318f
mov eax, dword [ebp - 0x100]
push eax
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x10], ecx
push 3
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x41318f
cmp dword [ebp + 0x28], 0
je 0x41315e
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 1
mov dword [ebp - 0xaa0], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xaa0]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x45c], ecx
mov edx, dword [ebp - 0x104]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x413220
mov edx, dword [ebp - 0x104]
push edx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea eax, [ebp - 0xd4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x413220
cmp dword [ebp + 0x28], 0
je 0x4131ef
mov eax, dword [ebp + 0x28]
mov dword [eax], 0
mov dword [ebp - 0xaa4], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xaa4]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x440], eax
lea ecx, [ebp - 0x444]
push ecx
mov edx, dword [ebp - 0x440]
push edx
mov eax, dword [ebp - 0x45c]
push eax
mov ecx, dword [ebp - 0x448]
push ecx
mov edx, dword [ebp - 0x450]
push edx
mov eax, dword [ebp - 0x458]
push eax
mov ecx, dword [ebp - 0x454]
push ecx
mov edx, dword [ebp - 0x460]
push edx
mov eax, dword [ebp - 0x44c]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0x128]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x41329f
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x444]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 1
je 0x4132de
mov dword [ebp - 0xaa8], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xaa8]
jmp 0x41a90c
mov edx, dword [ebp - 0x104]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x413363
mov edx, dword [ebp - 0x104]
push edx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea eax, [ebp - 0xd4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x413363
cmp dword [ebp + 0x28], 0
je 0x413332
mov eax, dword [ebp + 0x28]
mov dword [eax], 0
mov dword [ebp - 0xaac], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xaac]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x464], eax
lea ecx, [ebp - 0x468]
push ecx
mov edx, dword [ebp - 0x464]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x12c]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x4133b1
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x468]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 5
je 0x4133f0
mov dword [ebp - 0xab0], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xab0]
jmp 0x41a90c
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x413475
mov ecx, dword [ebp - 0xf4]
push ecx
lea ecx, [ebp - 0x94]
call fcn.0041ab70
lea edx, [ebp - 0x94]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x413475
cmp dword [ebp + 0x28], 0
je 0x413444
mov edx, dword [ebp + 0x28]
mov dword [edx], 4
mov dword [ebp - 0xab4], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xab4]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x470], edx
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x413506
mov eax, dword [ebp - 0xf8]
push eax
lea ecx, [ebp - 0xa4]
call fcn.0041ab70
lea ecx, [ebp - 0xa4]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x413506
cmp dword [ebp + 0x28], 0
je 0x4134d5
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 3
mov dword [ebp - 0xab8], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xab8]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x480], ecx
mov edx, dword [ebp - 0xfc]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x413597
mov edx, dword [ebp - 0xfc]
push edx
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea eax, [ebp - 0xb4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x413597
cmp dword [ebp + 0x28], 0
je 0x413566
mov eax, dword [ebp + 0x28]
mov dword [eax], 2
mov dword [ebp - 0xabc], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xabc]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x478], eax
mov ecx, dword [ebp - 0x100]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 3
je 0x413628
mov ecx, dword [ebp - 0x100]
push ecx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea edx, [ebp - 0xc4]
mov dword [ebp - 0x10], edx
push 3
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x413628
cmp dword [ebp + 0x28], 0
je 0x4135f7
mov edx, dword [ebp + 0x28]
mov dword [edx], 1
mov dword [ebp - 0xac0], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xac0]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x47c], edx
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 3
je 0x4136b9
mov eax, dword [ebp - 0x104]
push eax
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x10], ecx
push 3
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x4136b9
cmp dword [ebp + 0x28], 0
je 0x413688
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 0
mov dword [ebp - 0xac4], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xac4]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x474], ecx
lea edx, [ebp - 0x46c]
push edx
mov eax, dword [ebp - 0x474]
push eax
mov ecx, dword [ebp - 0x47c]
push ecx
mov edx, dword [ebp - 0x478]
push edx
mov eax, dword [ebp - 0x480]
push eax
mov ecx, dword [ebp - 0x470]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0x130]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x413723
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x46c]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 5
je 0x413762
mov dword [ebp - 0xac8], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xac8]
jmp 0x41a90c
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x4137e7
mov eax, dword [ebp - 0xf4]
push eax
lea ecx, [ebp - 0x94]
call fcn.0041ab70
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x4137e7
cmp dword [ebp + 0x28], 0
je 0x4137b6
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 4
mov dword [ebp - 0xacc], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xacc]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x488], ecx
mov edx, dword [ebp - 0xf8]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x413878
mov edx, dword [ebp - 0xf8]
push edx
lea ecx, [ebp - 0xa4]
call fcn.0041ab70
lea eax, [ebp - 0xa4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x413878
cmp dword [ebp + 0x28], 0
je 0x413847
mov eax, dword [ebp + 0x28]
mov dword [eax], 3
mov dword [ebp - 0xad0], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xad0]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x498], eax
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x413909
mov ecx, dword [ebp - 0xfc]
push ecx
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea edx, [ebp - 0xb4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x413909
cmp dword [ebp + 0x28], 0
je 0x4138d8
mov edx, dword [ebp + 0x28]
mov dword [edx], 2
mov dword [ebp - 0xad4], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xad4]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x490], edx
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 3
je 0x41399a
mov eax, dword [ebp - 0x100]
push eax
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x10], ecx
push 3
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x41399a
cmp dword [ebp + 0x28], 0
je 0x413969
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 1
mov dword [ebp - 0xad8], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xad8]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x494], ecx
mov edx, dword [ebp - 0x104]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 3
je 0x413a2b
mov edx, dword [ebp - 0x104]
push edx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea eax, [ebp - 0xd4]
mov dword [ebp - 0x10], eax
push 3
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x413a2b
cmp dword [ebp + 0x28], 0
je 0x4139fa
mov eax, dword [ebp + 0x28]
mov dword [eax], 0
mov dword [ebp - 0xadc], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xadc]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x48c], eax
lea ecx, [ebp - 0x484]
push ecx
mov edx, dword [ebp - 0x48c]
push edx
mov eax, dword [ebp - 0x494]
push eax
mov ecx, dword [ebp - 0x490]
push ecx
mov edx, dword [ebp - 0x498]
push edx
mov eax, dword [ebp - 0x488]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0x134]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x413a95
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x484]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 3
je 0x413ad4
mov dword [ebp - 0xae0], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xae0]
jmp 0x41a90c
mov edx, dword [ebp - 0xfc]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 3
je 0x413b59
mov edx, dword [ebp - 0xfc]
push edx
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea eax, [ebp - 0xb4]
mov dword [ebp - 0x10], eax
push 3
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x413b59
cmp dword [ebp + 0x28], 0
je 0x413b28
mov eax, dword [ebp + 0x28]
mov dword [eax], 2
mov dword [ebp - 0xae4], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xae4]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x49c], eax
mov ecx, dword [ebp - 0x100]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 3
je 0x413bea
mov ecx, dword [ebp - 0x100]
push ecx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea edx, [ebp - 0xc4]
mov dword [ebp - 0x10], edx
push 3
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x413bea
cmp dword [ebp + 0x28], 0
je 0x413bb9
mov edx, dword [ebp + 0x28]
mov dword [edx], 1
mov dword [ebp - 0xae8], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xae8]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x4a8], edx
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x413c7b
mov eax, dword [ebp - 0x104]
push eax
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x413c7b
cmp dword [ebp + 0x28], 0
je 0x413c4a
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 0
mov dword [ebp - 0xaec], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xaec]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x4a0], ecx
lea edx, [ebp - 0x4a4]
push edx
mov eax, dword [ebp - 0x4a0]
push eax
mov ecx, dword [ebp - 0x4a8]
push ecx
mov edx, dword [ebp - 0x49c]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x138]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x413cd7
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x4a4]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 1
je 0x413d16
mov dword [ebp - 0xaf0], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xaf0]
jmp 0x41a90c
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x413d9b
mov ecx, dword [ebp - 0x104]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea edx, [ebp - 0xd4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x413d9b
cmp dword [ebp + 0x28], 0
je 0x413d6a
mov edx, dword [ebp + 0x28]
mov dword [edx], 0
mov dword [ebp - 0xaf4], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xaf4]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x4ac], edx
lea eax, [ebp - 0x4b0]
push eax
mov ecx, dword [ebp - 0x4ac]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0x13c]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x413de9
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x4b0]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 0
je 0x413e28
mov dword [ebp - 0xaf8], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xaf8]
jmp 0x41a90c
lea eax, [ebp - 0x4b4]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0x140]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x413e63
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x4b4]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 0
je 0x413ea2
mov dword [ebp - 0xafc], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xafc]
jmp 0x41a90c
lea edx, [ebp - 0x4b8]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x144]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x413edd
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x4b8]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 0
je 0x413f1c
mov dword [ebp - 0xb00], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xb00]
jmp 0x41a90c
lea ecx, [ebp - 0x4bc]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0x148]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x413f57
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x4bc]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 1
je 0x413f96
mov dword [ebp - 0xb04], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xb04]
jmp 0x41a90c
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 3
je 0x41401b
mov eax, dword [ebp - 0x104]
push eax
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x10], ecx
push 3
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x41401b
cmp dword [ebp + 0x28], 0
je 0x413fea
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 0
mov dword [ebp - 0xb08], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xb08]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x4c0], ecx
lea edx, [ebp - 0x4c4]
push edx
mov eax, dword [ebp - 0x4c0]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0x14c]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x414069
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x4c4]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 1
je 0x4140a8
mov dword [ebp - 0xb0c], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xb0c]
jmp 0x41a90c
