Function at 0x43a100
Capabilities:
Resolve function by parsing pe exports
Schedule task via itaskservice

Disassembly:
push 0xffffffffffffffff
push 0x492e4e
mov eax, dword fs:[0]
push eax
sub esp, 0xa4
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4b3c40]
xor eax, esp
push eax
lea eax, [esp + 0xb8]
mov dword fs:[0], eax
xor esi, esi
cmp dword [esp + 0xc8], esi
je 0x43a18a
cmp dword [esp + 0xcc], esi
je 0x43a18a
push esi
call dword [sym.imp.ole32.dll_CoInitialize]
mov dword [esp + 0x14], esi
lea eax, [esp + 0x14]
push eax
push 0x4971c8
push 0x17
push esi
push 0x4a28b4
mov dword [esp + 0xd4], esi
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, esi
jge 0x43a1a8
mov eax, dword [esp + 0x14]
mov dword [esp + 0xc0], 0xffffffff
cmp eax, esi
je 0x43a18a
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
xor eax, eax
mov ecx, dword [esp + 0xb8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xb0
ret 0x10
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [esp + 0x44]
push eax
call esi
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x48]
mov ebp, dword [ecx]
mov ecx, dword [esp + 0x44]
mov edi, dword [esp + 0x4c]
mov ebx, dword [esp + 0x50]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], edx
mov dword [eax + 8], edi
mov dword [eax + 0xc], ebx
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], edx
mov dword [eax + 8], edi
mov dword [eax + 0xc], ebx
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], edx
mov dword [eax + 8], edi
mov dword [eax + 0xc], ebx
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], edx
mov edx, dword [esp + 0x54]
mov dword [eax + 8], edi
mov dword [eax + 0xc], ebx
mov eax, dword [ebp + 0x28]
push edx
mov byte [esp + 0x104], 1
call eax
xor ebp, ebp
cmp eax, ebp
jge 0x43a252
lea ecx, [esp + 0x44]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [esp + 0x14]
mov dword [esp + 0xc0], 0xffffffff
cmp eax, ebp
je 0x43a18a
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
jmp 0x43a18a
mov dword [esp + 0x1c], ebp
mov edi, dword [esp + 0x14]
push 0x4947e4
lea ecx, [esp + 0x30]
mov byte [esp + 0xc4], 2
call fcn.00439c20
mov eax, dword [eax]
mov byte [esp + 0xc0], 3
cmp eax, ebp
je 0x43a282
mov eax, dword [eax]
jmp 0x43a284
xor eax, eax
mov ecx, dword [edi]
lea edx, [esp + 0x1c]
push edx
push eax
mov eax, dword [ecx + 0x1c]
push edi
call eax
lea ecx, [esp + 0x2c]
mov edi, eax
call fcn.0043a0b0
cmp edi, ebp
jge 0x43a2da
mov eax, dword [esp + 0x1c]
mov byte [esp + 0xc0], 1
cmp eax, ebp
je 0x43a2b9
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
lea eax, [esp + 0x44]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [esp + 0x14]
mov dword [esp + 0xc0], 0xffffffff
cmp eax, ebp
jmp 0x43a180
mov dword [esp + 0x20], ebp
mov edi, dword [esp + 0x1c]
push str.360safe
lea ecx, [esp + 0x30]
mov byte [esp + 0xc4], 4
call fcn.00439c20
mov eax, dword [eax]
mov byte [esp + 0xc0], 5
cmp eax, ebp
je 0x43a30a
mov eax, dword [eax]
jmp 0x43a30c
xor eax, eax
mov ecx, dword [edi]
lea edx, [esp + 0x20]
push edx
push eax
mov eax, dword [ecx + 0x24]
push edi
call eax
lea ecx, [esp + 0x2c]
mov edi, eax
mov byte [esp + 0xc0], 4
call fcn.0043a0b0
cmp edi, ebp
jge 0x43a38c
mov edi, dword [esp + 0x44]
mov ecx, dword [esp + 0x1c]
mov edx, dword [ecx]
lea eax, [esp + 0x20]
push eax
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov edi, dword [esp + 0x5c]