mov edx, dword [ebp - 0x104]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x41412d
mov edx, dword [ebp - 0x104]
push edx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea eax, [ebp - 0xd4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x41412d
cmp dword [ebp + 0x28], 0
je 0x4140fc
mov eax, dword [ebp + 0x28]
mov dword [eax], 0
mov dword [ebp - 0xb10], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xb10]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x4c8], eax
lea ecx, [ebp - 0x4cc]
push ecx
mov edx, dword [ebp - 0x4c8]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x150]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x41417b
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x4cc]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 4
je 0x4141ba
mov dword [ebp - 0xb14], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xb14]
jmp 0x41a90c
mov ecx, dword [ebp - 0xf8]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x41423f
mov ecx, dword [ebp - 0xf8]
push ecx
lea ecx, [ebp - 0xa4]
call fcn.0041ab70
lea edx, [ebp - 0xa4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x41423f
cmp dword [ebp + 0x28], 0
je 0x41420e
mov edx, dword [ebp + 0x28]
mov dword [edx], 3
mov dword [ebp - 0xb18], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xb18]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x4d0], edx
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x4142d0
mov eax, dword [ebp - 0xfc]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea ecx, [ebp - 0xb4]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x4142d0
cmp dword [ebp + 0x28], 0
je 0x41429f
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 2
mov dword [ebp - 0xb1c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xb1c]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x4e0], ecx
mov edx, dword [ebp - 0x100]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x414361
mov edx, dword [ebp - 0x100]
push edx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea eax, [ebp - 0xc4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x414361
cmp dword [ebp + 0x28], 0
je 0x414330
mov eax, dword [ebp + 0x28]
mov dword [eax], 1
mov dword [ebp - 0xb20], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xb20]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x4d8], eax
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 3
je 0x4143f2
mov ecx, dword [ebp - 0x104]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea edx, [ebp - 0xd4]
mov dword [ebp - 0x10], edx
push 3
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x4143f2
cmp dword [ebp + 0x28], 0
je 0x4143c1
mov edx, dword [ebp + 0x28]
mov dword [edx], 0
mov dword [ebp - 0xb24], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xb24]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x4dc], edx
lea eax, [ebp - 0x4d4]
push eax
mov ecx, dword [ebp - 0x4dc]
push ecx
mov edx, dword [ebp - 0x4d8]
push edx
mov eax, dword [ebp - 0x4e0]
push eax
mov ecx, dword [ebp - 0x4d0]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0x154]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x414455
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x4d4]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 4
je 0x414494
mov dword [ebp - 0xb28], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xb28]
jmp 0x41a90c
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x414519
mov eax, dword [ebp - 0xf8]
push eax
lea ecx, [ebp - 0xa4]
call fcn.0041ab70
lea ecx, [ebp - 0xa4]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x414519
cmp dword [ebp + 0x28], 0
je 0x4144e8
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 3
mov dword [ebp - 0xb2c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xb2c]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x4e4], ecx
mov edx, dword [ebp - 0xfc]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 3
je 0x4145aa
mov edx, dword [ebp - 0xfc]
push edx
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea eax, [ebp - 0xb4]
mov dword [ebp - 0x10], eax
push 3
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x4145aa
cmp dword [ebp + 0x28], 0
je 0x414579
mov eax, dword [ebp + 0x28]
mov dword [eax], 2
mov dword [ebp - 0xb30], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xb30]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x4f4], eax
mov ecx, dword [ebp - 0x100]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 3
je 0x41463b
mov ecx, dword [ebp - 0x100]
push ecx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea edx, [ebp - 0xc4]
mov dword [ebp - 0x10], edx
push 3
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x41463b
cmp dword [ebp + 0x28], 0
je 0x41460a
mov edx, dword [ebp + 0x28]
mov dword [edx], 1
mov dword [ebp - 0xb34], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xb34]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x4ec], edx
mov dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0x104]
movzx ecx, word [eax]
cmp ecx, 0x400c
jne 0x41468e
mov edx, dword [ebp - 0x104]
mov eax, dword [edx + 8]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x4f0], edx
mov eax, 0xc
mov ecx, dword [ebp - 0x10]
mov word [ecx], ax
jmp 0x41469d
mov edx, dword [ebp - 0x104]
mov eax, dword [edx + 8]
mov dword [ebp - 0x4f0], eax
lea ecx, [ebp - 0x4e8]
push ecx
mov edx, dword [ebp - 0x4f0]
push edx
mov eax, dword [ebp - 0x4ec]
push eax
mov ecx, dword [ebp - 0x4f4]
push ecx
mov edx, dword [ebp - 0x4e4]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x158]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x4146f4
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x4e8]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 2
je 0x414733
mov dword [ebp - 0xb38], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xb38]
jmp 0x41a90c
mov ecx, dword [ebp - 0x100]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x4147b8
mov ecx, dword [ebp - 0x100]
push ecx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea edx, [ebp - 0xc4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x4147b8
cmp dword [ebp + 0x28], 0
je 0x414787
mov edx, dword [ebp + 0x28]
mov dword [edx], 1
mov dword [ebp - 0xb3c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xb3c]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x4f8], edx
mov dword [ebp - 0x500], 0
mov eax, dword [ebp - 0x104]
movzx ecx, word [eax]
cmp ecx, 0x400c
jne 0x41480b
mov edx, dword [ebp - 0x104]
mov eax, dword [edx + 8]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x500], edx
mov eax, 0xc
mov ecx, dword [ebp - 0x10]
mov word [ecx], ax
jmp 0x41481a
mov edx, dword [ebp - 0x104]
mov eax, dword [edx + 8]
mov dword [ebp - 0x500], eax
lea ecx, [ebp - 0x4fc]
push ecx
mov edx, dword [ebp - 0x500]
push edx
mov eax, dword [ebp - 0x4f8]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0x15c]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x414863
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x4fc]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 4
je 0x4148a2
mov dword [ebp - 0xb40], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xb40]
jmp 0x41a90c
mov edx, dword [ebp - 0xf8]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x414927
mov edx, dword [ebp - 0xf8]
push edx
lea ecx, [ebp - 0xa4]
call fcn.0041ab70
lea eax, [ebp - 0xa4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x414927
cmp dword [ebp + 0x28], 0
je 0x4148f6
mov eax, dword [ebp + 0x28]
mov dword [eax], 3
mov dword [ebp - 0xb44], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xb44]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x504], eax
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 3
je 0x4149b8
mov ecx, dword [ebp - 0xfc]
push ecx
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea edx, [ebp - 0xb4]
mov dword [ebp - 0x10], edx
push 3
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x4149b8
cmp dword [ebp + 0x28], 0
je 0x414987
mov edx, dword [ebp + 0x28]
mov dword [edx], 2
mov dword [ebp - 0xb48], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xb48]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x514], edx
mov dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0x100]
movzx ecx, word [eax]
cmp ecx, 0x400c
jne 0x414a0b
mov edx, dword [ebp - 0x100]
mov eax, dword [edx + 8]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x50c], edx
mov eax, 0xc
mov ecx, dword [ebp - 0x10]
mov word [ecx], ax
jmp 0x414a1a
mov edx, dword [ebp - 0x100]
mov eax, dword [edx + 8]
mov dword [ebp - 0x50c], eax
mov dword [ebp - 0x510], 0
mov ecx, dword [ebp - 0x104]
movzx edx, word [ecx]
cmp edx, 0x400c
jne 0x414a61
mov eax, dword [ebp - 0x104]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x510], eax
mov ecx, 0xc
mov edx, dword [ebp - 0x10]
mov word [edx], cx
jmp 0x414a70
mov eax, dword [ebp - 0x104]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x510], ecx
lea edx, [ebp - 0x508]
push edx
mov eax, dword [ebp - 0x510]
push eax
mov ecx, dword [ebp - 0x50c]
push ecx
mov edx, dword [ebp - 0x514]
push edx
mov eax, dword [ebp - 0x504]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0x160]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x414ac7
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x508]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 2
je 0x414b06
mov dword [ebp - 0xb4c], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xb4c]
jmp 0x41a90c
mov edx, dword [ebp - 0x100]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x414b8b
mov edx, dword [ebp - 0x100]
push edx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea eax, [ebp - 0xc4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x414b8b
cmp dword [ebp + 0x28], 0
je 0x414b5a
mov eax, dword [ebp + 0x28]
mov dword [eax], 1
mov dword [ebp - 0xb50], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xb50]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x518], eax
mov dword [ebp - 0x520], 0
mov ecx, dword [ebp - 0x104]
movzx edx, word [ecx]
cmp edx, 0x400c
jne 0x414bde
mov eax, dword [ebp - 0x104]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x520], eax
mov ecx, 0xc
mov edx, dword [ebp - 0x10]
mov word [edx], cx
jmp 0x414bed
mov eax, dword [ebp - 0x104]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x520], ecx
lea edx, [ebp - 0x51c]
push edx
mov eax, dword [ebp - 0x520]
push eax
mov ecx, dword [ebp - 0x518]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0x164]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x414c36
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x51c]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 2
je 0x414c75
mov dword [ebp - 0xb54], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xb54]
jmp 0x41a90c
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x414cfa
mov eax, dword [ebp - 0x100]
push eax
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x414cfa
cmp dword [ebp + 0x28], 0
je 0x414cc9
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 1
mov dword [ebp - 0xb58], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xb58]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x524], ecx
mov dword [ebp - 0x52c], 0
mov edx, dword [ebp - 0x104]
movzx eax, word [edx]
cmp eax, 0x400c
jne 0x414d4c
mov ecx, dword [ebp - 0x104]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x52c], ecx
mov edx, 0xc
mov eax, dword [ebp - 0x10]
mov word [eax], dx
jmp 0x414d5b
mov ecx, dword [ebp - 0x104]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x52c], edx
lea eax, [ebp - 0x528]
push eax
mov ecx, dword [ebp - 0x52c]
push ecx
mov edx, dword [ebp - 0x524]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x168]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x414da4
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x528]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 4
je 0x414de3
mov dword [ebp - 0xb5c], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xb5c]
jmp 0x41a90c
mov ecx, dword [ebp - 0xf8]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x414e68
mov ecx, dword [ebp - 0xf8]
push ecx
lea ecx, [ebp - 0xa4]
call fcn.0041ab70
lea edx, [ebp - 0xa4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x414e68
cmp dword [ebp + 0x28], 0
je 0x414e37
mov edx, dword [ebp + 0x28]
mov dword [edx], 3
mov dword [ebp - 0xb60], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xb60]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x530], edx
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 3
je 0x414ef9
mov eax, dword [ebp - 0xfc]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea ecx, [ebp - 0xb4]
mov dword [ebp - 0x10], ecx
push 3
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x414ef9
cmp dword [ebp + 0x28], 0
je 0x414ec8
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 2
mov dword [ebp - 0xb64], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xb64]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x540], ecx
mov edx, dword [ebp - 0x100]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 3
je 0x414f8a
mov edx, dword [ebp - 0x100]
push edx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea eax, [ebp - 0xc4]
mov dword [ebp - 0x10], eax
push 3
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x414f8a
cmp dword [ebp + 0x28], 0
je 0x414f59
mov eax, dword [ebp + 0x28]
mov dword [eax], 1
mov dword [ebp - 0xb68], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xb68]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x538], eax
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x41501b
mov ecx, dword [ebp - 0x104]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea edx, [ebp - 0xd4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x41501b
cmp dword [ebp + 0x28], 0
je 0x414fea
mov edx, dword [ebp + 0x28]
mov dword [edx], 0
mov dword [ebp - 0xb6c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xb6c]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x53c], edx
lea eax, [ebp - 0x534]
push eax
mov ecx, dword [ebp - 0x53c]
push ecx
mov edx, dword [ebp - 0x538]
push edx
mov eax, dword [ebp - 0x540]
push eax
mov ecx, dword [ebp - 0x530]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0x16c]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x41507e
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x534]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 2
je 0x4150bd
mov dword [ebp - 0xb70], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xb70]
jmp 0x41a90c
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x415142
mov eax, dword [ebp - 0x100]
push eax
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x415142
cmp dword [ebp + 0x28], 0
je 0x415111
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 1
mov dword [ebp - 0xb74], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xb74]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x544], ecx
mov edx, dword [ebp - 0x104]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x4151d3
mov edx, dword [ebp - 0x104]
push edx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea eax, [ebp - 0xd4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x4151d3
cmp dword [ebp + 0x28], 0
je 0x4151a2
mov eax, dword [ebp + 0x28]
mov dword [eax], 0
mov dword [ebp - 0xb78], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xb78]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x54c], eax
lea ecx, [ebp - 0x548]
push ecx
mov edx, dword [ebp - 0x54c]
push edx
mov eax, dword [ebp - 0x544]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0x170]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x415228
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x548]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 2
je 0x415267
mov dword [ebp - 0xb7c], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xb7c]
jmp 0x41a90c
mov edx, dword [ebp - 0x100]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x4152ec
mov edx, dword [ebp - 0x100]
push edx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea eax, [ebp - 0xc4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x4152ec
cmp dword [ebp + 0x28], 0
je 0x4152bb
mov eax, dword [ebp + 0x28]
mov dword [eax], 1
mov dword [ebp - 0xb80], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xb80]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x550], eax
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 3
je 0x41537d
mov ecx, dword [ebp - 0x104]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea edx, [ebp - 0xd4]
mov dword [ebp - 0x10], edx
push 3
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x41537d
cmp dword [ebp + 0x28], 0
je 0x41534c
mov edx, dword [ebp + 0x28]
mov dword [edx], 0
mov dword [ebp - 0xb84], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xb84]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x558], edx
lea eax, [ebp - 0x554]
push eax
mov ecx, dword [ebp - 0x558]
push ecx
mov edx, dword [ebp - 0x550]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x174]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x4153d2
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x554]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 1
je 0x415411
mov dword [ebp - 0xb88], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xb88]
jmp 0x41a90c
mov dword [ebp - 0x55c], 0
mov ecx, dword [ebp - 0x104]
movzx edx, word [ecx]
cmp edx, 0x400c
jne 0x41545b
mov eax, dword [ebp - 0x104]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x10]
add eax, 8
mov dword [ebp - 0x55c], eax
mov ecx, 3
mov edx, dword [ebp - 0x10]
mov word [edx], cx
jmp 0x41546a
mov eax, dword [ebp - 0x104]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x55c], ecx
lea edx, [ebp - 0x560]
push edx
mov eax, dword [ebp - 0x55c]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0x178]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x4154ac
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x560]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 0
je 0x4154eb
mov dword [ebp - 0xb8c], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xb8c]
jmp 0x41a90c
lea edx, [ebp - 0x564]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x17c]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x415526
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x564]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 1
je 0x415565
mov dword [ebp - 0xb90], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xb90]
jmp 0x41a90c
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 3
je 0x4155ea
mov ecx, dword [ebp - 0x104]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea edx, [ebp - 0xd4]
mov dword [ebp - 0x10], edx
push 3
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x4155ea
cmp dword [ebp + 0x28], 0
je 0x4155b9
mov edx, dword [ebp + 0x28]
mov dword [edx], 0
mov dword [ebp - 0xb94], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xb94]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x568], edx
lea eax, [ebp - 0x56c]
push eax
mov ecx, dword [ebp - 0x568]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0x180]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x415638
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x56c]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 1
je 0x415677
mov dword [ebp - 0xb98], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xb98]
jmp 0x41a90c
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 3
je 0x4156fc
mov eax, dword [ebp - 0x104]
push eax
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x10], ecx
push 3
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x4156fc
cmp dword [ebp + 0x28], 0
je 0x4156cb
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 0
mov dword [ebp - 0xb9c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xb9c]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x570], ecx
lea edx, [ebp - 0x574]
push edx
mov eax, dword [ebp - 0x570]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0x184]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x41574a
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x574]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 1
je 0x415789
mov dword [ebp - 0xba0], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xba0]
jmp 0x41a90c
mov edx, dword [ebp - 0x104]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 3
je 0x41580e
mov edx, dword [ebp - 0x104]
push edx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea eax, [ebp - 0xd4]
mov dword [ebp - 0x10], eax
push 3
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x41580e
cmp dword [ebp + 0x28], 0
je 0x4157dd
mov eax, dword [ebp + 0x28]
mov dword [eax], 0
mov dword [ebp - 0xba4], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xba4]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x578], eax
lea ecx, [ebp - 0x57c]
push ecx
mov edx, dword [ebp - 0x578]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x188]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x41585c
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x57c]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 1
je 0x41589b
mov dword [ebp - 0xba8], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xba8]
jmp 0x41a90c
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 3
je 0x415920
mov ecx, dword [ebp - 0x104]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea edx, [ebp - 0xd4]
mov dword [ebp - 0x10], edx
push 3
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x415920
cmp dword [ebp + 0x28], 0
je 0x4158ef
mov edx, dword [ebp + 0x28]
mov dword [edx], 0
mov dword [ebp - 0xbac], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xbac]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x580], edx
lea eax, [ebp - 0x584]
push eax
mov ecx, dword [ebp - 0x580]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0x18c]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x41596e
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x584]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 2
je 0x4159ad
mov dword [ebp - 0xbb0], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xbb0]
jmp 0x41a90c
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x415a32
mov eax, dword [ebp - 0x100]
push eax
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x415a32
cmp dword [ebp + 0x28], 0
je 0x415a01
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 1
mov dword [ebp - 0xbb4], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xbb4]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x588], ecx
mov edx, dword [ebp - 0x104]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x415ac3
mov edx, dword [ebp - 0x104]
push edx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea eax, [ebp - 0xd4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x415ac3
cmp dword [ebp + 0x28], 0
je 0x415a92
mov eax, dword [ebp + 0x28]
mov dword [eax], 0
mov dword [ebp - 0xbb8], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xbb8]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x590], eax
lea ecx, [ebp - 0x58c]
push ecx
mov edx, dword [ebp - 0x590]
push edx
mov eax, dword [ebp - 0x588]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0x190]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x415b18
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x58c]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 0
je 0x415b57
mov dword [ebp - 0xbbc], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xbbc]
jmp 0x41a90c
lea edx, [ebp - 0x594]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x194]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x415b92
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x594]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 2
je 0x415bd1
mov dword [ebp - 0xbc0], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xbc0]
jmp 0x41a90c
mov ecx, dword [ebp - 0x100]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x415c56
mov ecx, dword [ebp - 0x100]
push ecx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea edx, [ebp - 0xc4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x415c56
cmp dword [ebp + 0x28], 0
je 0x415c25
mov edx, dword [ebp + 0x28]
mov dword [edx], 1
mov dword [ebp - 0xbc4], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xbc4]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x598], edx
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x415ce7
mov eax, dword [ebp - 0x104]
push eax
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x415ce7
cmp dword [ebp + 0x28], 0
je 0x415cb6
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 0
mov dword [ebp - 0xbc8], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xbc8]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x5a0], ecx
lea edx, [ebp - 0x59c]
push edx
mov eax, dword [ebp - 0x5a0]
push eax
mov ecx, dword [ebp - 0x598]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0x198]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x415d3c
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x59c]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 2
je 0x415d7b
mov dword [ebp - 0xbcc], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xbcc]
jmp 0x41a90c
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 3
je 0x415e00
mov eax, dword [ebp - 0x100]
push eax
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x10], ecx
push 3
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x415e00
cmp dword [ebp + 0x28], 0
je 0x415dcf
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 1
mov dword [ebp - 0xbd0], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xbd0]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x5a4], ecx
mov edx, dword [ebp - 0x104]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 3
je 0x415e91
mov edx, dword [ebp - 0x104]
push edx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea eax, [ebp - 0xd4]
mov dword [ebp - 0x10], eax
push 3
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x415e91
cmp dword [ebp + 0x28], 0
je 0x415e60
mov eax, dword [ebp + 0x28]
mov dword [eax], 0
mov dword [ebp - 0xbd4], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xbd4]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x5ac], eax
lea ecx, [ebp - 0x5a8]
push ecx
mov edx, dword [ebp - 0x5ac]
push edx
mov eax, dword [ebp - 0x5a4]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0x19c]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x415ee6
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x5a8]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 2
je 0x415f25
mov dword [ebp - 0xbd8], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xbd8]
jmp 0x41a90c
mov edx, dword [ebp - 0x100]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 3
je 0x415faa