mov dword [eax + 4], edi
mov edi, dword [esp + 0x60]
mov dword [eax + 8], edi
mov edi, dword [esp + 0x64]
push str.360safe
push ecx
mov ecx, dword [edx + 0x2c]
mov dword [eax + 0xc], edi
call ecx
cmp eax, ebp
jge 0x43a38c
mov eax, dword [esp + 0x20]
mov byte [esp + 0xc0], 2
cmp eax, ebp
je 0x43a2a1
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
jmp 0x43a2a1
mov dword [esp + 0x18], ebp
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
lea edx, [esp + 0x18]
push edx
push ebp
push eax
mov eax, dword [ecx + 0x24]
mov byte [esp + 0xcc], 6
call eax
cmp eax, ebp
jge 0x43a3e7
mov eax, dword [esp + 0x18]
mov byte [esp + 0xc0], 4
cmp eax, ebp
je 0x43a3c6
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x20]
mov byte [esp + 0xc0], 2
cmp eax, ebp
je 0x43a2a1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x43a2a1
mov dword [esp + 0x24], ebp
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
lea edx, [esp + 0x24]
push edx
push eax
mov eax, dword [ecx + 0x2c]
mov byte [esp + 0xc8], 7
call eax
cmp eax, ebp
mov eax, dword [esp + 0x24]
jge 0x43a422
mov byte [esp + 0xc0], 6
cmp eax, ebp
je 0x43a3ae
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x43a3ae
mov ecx, 0xb
xor edx, edx
mov ebx, eax
mov word [esp + 0x58], cx
mov word [esp + 0x60], dx
mov edi, dword [eax]
lea ecx, [esp + 0x58]
mov byte [esp + 0xc0], 8
add edi, 0x48
call fcn.00439d20
mov ecx, dword [edi]
movzx eax, ax
push eax
push ebx
call ecx
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [esp + 0x58]
push edx
mov edi, eax
call ebx
cmp edi, ebp
mov eax, dword [esp + 0x24]
jge 0x43a4e4
mov byte [esp + 0xc0], 6
cmp eax, ebp
je 0x43a47f
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x18]
mov byte [esp + 0xc0], 4
cmp eax, ebp
je 0x43a497
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x20]
mov byte [esp + 0xc0], 2
cmp eax, ebp
je 0x43a4af
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x1c]
mov byte [esp + 0xc0], 1
cmp eax, ebp
je 0x43a4c7
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
lea eax, [esp + 0x44]
push eax
call ebx
mov eax, dword [esp + 0x14]
mov dword [esp + 0xc0], 0xffffffff
cmp eax, ebp
jmp 0x43a180
mov ecx, 0xb
xor edx, edx
mov ebx, eax
mov word [esp + 0x58], cx
mov word [esp + 0x60], dx
mov edi, dword [eax]
lea ecx, [esp + 0x58]
mov byte [esp + 0xc0], 9
add edi, 0x40
call fcn.00439d20
mov ecx, dword [edi]
movzx eax, ax
push eax
push ebx
call ecx
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [esp + 0x58]
push edx
mov edi, eax
call ebx
cmp edi, ebp
jge 0x43a5a6
mov eax, dword [esp + 0x24]
mov byte [esp + 0xc0], 6
cmp eax, ebp
je 0x43a541
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x18]
mov byte [esp + 0xc0], 4
cmp eax, ebp
je 0x43a559
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x20]
mov byte [esp + 0xc0], 2
cmp eax, ebp
je 0x43a571
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x1c]
mov byte [esp + 0xc0], 1
cmp eax, ebp
je 0x43a589
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
lea eax, [esp + 0x44]
push eax
call ebx
mov eax, dword [esp + 0x14]
mov dword [esp + 0xc0], 0xffffffff
cmp eax, ebp
jmp 0x43a180
mov dword [esp + 0x28], ebp
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
lea edx, [esp + 0x28]
push edx
push eax
mov eax, dword [ecx + 0x24]
mov byte [esp + 0xc8], 0xa
call eax
cmp eax, ebp
jge 0x43a660
mov eax, dword [esp + 0x28]
mov byte [esp + 0xc0], 7
cmp eax, ebp
je 0x43a5e3
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x24]
mov byte [esp + 0xc0], 6
cmp eax, ebp
je 0x43a5fb
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x18]
mov byte [esp + 0xc0], 4
cmp eax, ebp
je 0x43a613
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x20]
mov byte [esp + 0xc0], 2
cmp eax, ebp
je 0x43a62b
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x1c]
mov byte [esp + 0xc0], 1
cmp eax, ebp
je 0x43a643
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
lea eax, [esp + 0x44]
push eax
call ebx
mov eax, dword [esp + 0x14]
mov dword [esp + 0xc0], 0xffffffff
cmp eax, ebp
jmp 0x43a180
mov dword [esp + 0x34], ebp
mov eax, dword [esp + 0x28]
mov ecx, dword [eax]
lea edx, [esp + 0x34]
push edx
push 9
push eax
mov eax, dword [ecx + 0x28]
mov byte [esp + 0xcc], 0xb
call eax
cmp eax, ebp
jge 0x43a734
mov eax, dword [esp + 0x34]
mov byte [esp + 0xc0], 0xa
cmp eax, ebp
je 0x43a69f
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x28]
mov byte [esp + 0xc0], 7
cmp eax, ebp
je 0x43a6b7
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x24]
mov byte [esp + 0xc0], 6
cmp eax, ebp
je 0x43a6cf
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x18]
mov byte [esp + 0xc0], 4
cmp eax, ebp
je 0x43a6e7
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x20]
mov byte [esp + 0xc0], 2
cmp eax, ebp
je 0x43a6ff
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x1c]
mov byte [esp + 0xc0], 1
cmp eax, ebp
je 0x43a717
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
lea eax, [esp + 0x44]
push eax
call ebx
mov eax, dword [esp + 0x14]
mov dword [esp + 0xc0], 0xffffffff
cmp eax, ebp
jmp 0x43a180
mov dword [esp + 0x30], ebp
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
lea edx, [esp + 0x30]
push edx
push eax
mov eax, dword [ecx + 0x44]
mov byte [esp + 0xc8], 0xc
call eax
cmp eax, ebp
jge 0x43a81e
mov eax, dword [esp + 0x30]
mov byte [esp + 0xc0], 0xb
cmp eax, ebp
je 0x43a771
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x34]
mov byte [esp + 0xc0], 0xa
cmp eax, ebp
je 0x43a789
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x28]
mov byte [esp + 0xc0], 7
cmp eax, ebp
je 0x43a7a1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x24]
mov byte [esp + 0xc0], 6
cmp eax, ebp
je 0x43a7b9
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x18]
mov byte [esp + 0xc0], 4
cmp eax, ebp
je 0x43a7d1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x20]
mov byte [esp + 0xc0], 2
cmp eax, ebp
je 0x43a7e9
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x1c]
mov byte [esp + 0xc0], 1
cmp eax, ebp
je 0x43a801
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
lea eax, [esp + 0x44]
push eax
call ebx
mov eax, dword [esp + 0x14]
mov dword [esp + 0xc0], 0xffffffff
cmp eax, ebp
jmp 0x43a180
mov dword [esp + 0x38], ebp
mov eax, dword [esp + 0x30]
mov ecx, dword [eax]
lea edx, [esp + 0x38]
push edx
push ebp
push eax
mov eax, dword [ecx + 0x30]
mov byte [esp + 0xcc], 0xd
call eax
cmp eax, ebp
mov eax, dword [esp + 0x38]
jge 0x43a921
mov byte [esp + 0xc0], 0xc
cmp eax, ebp
je 0x43a85c
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x30]
mov byte [esp + 0xc0], 0xb
cmp eax, ebp
je 0x43a874
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x34]