mov edx, dword [ebp - 0x100]
push edx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea eax, [ebp - 0xc4]
mov dword [ebp - 0x10], eax
push 3
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x415faa
cmp dword [ebp + 0x28], 0
je 0x415f79
mov eax, dword [ebp + 0x28]
mov dword [eax], 1
mov dword [ebp - 0xbdc], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xbdc]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x5b0], eax
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 3
je 0x41603b
mov ecx, dword [ebp - 0x104]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea edx, [ebp - 0xd4]
mov dword [ebp - 0x10], edx
push 3
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x41603b
cmp dword [ebp + 0x28], 0
je 0x41600a
mov edx, dword [ebp + 0x28]
mov dword [edx], 0
mov dword [ebp - 0xbe0], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xbe0]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x5b8], edx
lea eax, [ebp - 0x5b4]
push eax
mov ecx, dword [ebp - 0x5b8]
push ecx
mov edx, dword [ebp - 0x5b0]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x1a0]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x416090
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x5b4]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 2
je 0x4160cf
mov dword [ebp - 0xbe4], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xbe4]
jmp 0x41a90c
mov ecx, dword [ebp - 0x100]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 3
je 0x416154
mov ecx, dword [ebp - 0x100]
push ecx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea edx, [ebp - 0xc4]
mov dword [ebp - 0x10], edx
push 3
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x416154
cmp dword [ebp + 0x28], 0
je 0x416123
mov edx, dword [ebp + 0x28]
mov dword [edx], 1
mov dword [ebp - 0xbe8], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xbe8]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x5bc], edx
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x4161e5
mov eax, dword [ebp - 0x104]
push eax
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x4161e5
cmp dword [ebp + 0x28], 0
je 0x4161b4
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 0
mov dword [ebp - 0xbec], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xbec]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x5c4], ecx
lea edx, [ebp - 0x5c0]
push edx
mov eax, dword [ebp - 0x5c4]
push eax
mov ecx, dword [ebp - 0x5bc]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0x1a4]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x41623a
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x5c0]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 0
je 0x416279
mov dword [ebp - 0xbf0], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xbf0]
jmp 0x41a90c
lea eax, [ebp - 0x5c8]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0x1a8]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x4162b4
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x5c8]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 0
je 0x4162f3
mov dword [ebp - 0xbf4], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xbf4]
jmp 0x41a90c
lea edx, [ebp - 0x5cc]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x1ac]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x41632e
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x5cc]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 3
je 0x41636d
mov dword [ebp - 0xbf8], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xbf8]
jmp 0x41a90c
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 3
je 0x4163f2
mov ecx, dword [ebp - 0xfc]
push ecx
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea edx, [ebp - 0xb4]
mov dword [ebp - 0x10], edx
push 3
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x4163f2
cmp dword [ebp + 0x28], 0
je 0x4163c1
mov edx, dword [ebp + 0x28]
mov dword [edx], 2
mov dword [ebp - 0xbfc], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xbfc]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x5d0], edx
mov dword [ebp - 0x5dc], 0
mov eax, dword [ebp - 0x100]
movzx ecx, word [eax]
cmp ecx, 0x400c
jne 0x416445
mov edx, dword [ebp - 0x100]
mov eax, dword [edx + 8]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x5dc], edx
mov eax, 0xc
mov ecx, dword [ebp - 0x10]
mov word [ecx], ax
jmp 0x416454
mov edx, dword [ebp - 0x100]
mov eax, dword [edx + 8]
mov dword [ebp - 0x5dc], eax
mov dword [ebp - 0x5d4], 0
mov ecx, dword [ebp - 0x104]
movzx edx, word [ecx]
cmp edx, 0x400c
jne 0x41649e
mov eax, dword [ebp - 0x104]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x10]
add eax, 8
mov dword [ebp - 0x5d4], eax
mov ecx, 3
mov edx, dword [ebp - 0x10]
mov word [edx], cx
jmp 0x4164ad
mov eax, dword [ebp - 0x104]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x5d4], ecx
lea edx, [ebp - 0x5d8]
push edx
mov eax, dword [ebp - 0x5d4]
push eax
mov ecx, dword [ebp - 0x5dc]
push ecx
mov edx, dword [ebp - 0x5d0]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x1b0]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x4164fd
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x5d8]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 0
je 0x41653c
mov dword [ebp - 0xc00], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xc00]
jmp 0x41a90c
lea ecx, [ebp - 0x5e0]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0x1b4]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x416577
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x5e0]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 0
je 0x4165b6
mov dword [ebp - 0xc04], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xc04]
jmp 0x41a90c
lea eax, [ebp - 0x5e4]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0x1b8]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x4165f1
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x5e4]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 1
je 0x416630
mov dword [ebp - 0xc08], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xc08]
jmp 0x41a90c
mov edx, dword [ebp - 0x104]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x4166b5
mov edx, dword [ebp - 0x104]
push edx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea eax, [ebp - 0xd4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x4166b5
cmp dword [ebp + 0x28], 0
je 0x416684
mov eax, dword [ebp + 0x28]
mov dword [eax], 0
mov dword [ebp - 0xc0c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xc0c]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x5e8], eax
lea ecx, [ebp - 0x5ec]
push ecx
mov edx, dword [ebp - 0x5e8]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x1bc]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x416703
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x5ec]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 0
je 0x416742
mov dword [ebp - 0xc10], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xc10]
jmp 0x41a90c
lea ecx, [ebp - 0x5f0]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0x1c0]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x41677d
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x5f0]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 2
je 0x4167bc
mov dword [ebp - 0xc14], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xc14]
jmp 0x41a90c
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 3
je 0x416841
mov eax, dword [ebp - 0x100]
push eax
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x10], ecx
push 3
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x416841
cmp dword [ebp + 0x28], 0
je 0x416810
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 1
mov dword [ebp - 0xc18], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xc18]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x5f4], ecx
mov dword [ebp - 0x5fc], 0
mov edx, dword [ebp - 0x104]
movzx eax, word [edx]
cmp eax, 0x400c
jne 0x416896
mov ecx, dword [ebp - 0x104]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [ebp - 0x10]
add ecx, 8
mov dword [ebp - 0x5fc], ecx
mov edx, 3
mov eax, dword [ebp - 0x10]
mov word [eax], dx
jmp 0x4168a5
mov ecx, dword [ebp - 0x104]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x5fc], edx
lea eax, [ebp - 0x5f8]
push eax
mov ecx, dword [ebp - 0x5fc]
push ecx
mov edx, dword [ebp - 0x5f4]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x1c4]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x4168ee
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x5f8]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 3
je 0x41692d
mov dword [ebp - 0xc1c], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xc1c]
jmp 0x41a90c
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 3
je 0x4169b2
mov ecx, dword [ebp - 0xfc]
push ecx
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea edx, [ebp - 0xb4]
mov dword [ebp - 0x10], edx
push 3
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x4169b2
cmp dword [ebp + 0x28], 0
je 0x416981
mov edx, dword [ebp + 0x28]
mov dword [edx], 2
mov dword [ebp - 0xc20], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xc20]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x600], edx
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 3
je 0x416a43
mov eax, dword [ebp - 0x100]
push eax
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x10], ecx
push 3
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x416a43
cmp dword [ebp + 0x28], 0
je 0x416a12
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 1
mov dword [ebp - 0xc24], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xc24]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x60c], ecx
mov edx, dword [ebp - 0x104]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x416ad4
mov edx, dword [ebp - 0x104]
push edx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea eax, [ebp - 0xd4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x416ad4
cmp dword [ebp + 0x28], 0
je 0x416aa3
mov eax, dword [ebp + 0x28]
mov dword [eax], 0
mov dword [ebp - 0xc28], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xc28]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x604], eax
lea ecx, [ebp - 0x608]
push ecx
mov edx, dword [ebp - 0x604]
push edx
mov eax, dword [ebp - 0x60c]
push eax
mov ecx, dword [ebp - 0x600]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0x1c8]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x416b30
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x608]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 3
je 0x416b6f
mov dword [ebp - 0xc2c], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xc2c]
jmp 0x41a90c
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 3
je 0x416bf4
mov eax, dword [ebp - 0xfc]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea ecx, [ebp - 0xb4]
mov dword [ebp - 0x10], ecx
push 3
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x416bf4
cmp dword [ebp + 0x28], 0
je 0x416bc3
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 2
mov dword [ebp - 0xc30], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xc30]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x610], ecx
mov dword [ebp - 0x61c], 0
mov edx, dword [ebp - 0x100]
movzx eax, word [edx]
cmp eax, 0x400c
jne 0x416c46
mov ecx, dword [ebp - 0x100]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x61c], ecx
mov edx, 0xc
mov eax, dword [ebp - 0x10]
mov word [eax], dx
jmp 0x416c55
mov ecx, dword [ebp - 0x100]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x61c], edx
mov dword [ebp - 0x614], 0
mov eax, dword [ebp - 0x104]
movzx ecx, word [eax]
cmp ecx, 0x400c
jne 0x416c9c
mov edx, dword [ebp - 0x104]
mov eax, dword [edx + 8]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x614], edx
mov eax, 0xc
mov ecx, dword [ebp - 0x10]
mov word [ecx], ax
jmp 0x416cab
mov edx, dword [ebp - 0x104]
mov eax, dword [edx + 8]
mov dword [ebp - 0x614], eax
lea ecx, [ebp - 0x618]
push ecx
mov edx, dword [ebp - 0x614]
push edx
mov eax, dword [ebp - 0x61c]
push eax
mov ecx, dword [ebp - 0x610]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0x1cc]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x416cfb
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x618]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 2
je 0x416d3a
mov dword [ebp - 0xc34], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xc34]
jmp 0x41a90c
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 3
je 0x416dbf
mov eax, dword [ebp - 0x100]
push eax
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x10], ecx
push 3
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x416dbf
cmp dword [ebp + 0x28], 0
je 0x416d8e
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 1
mov dword [ebp - 0xc38], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xc38]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x620], ecx
mov edx, dword [ebp - 0x104]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x416e50
mov edx, dword [ebp - 0x104]
push edx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea eax, [ebp - 0xd4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x416e50
cmp dword [ebp + 0x28], 0
je 0x416e1f
mov eax, dword [ebp + 0x28]
mov dword [eax], 0
mov dword [ebp - 0xc3c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xc3c]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x628], eax