mov byte [esp + 0xc0], 0xa
cmp eax, ebp
je 0x43a88c
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x28]
mov byte [esp + 0xc0], 7
cmp eax, ebp
je 0x43a8a4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x24]
mov byte [esp + 0xc0], 6
cmp eax, ebp
je 0x43a8bc
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x18]
mov byte [esp + 0xc0], 4
cmp eax, ebp
je 0x43a8d4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x20]
mov byte [esp + 0xc0], 2
cmp eax, ebp
je 0x43a8ec
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x1c]
mov byte [esp + 0xc0], 1
cmp eax, ebp
je 0x43a904
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
lea eax, [esp + 0x44]
push eax
call ebx
mov eax, dword [esp + 0x14]
mov dword [esp + 0xc0], 0xffffffff
cmp eax, ebp
jmp 0x43a180
push eax
lea ecx, [esp + 0x40]
call fcn.00439fe0
mov ecx, dword [esp + 0xcc]
mov edi, dword [esp + 0x3c]
push ecx
lea ecx, [esp + 0x30]
mov byte [esp + 0xc4], 0xe
call fcn.00422380
mov eax, dword [eax]
mov edx, dword [edi]
push eax
mov eax, dword [edx + 0x2c]
push edi
mov byte [esp + 0xc8], 0xf
call eax
mov ecx, dword [esp + 0x2c]
mov ebx, dword [sym.imp.OLEAUT32.dll_SysStringLen]
push ecx
mov edi, eax
mov byte [esp + 0xc4], 0xe
call ebx
cmp edi, ebp
jge 0x43a9fb
mov eax, dword [esp + 0x3c]
mov byte [esp + 0xc0], 0xd
cmp eax, ebp
je 0x43a992
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
mov eax, dword [esp + 0x38]
mov byte [esp + 0xc0], 0xc
cmp eax, ebp
je 0x43a9aa
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x30]
mov byte [esp + 0xc0], 0xb
cmp eax, ebp
je 0x43a9c2
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x34]
mov byte [esp + 0xc0], 0xa
cmp eax, ebp
je 0x43a9da
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x28]
mov byte [esp + 0xc0], 7
cmp eax, ebp
je 0x43a9f2
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x24]
jmp 0x43a40c
mov eax, dword [esp + 0xd4]
cmp eax, ebp
je 0x43aa5d
mov edi, dword [esp + 0x3c]
push eax
lea ecx, [esp + 0x30]
call fcn.00422380
mov eax, dword [eax]
mov ecx, dword [edi]
mov edx, dword [ecx + 0x34]
push eax
push edi
mov byte [esp + 0xc8], 0x10
call edx
mov edi, eax
mov eax, dword [esp + 0x2c]
push eax
mov byte [esp + 0xc4], 0xe
call ebx
cmp edi, ebp
jge 0x43aa5d
mov eax, dword [esp + 0x3c]
mov byte [esp + 0xc0], 0xd
cmp eax, ebp
je 0x43a992
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x43a992
mov eax, dword [esp + 0xd0]
cmp eax, ebp
je 0x43aa96
mov edi, dword [esp + 0x3c]
push eax
lea ecx, [esp + 0x30]
call fcn.00422380
mov eax, dword [eax]
mov ecx, dword [edi]
mov edx, dword [ecx + 0x3c]
push eax
push edi
mov byte [esp + 0xc8], 0x11
call edx
mov edi, eax
mov eax, dword [esp + 0x2c]
push eax
call ebx
cmp edi, ebp
jl 0x43aa3c
mov dword [esp + 0x40], ebp
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
lea edx, [esp + 0x40]
push edx
push eax
mov eax, dword [ecx + 0x3c]
mov byte [esp + 0xc8], 0x12
call eax
cmp eax, ebp
jge 0x43aad8
mov eax, dword [esp + 0x40]
mov byte [esp + 0xc0], 0xe
cmp eax, ebp
je 0x43aa3c
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x43aa3c
mov edi, dword [esp + 0x40]
push str.Users
lea ecx, [esp + 0x30]
call fcn.00422380
mov eax, dword [eax]
mov ecx, dword [edi]
mov edx, dword [ecx + 0x40]
push eax
push edi
mov byte [esp + 0xc8], 0x13
call edx
mov edi, eax
mov eax, dword [esp + 0x2c]
push eax