lea ecx, [ebp - 0x624]
push ecx
mov edx, dword [ebp - 0x628]
push edx
mov eax, dword [ebp - 0x620]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0x1d0]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x416ea5
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x624]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 4
je 0x416ee4
mov dword [ebp - 0xc40], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xc40]
jmp 0x41a90c
mov edx, dword [ebp - 0xf8]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x416f69
mov edx, dword [ebp - 0xf8]
push edx
lea ecx, [ebp - 0xa4]
call fcn.0041ab70
lea eax, [ebp - 0xa4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x416f69
cmp dword [ebp + 0x28], 0
je 0x416f38
mov eax, dword [ebp + 0x28]
mov dword [eax], 3
mov dword [ebp - 0xc44], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xc44]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x62c], eax
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x416ffa
mov ecx, dword [ebp - 0xfc]
push ecx
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea edx, [ebp - 0xb4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x416ffa
cmp dword [ebp + 0x28], 0
je 0x416fc9
mov edx, dword [ebp + 0x28]
mov dword [edx], 2
mov dword [ebp - 0xc48], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xc48]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x63c], edx
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 3
je 0x41708b
mov eax, dword [ebp - 0x100]
push eax
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x10], ecx
push 3
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x41708b
cmp dword [ebp + 0x28], 0
je 0x41705a
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 1
mov dword [ebp - 0xc4c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xc4c]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x634], ecx
mov edx, dword [ebp - 0x104]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 3
je 0x41711c
mov edx, dword [ebp - 0x104]
push edx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea eax, [ebp - 0xd4]
mov dword [ebp - 0x10], eax
push 3
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x41711c
cmp dword [ebp + 0x28], 0
je 0x4170eb
mov eax, dword [ebp + 0x28]
mov dword [eax], 0
mov dword [ebp - 0xc50], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xc50]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x638], eax
lea ecx, [ebp - 0x630]
push ecx
mov edx, dword [ebp - 0x638]
push edx
mov eax, dword [ebp - 0x634]
push eax
mov ecx, dword [ebp - 0x63c]
push ecx
mov edx, dword [ebp - 0x62c]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x1d4]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x41717f
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x630]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 6
je 0x4171be
mov dword [ebp - 0xc54], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xc54]
jmp 0x41a90c
mov ecx, dword [ebp - 0xf0]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x417243
mov ecx, dword [ebp - 0xf0]
push ecx
lea ecx, [ebp - 0x84]
call fcn.0041ab70
lea edx, [ebp - 0x84]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x417243
cmp dword [ebp + 0x28], 0
je 0x417212
mov edx, dword [ebp + 0x28]
mov dword [edx], 5
mov dword [ebp - 0xc58], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xc58]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x644], edx
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x4172d4
mov eax, dword [ebp - 0xf4]
push eax
lea ecx, [ebp - 0x94]
call fcn.0041ab70
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x4172d4
cmp dword [ebp + 0x28], 0
je 0x4172a3
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 4
mov dword [ebp - 0xc5c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xc5c]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x658], ecx
mov edx, dword [ebp - 0xf8]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 3
je 0x417365
mov edx, dword [ebp - 0xf8]
push edx
lea ecx, [ebp - 0xa4]
call fcn.0041ab70
lea eax, [ebp - 0xa4]
mov dword [ebp - 0x10], eax
push 3
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x417365
cmp dword [ebp + 0x28], 0
je 0x417334
mov eax, dword [ebp + 0x28]
mov dword [eax], 3
mov dword [ebp - 0xc60], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xc60]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x64c], eax
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x4173f6
mov ecx, dword [ebp - 0xfc]
push ecx
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea edx, [ebp - 0xb4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x4173f6
cmp dword [ebp + 0x28], 0
je 0x4173c5
mov edx, dword [ebp + 0x28]
mov dword [edx], 2
mov dword [ebp - 0xc64], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xc64]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x650], edx
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x417487
mov eax, dword [ebp - 0x100]
push eax
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x417487
cmp dword [ebp + 0x28], 0
je 0x417456
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 1
mov dword [ebp - 0xc68], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xc68]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x648], ecx
mov edx, dword [ebp - 0x104]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 3
je 0x417518
mov edx, dword [ebp - 0x104]
push edx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea eax, [ebp - 0xd4]
mov dword [ebp - 0x10], eax
push 3
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x417518
cmp dword [ebp + 0x28], 0
je 0x4174e7
mov eax, dword [ebp + 0x28]
mov dword [eax], 0
mov dword [ebp - 0xc6c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xc6c]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x640], eax
lea ecx, [ebp - 0x654]
push ecx
mov edx, dword [ebp - 0x640]
push edx
mov eax, dword [ebp - 0x648]
push eax
mov ecx, dword [ebp - 0x650]
push ecx
mov edx, dword [ebp - 0x64c]
push edx
mov eax, dword [ebp - 0x658]
push eax
mov ecx, dword [ebp - 0x644]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0x1d8]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x417589
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x654]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 3
je 0x4175c8
mov dword [ebp - 0xc70], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xc70]
jmp 0x41a90c
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x41764d
mov eax, dword [ebp - 0xfc]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea ecx, [ebp - 0xb4]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x41764d
cmp dword [ebp + 0x28], 0
je 0x41761c
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 2
mov dword [ebp - 0xc74], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xc74]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x65c], ecx
mov edx, dword [ebp - 0x100]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 3
je 0x4176de
mov edx, dword [ebp - 0x100]
push edx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea eax, [ebp - 0xc4]
mov dword [ebp - 0x10], eax
push 3
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x4176de
cmp dword [ebp + 0x28], 0
je 0x4176ad
mov eax, dword [ebp + 0x28]
mov dword [eax], 1
mov dword [ebp - 0xc78], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xc78]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x668], eax
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 3
je 0x41776f
mov ecx, dword [ebp - 0x104]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea edx, [ebp - 0xd4]
mov dword [ebp - 0x10], edx
push 3
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x41776f
cmp dword [ebp + 0x28], 0
je 0x41773e
mov edx, dword [ebp + 0x28]
mov dword [edx], 0
mov dword [ebp - 0xc7c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xc7c]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x660], edx
lea eax, [ebp - 0x664]
push eax
mov ecx, dword [ebp - 0x660]
push ecx
mov edx, dword [ebp - 0x668]
push edx
mov eax, dword [ebp - 0x65c]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0x1dc]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x4177cb
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x664]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 5
je 0x41780a
mov dword [ebp - 0xc80], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xc80]
jmp 0x41a90c
mov edx, dword [ebp - 0xf4]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x41788f
mov edx, dword [ebp - 0xf4]
push edx
lea ecx, [ebp - 0x94]
call fcn.0041ab70
lea eax, [ebp - 0x94]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x41788f
cmp dword [ebp + 0x28], 0
je 0x41785e
mov eax, dword [ebp + 0x28]
mov dword [eax], 4
mov dword [ebp - 0xc84], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xc84]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x670], eax
mov ecx, dword [ebp - 0xf8]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 3
je 0x417920
mov ecx, dword [ebp - 0xf8]
push ecx
lea ecx, [ebp - 0xa4]
call fcn.0041ab70
lea edx, [ebp - 0xa4]
mov dword [ebp - 0x10], edx
push 3
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x417920
cmp dword [ebp + 0x28], 0
je 0x4178ef
mov edx, dword [ebp + 0x28]
mov dword [edx], 3
mov dword [ebp - 0xc88], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xc88]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x680], edx
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x4179b1
mov eax, dword [ebp - 0xfc]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea ecx, [ebp - 0xb4]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x4179b1
cmp dword [ebp + 0x28], 0
je 0x417980
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 2
mov dword [ebp - 0xc8c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xc8c]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x678], ecx
mov edx, dword [ebp - 0x100]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x417a42
mov edx, dword [ebp - 0x100]
push edx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea eax, [ebp - 0xc4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x417a42
cmp dword [ebp + 0x28], 0
je 0x417a11
mov eax, dword [ebp + 0x28]
mov dword [eax], 1
mov dword [ebp - 0xc90], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xc90]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x67c], eax
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 3
je 0x417ad3
mov ecx, dword [ebp - 0x104]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea edx, [ebp - 0xd4]
mov dword [ebp - 0x10], edx
push 3
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x417ad3
cmp dword [ebp + 0x28], 0
je 0x417aa2
mov edx, dword [ebp + 0x28]
mov dword [edx], 0
mov dword [ebp - 0xc94], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xc94]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x674], edx
lea eax, [ebp - 0x66c]
push eax
mov ecx, dword [ebp - 0x674]
push ecx
mov edx, dword [ebp - 0x67c]
push edx
mov eax, dword [ebp - 0x678]
push eax
mov ecx, dword [ebp - 0x680]
push ecx
mov edx, dword [ebp - 0x670]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x1e0]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x417b3d
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x66c]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 1
je 0x417b7c
mov dword [ebp - 0xc98], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xc98]
jmp 0x41a90c
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 3
je 0x417c01
mov ecx, dword [ebp - 0x104]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea edx, [ebp - 0xd4]
mov dword [ebp - 0x10], edx
push 3
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x417c01
cmp dword [ebp + 0x28], 0
je 0x417bd0
mov edx, dword [ebp + 0x28]
mov dword [edx], 0
mov dword [ebp - 0xc9c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xc9c]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x684], edx
lea eax, [ebp - 0x688]
push eax
mov ecx, dword [ebp - 0x684]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0x1e4]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x417c4f
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x688]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 3
je 0x417c8e
mov dword [ebp - 0xca0], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xca0]
jmp 0x41a90c
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 3
je 0x417d13
mov eax, dword [ebp - 0xfc]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea ecx, [ebp - 0xb4]
mov dword [ebp - 0x10], ecx
push 3
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x417d13
cmp dword [ebp + 0x28], 0
je 0x417ce2
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 2
mov dword [ebp - 0xca4], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xca4]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x68c], ecx
mov edx, dword [ebp - 0x100]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x417da4
mov edx, dword [ebp - 0x100]
push edx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea eax, [ebp - 0xc4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x417da4
cmp dword [ebp + 0x28], 0
je 0x417d73
mov eax, dword [ebp + 0x28]
mov dword [eax], 1
mov dword [ebp - 0xca8], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xca8]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x698], eax
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 3
je 0x417e35
mov ecx, dword [ebp - 0x104]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea edx, [ebp - 0xd4]
mov dword [ebp - 0x10], edx
push 3
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x417e35
cmp dword [ebp + 0x28], 0
je 0x417e04
mov edx, dword [ebp + 0x28]
mov dword [edx], 0
mov dword [ebp - 0xcac], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xcac]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x690], edx
lea eax, [ebp - 0x694]
push eax
mov ecx, dword [ebp - 0x690]
push ecx
mov edx, dword [ebp - 0x698]
push edx
mov eax, dword [ebp - 0x68c]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0x1e8]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x417e91
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x694]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 2
je 0x417ed0
mov dword [ebp - 0xcb0], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xcb0]
jmp 0x41a90c
mov edx, dword [ebp - 0x100]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 3
je 0x417f55
mov edx, dword [ebp - 0x100]
push edx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea eax, [ebp - 0xc4]
mov dword [ebp - 0x10], eax
push 3
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x417f55
cmp dword [ebp + 0x28], 0
je 0x417f24
mov eax, dword [ebp + 0x28]
mov dword [eax], 1
mov dword [ebp - 0xcb4], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xcb4]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x69c], eax
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 3
je 0x417fe6
mov ecx, dword [ebp - 0x104]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea edx, [ebp - 0xd4]
mov dword [ebp - 0x10], edx
push 3
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x417fe6
cmp dword [ebp + 0x28], 0
je 0x417fb5
mov edx, dword [ebp + 0x28]
mov dword [edx], 0
mov dword [ebp - 0xcb8], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xcb8]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x6a4], edx
lea eax, [ebp - 0x6a0]
push eax
mov ecx, dword [ebp - 0x6a4]
push ecx
mov edx, dword [ebp - 0x69c]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x1ec]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x41803b
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x6a0]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 3
je 0x41807a
mov dword [ebp - 0xcbc], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xcbc]
jmp 0x41a90c
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x4180ff
mov ecx, dword [ebp - 0xfc]
push ecx
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea edx, [ebp - 0xb4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x4180ff
cmp dword [ebp + 0x28], 0
je 0x4180ce
mov edx, dword [ebp + 0x28]
mov dword [edx], 2
mov dword [ebp - 0xcc0], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xcc0]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x6a8], edx
mov dword [ebp - 0x6b4], 0
mov eax, dword [ebp - 0x100]
movzx ecx, word [eax]
cmp ecx, 0x400c
jne 0x418152
mov edx, dword [ebp - 0x100]
mov eax, dword [edx + 8]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x6b4], edx
mov eax, 0xc
mov ecx, dword [ebp - 0x10]
mov word [ecx], ax
jmp 0x418161
mov edx, dword [ebp - 0x100]
mov eax, dword [edx + 8]
mov dword [ebp - 0x6b4], eax
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 3
je 0x4181e6
mov ecx, dword [ebp - 0x104]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea edx, [ebp - 0xd4]
mov dword [ebp - 0x10], edx
push 3
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x4181e6
cmp dword [ebp + 0x28], 0
je 0x4181b5
mov edx, dword [ebp + 0x28]
mov dword [edx], 0
mov dword [ebp - 0xcc4], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xcc4]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x6ac], edx
lea eax, [ebp - 0x6b0]
push eax
mov ecx, dword [ebp - 0x6ac]
push ecx
mov edx, dword [ebp - 0x6b4]
push edx
mov eax, dword [ebp - 0x6a8]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0x1f0]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x418242
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x6b0]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 3
je 0x418281
mov dword [ebp - 0xcc8], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xcc8]
jmp 0x41a90c
mov edx, dword [ebp - 0xfc]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x418306
mov edx, dword [ebp - 0xfc]
push edx
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea eax, [ebp - 0xb4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x418306
cmp dword [ebp + 0x28], 0
je 0x4182d5
mov eax, dword [ebp + 0x28]
mov dword [eax], 2
mov dword [ebp - 0xccc], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xccc]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x6b8], eax
mov ecx, dword [ebp - 0x100]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x418397
mov ecx, dword [ebp - 0x100]
push ecx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea edx, [ebp - 0xc4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x418397
cmp dword [ebp + 0x28], 0
je 0x418366
mov edx, dword [ebp + 0x28]
mov dword [edx], 1
mov dword [ebp - 0xcd0], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xcd0]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x6c4], edx
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 3
je 0x418428
mov eax, dword [ebp - 0x104]
push eax
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x10], ecx
push 3
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x418428
cmp dword [ebp + 0x28], 0
je 0x4183f7
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 0
mov dword [ebp - 0xcd4], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xcd4]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x6bc], ecx
lea edx, [ebp - 0x6c0]
push edx
mov eax, dword [ebp - 0x6bc]
push eax
mov ecx, dword [ebp - 0x6c4]
push ecx
mov edx, dword [ebp - 0x6b8]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x1f4]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x418484
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x6c0]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 8
je 0x4184c3
mov dword [ebp - 0xcd8], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xcd8]
jmp 0x41a90c
mov ecx, dword [ebp - 0xe8]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x418542
mov ecx, dword [ebp - 0xe8]
push ecx
lea ecx, [ebp - 0x64]
call fcn.0041ab70
lea edx, [ebp - 0x64]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x418542
cmp dword [ebp + 0x28], 0
je 0x418511
mov edx, dword [ebp + 0x28]
mov dword [edx], 7
mov dword [ebp - 0xcdc], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xcdc]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x6d4], edx
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x4185cd
mov eax, dword [ebp - 0xec]
push eax
lea ecx, [ebp - 0x74]
call fcn.0041ab70
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x4185cd
cmp dword [ebp + 0x28], 0
je 0x41859c
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 6
mov dword [ebp - 0xce0], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xce0]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x6e8], ecx
mov edx, dword [ebp - 0xf0]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x41865e
mov edx, dword [ebp - 0xf0]
push edx
lea ecx, [ebp - 0x84]
call fcn.0041ab70
lea eax, [ebp - 0x84]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x41865e
cmp dword [ebp + 0x28], 0
je 0x41862d
mov eax, dword [ebp + 0x28]
mov dword [eax], 5
mov dword [ebp - 0xce4], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xce4]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x6dc], eax
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x4186ef
mov ecx, dword [ebp - 0xf4]
push ecx
lea ecx, [ebp - 0x94]
call fcn.0041ab70
lea edx, [ebp - 0x94]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x4186ef
cmp dword [ebp + 0x28], 0
je 0x4186be
mov edx, dword [ebp + 0x28]
mov dword [edx], 4
mov dword [ebp - 0xce8], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xce8]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x6e0], edx
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 2
je 0x418780
mov eax, dword [ebp - 0xf8]
push eax
lea ecx, [ebp - 0xa4]
call fcn.0041ab70
lea ecx, [ebp - 0xa4]
mov dword [ebp - 0x10], ecx
push 2
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x418780
cmp dword [ebp + 0x28], 0
je 0x41874f
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 3
mov dword [ebp - 0xcec], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xcec]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov cx, word [eax + 8]
mov word [ebp - 0x6d8], cx
mov edx, dword [ebp - 0xfc]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x418813
mov edx, dword [ebp - 0xfc]
push edx
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea eax, [ebp - 0xb4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x418813
cmp dword [ebp + 0x28], 0
je 0x4187e2
mov eax, dword [ebp + 0x28]
mov dword [eax], 2
mov dword [ebp - 0xcf0], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xcf0]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x6d0], eax
mov ecx, dword [ebp - 0x100]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x4188a4
mov ecx, dword [ebp - 0x100]
push ecx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea edx, [ebp - 0xc4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x4188a4
cmp dword [ebp + 0x28], 0
je 0x418873
mov edx, dword [ebp + 0x28]
mov dword [edx], 1
mov dword [ebp - 0xcf4], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xcf4]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x6e4], edx
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 3
je 0x418935
mov eax, dword [ebp - 0x104]
push eax
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x10], ecx
push 3
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x418935
cmp dword [ebp + 0x28], 0
je 0x418904
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 0
mov dword [ebp - 0xcf8], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xcf8]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x6c8], ecx
lea edx, [ebp - 0x6cc]
push edx
mov eax, dword [ebp - 0x6c8]
push eax
mov ecx, dword [ebp - 0x6e4]
push ecx
mov edx, dword [ebp - 0x6d0]
push edx
movzx eax, word [ebp - 0x6d8]
push eax
mov ecx, dword [ebp - 0x6e0]
push ecx
mov edx, dword [ebp - 0x6dc]
push edx
mov eax, dword [ebp - 0x6e8]
push eax
mov ecx, dword [ebp - 0x6d4]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0x1f8]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x4189b5
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x6cc]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 2
je 0x4189f4
mov dword [ebp - 0xcfc], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xcfc]
jmp 0x41a90c
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x418a79
mov eax, dword [ebp - 0x100]
push eax
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x418a79
cmp dword [ebp + 0x28], 0
je 0x418a48
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 1
mov dword [ebp - 0xd00], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xd00]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x6ec], ecx
mov edx, dword [ebp - 0x104]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 3
je 0x418b0a
mov edx, dword [ebp - 0x104]
push edx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea eax, [ebp - 0xd4]
mov dword [ebp - 0x10], eax
push 3
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x418b0a
cmp dword [ebp + 0x28], 0
je 0x418ad9
mov eax, dword [ebp + 0x28]
mov dword [eax], 0
mov dword [ebp - 0xd04], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xd04]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x6f4], eax
lea ecx, [ebp - 0x6f0]
push ecx
mov edx, dword [ebp - 0x6f4]
push edx
mov eax, dword [ebp - 0x6ec]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0x1fc]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x418b5f
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x6f0]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 7
je 0x418b9e
mov dword [ebp - 0xd08], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xd08]
jmp 0x41a90c
mov edx, dword [ebp - 0xec]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x418c1d
mov edx, dword [ebp - 0xec]
push edx
lea ecx, [ebp - 0x74]
call fcn.0041ab70
lea eax, [ebp - 0x74]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x418c1d
cmp dword [ebp + 0x28], 0
je 0x418bec
mov eax, dword [ebp + 0x28]
mov dword [eax], 6
mov dword [ebp - 0xd0c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xd0c]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x700], eax
mov ecx, dword [ebp - 0xf0]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x418cae
mov ecx, dword [ebp - 0xf0]
push ecx
lea ecx, [ebp - 0x84]
call fcn.0041ab70
lea edx, [ebp - 0x84]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x418cae
cmp dword [ebp + 0x28], 0
je 0x418c7d
mov edx, dword [ebp + 0x28]
mov dword [edx], 5
mov dword [ebp - 0xd10], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xd10]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x714], edx
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x418d3f
mov eax, dword [ebp - 0xf4]
push eax
lea ecx, [ebp - 0x94]
call fcn.0041ab70
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x418d3f
cmp dword [ebp + 0x28], 0
je 0x418d0e
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 4
mov dword [ebp - 0xd14], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xd14]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x708], ecx
mov edx, dword [ebp - 0xf8]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x418dd0
mov edx, dword [ebp - 0xf8]
push edx
lea ecx, [ebp - 0xa4]
call fcn.0041ab70
lea eax, [ebp - 0xa4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x418dd0
cmp dword [ebp + 0x28], 0
je 0x418d9f
mov eax, dword [ebp + 0x28]
mov dword [eax], 3
mov dword [ebp - 0xd18], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xd18]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x70c], eax
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 2
je 0x418e61
mov ecx, dword [ebp - 0xfc]
push ecx
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea edx, [ebp - 0xb4]
mov dword [ebp - 0x10], edx
push 2
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x418e61
cmp dword [ebp + 0x28], 0
je 0x418e30
mov edx, dword [ebp + 0x28]
mov dword [edx], 2
mov dword [ebp - 0xd1c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xd1c]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov dx, word [ecx + 8]
mov word [ebp - 0x704], dx
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x418ef4
mov eax, dword [ebp - 0x100]
push eax
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x418ef4
cmp dword [ebp + 0x28], 0
je 0x418ec3
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 1
mov dword [ebp - 0xd20], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xd20]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x6fc], ecx
mov edx, dword [ebp - 0x104]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 3
je 0x418f85
mov edx, dword [ebp - 0x104]
push edx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea eax, [ebp - 0xd4]
mov dword [ebp - 0x10], eax
push 3
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x418f85
cmp dword [ebp + 0x28], 0
je 0x418f54
mov eax, dword [ebp + 0x28]
mov dword [eax], 0
mov dword [ebp - 0xd24], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xd24]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x710], eax
lea ecx, [ebp - 0x6f8]
push ecx
mov edx, dword [ebp - 0x710]
push edx
mov eax, dword [ebp - 0x6fc]
push eax
movzx ecx, word [ebp - 0x704]
push ecx
mov edx, dword [ebp - 0x70c]
push edx
mov eax, dword [ebp - 0x708]
push eax
mov ecx, dword [ebp - 0x714]
push ecx
mov edx, dword [ebp - 0x700]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x200]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x418ffe
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x6f8]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 0xb
je 0x41903d
mov dword [ebp - 0xd28], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xd28]
jmp 0x41a90c
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x4190bc
mov ecx, dword [ebp - 0xdc]
push ecx
lea ecx, [ebp - 0x34]
call fcn.0041ab70
lea edx, [ebp - 0x34]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x4190bc
cmp dword [ebp + 0x28], 0
je 0x41908b
mov edx, dword [ebp + 0x28]
mov dword [edx], 0xa
mov dword [ebp - 0xd2c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xd2c]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x728], edx
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x419147
mov eax, dword [ebp - 0xe0]
push eax
lea ecx, [ebp - 0x44]
call fcn.0041ab70
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x419147
cmp dword [ebp + 0x28], 0
je 0x419116
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 9
mov dword [ebp - 0xd30], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xd30]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x744], ecx
mov edx, dword [ebp - 0xe4]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x4191d2
mov edx, dword [ebp - 0xe4]
push edx
lea ecx, [ebp - 0x54]
call fcn.0041ab70
lea eax, [ebp - 0x54]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x4191d2
cmp dword [ebp + 0x28], 0
je 0x4191a1
mov eax, dword [ebp + 0x28]
mov dword [eax], 8
mov dword [ebp - 0xd34], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xd34]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x738], eax
mov ecx, dword [ebp - 0xe8]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x41925d
mov ecx, dword [ebp - 0xe8]
push ecx
lea ecx, [ebp - 0x64]
call fcn.0041ab70
lea edx, [ebp - 0x64]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x41925d
cmp dword [ebp + 0x28], 0
je 0x41922c
mov edx, dword [ebp + 0x28]
mov dword [edx], 7
mov dword [ebp - 0xd38], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xd38]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x73c], edx
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 3
je 0x4192e8
mov eax, dword [ebp - 0xec]
push eax
lea ecx, [ebp - 0x74]
call fcn.0041ab70
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x10], ecx
push 3
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x4192e8
cmp dword [ebp + 0x28], 0
je 0x4192b7
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 6
mov dword [ebp - 0xd3c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xd3c]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x734], ecx
mov edx, dword [ebp - 0xf0]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x419379
mov edx, dword [ebp - 0xf0]
push edx
lea ecx, [ebp - 0x84]
call fcn.0041ab70
lea eax, [ebp - 0x84]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x419379
cmp dword [ebp + 0x28], 0
je 0x419348
mov eax, dword [ebp + 0x28]
mov dword [eax], 5
mov dword [ebp - 0xd40], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xd40]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x720], eax
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x41940a
mov ecx, dword [ebp - 0xf4]
push ecx
lea ecx, [ebp - 0x94]
call fcn.0041ab70
lea edx, [ebp - 0x94]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x41940a
cmp dword [ebp + 0x28], 0
je 0x4193d9
mov edx, dword [ebp + 0x28]
mov dword [edx], 4
mov dword [ebp - 0xd44], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xd44]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x740], edx
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x41949b
mov eax, dword [ebp - 0xf8]
push eax
lea ecx, [ebp - 0xa4]
call fcn.0041ab70
lea ecx, [ebp - 0xa4]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x41949b
cmp dword [ebp + 0x28], 0
je 0x41946a
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 3
mov dword [ebp - 0xd48], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xd48]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x718], ecx
mov edx, dword [ebp - 0xfc]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 3
je 0x41952c
mov edx, dword [ebp - 0xfc]
push edx
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea eax, [ebp - 0xb4]
mov dword [ebp - 0x10], eax
push 3
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x41952c
cmp dword [ebp + 0x28], 0
je 0x4194fb
mov eax, dword [ebp + 0x28]
mov dword [eax], 2
mov dword [ebp - 0xd4c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xd4c]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x71c], eax
mov dword [ebp - 0x730], 0
mov ecx, dword [ebp - 0x100]
movzx edx, word [ecx]
cmp edx, 0x400c
jne 0x41957f
mov eax, dword [ebp - 0x100]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x730], eax
mov ecx, 0xc
mov edx, dword [ebp - 0x10]
mov word [edx], cx
jmp 0x41958e
mov eax, dword [ebp - 0x100]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x730], ecx
mov edx, dword [ebp - 0x104]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 3
je 0x419613
mov edx, dword [ebp - 0x104]
push edx
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea eax, [ebp - 0xd4]
mov dword [ebp - 0x10], eax
push 3
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x419613
cmp dword [ebp + 0x28], 0
je 0x4195e2
mov eax, dword [ebp + 0x28]
mov dword [eax], 0
mov dword [ebp - 0xd50], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xd50]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x724], eax
lea ecx, [ebp - 0x72c]
push ecx
mov edx, dword [ebp - 0x724]
push edx
mov eax, dword [ebp - 0x730]
push eax
mov ecx, dword [ebp - 0x71c]
push ecx
mov edx, dword [ebp - 0x718]
push edx
mov eax, dword [ebp - 0x740]
push eax
mov ecx, dword [ebp - 0x720]
push ecx
mov edx, dword [ebp - 0x734]
push edx
mov eax, dword [ebp - 0x73c]
push eax
mov ecx, dword [ebp - 0x738]
push ecx
mov edx, dword [ebp - 0x744]
push edx
mov eax, dword [ebp - 0x728]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0x204]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x4196a7
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x72c]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 3
je 0x4196e6
mov dword [ebp - 0xd54], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xd54]
jmp 0x41a90c
mov edx, dword [ebp - 0xfc]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x41976b
mov edx, dword [ebp - 0xfc]
push edx
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea eax, [ebp - 0xb4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x41976b
cmp dword [ebp + 0x28], 0
je 0x41973a
mov eax, dword [ebp + 0x28]
mov dword [eax], 2
mov dword [ebp - 0xd58], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xd58]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x748], eax
mov ecx, dword [ebp - 0x100]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x4197fc
mov ecx, dword [ebp - 0x100]
push ecx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea edx, [ebp - 0xc4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x4197fc
cmp dword [ebp + 0x28], 0
je 0x4197cb
mov edx, dword [ebp + 0x28]
mov dword [edx], 1
mov dword [ebp - 0xd5c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xd5c]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x754], edx
mov dword [ebp - 0x74c], 0
mov eax, dword [ebp - 0x104]
movzx ecx, word [eax]
cmp ecx, 0x400c
jne 0x419852
mov edx, dword [ebp - 0x104]
mov eax, dword [edx + 8]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edx, dword [ebp - 0x10]
add edx, 8
mov dword [ebp - 0x74c], edx
mov eax, 3
mov ecx, dword [ebp - 0x10]
mov word [ecx], ax
jmp 0x419861
mov edx, dword [ebp - 0x104]
mov eax, dword [edx + 8]
mov dword [ebp - 0x74c], eax
lea ecx, [ebp - 0x750]
push ecx
mov edx, dword [ebp - 0x74c]
push edx
mov eax, dword [ebp - 0x754]
push eax
mov ecx, dword [ebp - 0x748]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0x208]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x4198b1
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x750]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 7
je 0x4198f0
mov dword [ebp - 0xd60], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xd60]
jmp 0x41a90c
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x41996f
mov eax, dword [ebp - 0xec]
push eax
lea ecx, [ebp - 0x74]
call fcn.0041ab70
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x41996f
cmp dword [ebp + 0x28], 0
je 0x41993e
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 6
mov dword [ebp - 0xd64], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xd64]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x760], ecx
mov edx, dword [ebp - 0xf0]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x419a00
mov edx, dword [ebp - 0xf0]
push edx
lea ecx, [ebp - 0x84]
call fcn.0041ab70
lea eax, [ebp - 0x84]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x419a00
cmp dword [ebp + 0x28], 0
je 0x4199cf
mov eax, dword [ebp + 0x28]
mov dword [eax], 5
mov dword [ebp - 0xd68], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xd68]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x774], eax
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 3
je 0x419a91
mov ecx, dword [ebp - 0xf4]
push ecx
lea ecx, [ebp - 0x94]
call fcn.0041ab70
lea edx, [ebp - 0x94]
mov dword [ebp - 0x10], edx
push 3
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x419a91
cmp dword [ebp + 0x28], 0
je 0x419a60
mov edx, dword [ebp + 0x28]
mov dword [edx], 4
mov dword [ebp - 0xd6c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xd6c]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x768], edx
mov dword [ebp - 0x76c], 0
mov eax, dword [ebp - 0xf8]
movzx ecx, word [eax]
cmp ecx, 0x400c
jne 0x419ae4
mov edx, dword [ebp - 0xf8]
mov eax, dword [edx + 8]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x76c], edx
mov eax, 0xc
mov ecx, dword [ebp - 0x10]
mov word [ecx], ax
jmp 0x419af3
mov edx, dword [ebp - 0xf8]
mov eax, dword [edx + 8]
mov dword [ebp - 0x76c], eax
mov dword [ebp - 0x764], 0
mov ecx, dword [ebp - 0xfc]
movzx edx, word [ecx]
cmp edx, 0x400c
jne 0x419b3a
mov eax, dword [ebp - 0xfc]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x764], eax
mov ecx, 0xc
mov edx, dword [ebp - 0x10]
mov word [edx], cx
jmp 0x419b49
mov eax, dword [ebp - 0xfc]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x764], ecx
mov dword [ebp - 0x75c], 0
mov edx, dword [ebp - 0x100]
movzx eax, word [edx]
cmp eax, 0x400c
jne 0x419b8f
mov ecx, dword [ebp - 0x100]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x75c], ecx
mov edx, 0xc
mov eax, dword [ebp - 0x10]
mov word [eax], dx
jmp 0x419b9e
mov ecx, dword [ebp - 0x100]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x75c], edx
mov dword [ebp - 0x770], 0
mov eax, dword [ebp - 0x104]
movzx ecx, word [eax]
cmp ecx, 0x400c
jne 0x419be5
mov edx, dword [ebp - 0x104]
mov eax, dword [edx + 8]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x770], edx
mov eax, 0xc
mov ecx, dword [ebp - 0x10]
mov word [ecx], ax
jmp 0x419bf4
mov edx, dword [ebp - 0x104]
mov eax, dword [edx + 8]
mov dword [ebp - 0x770], eax
lea ecx, [ebp - 0x758]
push ecx
mov edx, dword [ebp - 0x770]
push edx
mov eax, dword [ebp - 0x75c]
push eax
mov ecx, dword [ebp - 0x764]
push ecx
mov edx, dword [ebp - 0x76c]
push edx
mov eax, dword [ebp - 0x768]
push eax
mov ecx, dword [ebp - 0x774]
push ecx
mov edx, dword [ebp - 0x760]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x20c]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x419c60
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x758]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 3
je 0x419c9f
mov dword [ebp - 0xd70], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xd70]
jmp 0x41a90c
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x419d24
mov ecx, dword [ebp - 0xfc]
push ecx
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea edx, [ebp - 0xb4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x419d24
cmp dword [ebp + 0x28], 0
je 0x419cf3
mov edx, dword [ebp + 0x28]
mov dword [edx], 2
mov dword [ebp - 0xd74], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xd74]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x778], edx
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x419db5
mov eax, dword [ebp - 0x100]
push eax
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x419db5
cmp dword [ebp + 0x28], 0
je 0x419d84
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 1
mov dword [ebp - 0xd78], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xd78]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x784], ecx
mov dword [ebp - 0x77c], 0
mov edx, dword [ebp - 0x104]
movzx eax, word [edx]
cmp eax, 0x400c
jne 0x419e0a
mov ecx, dword [ebp - 0x104]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [ebp - 0x10]
add ecx, 8
mov dword [ebp - 0x77c], ecx
mov edx, 3
mov eax, dword [ebp - 0x10]
mov word [eax], dx
jmp 0x419e19
mov ecx, dword [ebp - 0x104]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x77c], edx
lea eax, [ebp - 0x780]
push eax
mov ecx, dword [ebp - 0x77c]
push ecx
mov edx, dword [ebp - 0x784]
push edx
mov eax, dword [ebp - 0x778]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [edx + 0x210]
call ecx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x419e69
mov edx, 3
mov eax, dword [ebp + 0x20]
mov word [eax], dx
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp - 0x780]
mov dword [ecx + 8], edx
jmp 0x41a8bc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 3
je 0x419ea8
mov dword [ebp - 0xd7c], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xd7c]
jmp 0x41a90c
mov edx, dword [ebp - 0xfc]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x419f2d
mov edx, dword [ebp - 0xfc]
push edx
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea eax, [ebp - 0xb4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x419f2d
cmp dword [ebp + 0x28], 0
je 0x419efc
mov eax, dword [ebp + 0x28]
mov dword [eax], 2
mov dword [ebp - 0xd80], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xd80]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x788], eax
mov ecx, dword [ebp - 0x100]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x419fbe
mov ecx, dword [ebp - 0x100]
push ecx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea edx, [ebp - 0xc4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x419fbe
cmp dword [ebp + 0x28], 0
je 0x419f8d
mov edx, dword [ebp + 0x28]
mov dword [edx], 1
mov dword [ebp - 0xd84], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xd84]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x794], edx
mov dword [ebp - 0x78c], 0
mov eax, dword [ebp - 0x104]
movzx ecx, word [eax]
cmp ecx, 0x400c
jne 0x41a014
mov edx, dword [ebp - 0x104]
mov eax, dword [edx + 8]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edx, dword [ebp - 0x10]
add edx, 8
mov dword [ebp - 0x78c], edx
mov eax, 3
mov ecx, dword [ebp - 0x10]
mov word [ecx], ax
jmp 0x41a023
mov edx, dword [ebp - 0x104]
mov eax, dword [edx + 8]
mov dword [ebp - 0x78c], eax
lea ecx, [ebp - 0x790]
push ecx
mov edx, dword [ebp - 0x78c]
push edx
mov eax, dword [ebp - 0x794]
push eax
mov ecx, dword [ebp - 0x788]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0x214]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x41a073
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x790]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 2
je 0x41a0b2
mov dword [ebp - 0xd88], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xd88]
jmp 0x41a90c
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 3
je 0x41a137
mov eax, dword [ebp - 0x100]
push eax
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x10], ecx
push 3
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x41a137
cmp dword [ebp + 0x28], 0
je 0x41a106
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 1
mov dword [ebp - 0xd8c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xd8c]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x798], ecx
mov dword [ebp - 0x7a0], 0
mov edx, dword [ebp - 0x104]
movzx eax, word [edx]
cmp eax, 0x400c
jne 0x41a18c
mov ecx, dword [ebp - 0x104]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [ebp - 0x10]
add ecx, 8
mov dword [ebp - 0x7a0], ecx
mov edx, 3
mov eax, dword [ebp - 0x10]
mov word [eax], dx
jmp 0x41a19b
mov ecx, dword [ebp - 0x104]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x7a0], edx
lea eax, [ebp - 0x79c]
push eax
mov ecx, dword [ebp - 0x7a0]
push ecx
mov edx, dword [ebp - 0x798]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x218]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x41a1e4
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x79c]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov edx, dword [ebp + 0x1c]
cmp dword [edx + 8], 5
je 0x41a223
mov dword [ebp - 0xd90], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xd90]
jmp 0x41a90c
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x41a2a8
mov ecx, dword [ebp - 0xf4]
push ecx
lea ecx, [ebp - 0x94]
call fcn.0041ab70
lea edx, [ebp - 0x94]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x41a2a8
cmp dword [ebp + 0x28], 0
je 0x41a277
mov edx, dword [ebp + 0x28]
mov dword [edx], 4
mov dword [ebp - 0xd94], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xd94]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x7a8], edx
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x41a339
mov eax, dword [ebp - 0xf8]
push eax
lea ecx, [ebp - 0xa4]
call fcn.0041ab70
lea ecx, [ebp - 0xa4]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x41a339
cmp dword [ebp + 0x28], 0
je 0x41a308
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 3
mov dword [ebp - 0xd98], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xd98]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x7b8], ecx
mov edx, dword [ebp - 0xfc]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 3
je 0x41a3ca
mov edx, dword [ebp - 0xfc]
push edx
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea eax, [ebp - 0xb4]
mov dword [ebp - 0x10], eax
push 3
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x41a3ca
cmp dword [ebp + 0x28], 0
je 0x41a399
mov eax, dword [ebp + 0x28]
mov dword [eax], 2
mov dword [ebp - 0xd9c], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xd9c]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x7b0], eax
mov ecx, dword [ebp - 0x100]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 8
je 0x41a45b
mov ecx, dword [ebp - 0x100]
push ecx
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea edx, [ebp - 0xc4]
mov dword [ebp - 0x10], edx
push 8
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x41a45b
cmp dword [ebp + 0x28], 0
je 0x41a42a
mov edx, dword [ebp + 0x28]
mov dword [edx], 1
mov dword [ebp - 0xda0], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xda0]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x7b4], edx
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 3
je 0x41a4ec
mov eax, dword [ebp - 0x104]
push eax
lea ecx, [ebp - 0xd4]
call fcn.0041ab70
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x10], ecx
push 3
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x41a4ec
cmp dword [ebp + 0x28], 0
je 0x41a4bb
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 0
mov dword [ebp - 0xda4], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xda4]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x7ac], ecx
lea edx, [ebp - 0x7a4]
push edx
mov eax, dword [ebp - 0x7ac]
push eax
mov ecx, dword [ebp - 0x7b4]
push ecx
mov edx, dword [ebp - 0x7b0]
push edx
mov eax, dword [ebp - 0x7b8]
push eax
mov ecx, dword [ebp - 0x7a8]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [eax + 0x21c]
call edx
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x41a556
mov eax, 3
mov ecx, dword [ebp + 0x20]
mov word [ecx], ax
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp - 0x7a4]
mov dword [edx + 8], eax
jmp 0x41a8bc
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 8], 5
je 0x41a595
mov dword [ebp - 0xda8], 0x8002000e
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xda8]
jmp 0x41a90c
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 8
je 0x41a61a
mov eax, dword [ebp - 0xf4]
push eax
lea ecx, [ebp - 0x94]
call fcn.0041ab70
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x10], ecx
push 8
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x41a61a
cmp dword [ebp + 0x28], 0
je 0x41a5e9
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 4
mov dword [ebp - 0xdac], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xdac]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x7c0], ecx
mov edx, dword [ebp - 0xf8]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
cmp ecx, 8
je 0x41a6ab
mov edx, dword [ebp - 0xf8]
push edx
lea ecx, [ebp - 0xa4]
call fcn.0041ab70
lea eax, [ebp - 0xa4]
mov dword [ebp - 0x10], eax
push 8
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10]
push edx
call fcn.0041af70
test eax, eax
jge 0x41a6ab
cmp dword [ebp + 0x28], 0
je 0x41a67a
mov eax, dword [ebp + 0x28]
mov dword [eax], 3
mov dword [ebp - 0xdb0], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0041fb54
mov eax, dword [ebp - 0xdb0]
jmp 0x41a90c
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
mov dword [ebp - 0x7d0], eax
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
movzx eax, word [edx]
cmp eax, 3
je 0x41a73c
mov ecx, dword [ebp - 0xfc]
push ecx
lea ecx, [ebp - 0xb4]
call fcn.0041ab70
lea edx, [ebp - 0xb4]
mov dword [ebp - 0x10], edx
push 3
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0041af70
test eax, eax
jge 0x41a73c
cmp dword [ebp + 0x28], 0
je 0x41a70b
mov edx, dword [ebp + 0x28]
mov dword [edx], 2
mov dword [ebp - 0xdb4], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xdb4]
jmp 0x41a90c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x7c8], edx
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx]
cmp edx, 3
je 0x41a7cd
mov eax, dword [ebp - 0x100]
push eax
lea ecx, [ebp - 0xc4]
call fcn.0041ab70
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x10], ecx
push 3
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.0041af70
test eax, eax
jge 0x41a7cd
cmp dword [ebp + 0x28], 0
je 0x41a79c
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 1
mov dword [ebp - 0xdb8], 0x80020005
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xdb8]
jmp 0x41a90c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x7cc], ecx
mov dword [ebp - 0x7c4], 0
mov edx, dword [ebp - 0x104]
movzx eax, word [edx]
cmp eax, 0x400c
jne 0x41a81f
mov ecx, dword [ebp - 0x104]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x7c4], ecx
mov edx, 0xc
mov eax, dword [ebp - 0x10]
mov word [eax], dx
jmp 0x41a82e
mov ecx, dword [ebp - 0x104]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x7c4], edx
lea eax, [ebp - 0x7bc]
push eax
mov ecx, dword [ebp - 0x7c4]
push ecx
mov edx, dword [ebp - 0x7cc]
push edx
mov eax, dword [ebp - 0x7c8]
push eax
mov ecx, dword [ebp - 0x7d0]
push ecx
mov edx, dword [ebp - 0x7c0]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ecx + 0x220]
call eax
mov dword [ebp - 0x108], eax
cmp dword [ebp + 0x20], 0
je 0x41a88c
mov ecx, 3
mov edx, dword [ebp + 0x20]
mov word [edx], cx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x7bc]
mov dword [eax + 8], ecx
jmp 0x41a8bc
mov dword [ebp - 0xdbc], 0x80020003
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea edx, [ebp - 0xd4]
push edx
call fcn.0041fb54
mov eax, dword [ebp - 0xdbc]
jmp 0x41a90c
cmp dword [ebp - 0x108], 0
jge 0x41a8de
cmp dword [ebp + 0x24], 0
je 0x41a8de
mov eax, dword [ebp + 0x24]
push eax
mov ecx, dword [ebp - 0x108]
push ecx
call fcn.0041b020
add esp, 8
mov edx, dword [ebp - 0x108]
mov dword [ebp - 0xdc0], edx
mov dword [ebp - 4], 0xffffffff
push 0x41ab50
push 0xc
push 0x10
lea eax, [ebp - 0xd4]
push eax
call fcn.0041fb54
mov eax, dword [ebp - 0xdc0]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret 0x24