mov byte [esp + 0xc4], 0x12
call ebx
cmp edi, ebp
mov eax, dword [esp + 0x40]
jge 0x43ab33
mov byte [esp + 0xc0], 0xe
cmp eax, ebp
je 0x43aa3c
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x43aa3c
mov ecx, dword [eax]
mov edx, dword [ecx + 0x48]
push 1
push eax
call edx
cmp eax, ebp
jge 0x43ab47
mov eax, dword [esp + 0x40]
jmp 0x43ab16
mov dword [esp + 0x54], 0
lea eax, [esp + 0x58]
push eax
call esi
mov ecx, dword [esp + 0x64]
mov edi, dword [esp + 0x58]
mov ebp, dword [esp + 0x5c]
mov ebx, dword [esp + 0x60]
lea edx, [esp + 0x88]
push edx
mov dword [esp + 0xb8], ecx
call esi
mov ecx, dword [esp + 0x8c]
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x90]
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x94]
lea ecx, [esp + 0x98]
push ecx
mov dword [esp + 0x74], edx
mov dword [esp + 0x78], eax
call esi
mov eax, dword [esp + 0x9c]
mov edx, dword [esp + 0x98]
mov ecx, dword [esp + 0xa0]
mov esi, dword [esp + 0x20]
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x78], edx
mov edx, dword [esp + 0xa4]
mov dword [esp + 0x80], ecx
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0xc4], 0x17
mov dword [esp + 0x88], edx
call fcn.00422380
mov ecx, dword [eax]
lea eax, [esp + 0x54]
push eax
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov edi, dword [esp + 0xc8]
mov dword [eax + 4], ebp
mov dword [eax + 8], ebx
mov dword [eax + 0xc], edi
mov edi, dword [esp + 0x7c]
push 3
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov edi, dword [esp + 0x94]
mov dword [eax + 4], edi
mov edi, dword [esp + 0x98]
mov edx, dword [esi]
mov dword [eax + 8], edi
mov edi, dword [esp + 0x9c]
mov dword [eax + 0xc], edi
mov edi, dword [esp + 0xa0]
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov edi, dword [esp + 0xb4]
mov dword [eax + 4], edi
mov edi, dword [esp + 0xb8]
mov dword [eax + 8], edi
mov edi, dword [esp + 0xbc]
push 6
mov dword [eax + 0xc], edi
mov eax, dword [esp + 0x54]
push eax
push ecx
mov ecx, dword [edx + 0x44]
mov byte [esp + 0x104], 0x18
push esi
call ecx
mov edx, dword [esp + 0x2c]
push edx
mov esi, eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [esp + 0x98]
push eax
call edi
lea ecx, [esp + 0x88]
push ecx
call edi
lea edx, [esp + 0x58]
push edx
call edi
mov eax, dword [esp + 0x54]
mov byte [esp + 0xc0], 0x12
test esi, esi
jge 0x43ade8
test eax, eax
je 0x43acd7
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x40]
mov byte [esp + 0xc0], 0xe
test eax, eax
je 0x43acef
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x3c]
mov byte [esp + 0xc0], 0xd
test eax, eax
je 0x43ad07
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x38]
mov byte [esp + 0xc0], 0xc
test eax, eax
je 0x43ad1f
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x30]
mov byte [esp + 0xc0], 0xb
test eax, eax
je 0x43ad37
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x34]
mov byte [esp + 0xc0], 0xa
test eax, eax
je 0x43ad4f
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x28]
mov byte [esp + 0xc0], 7
test eax, eax
je 0x43ad67
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x24]
mov byte [esp + 0xc0], 6
test eax, eax
je 0x43ad7f
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x18]
mov byte [esp + 0xc0], 4
test eax, eax
je 0x43ad97
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x20]
mov byte [esp + 0xc0], 2
test eax, eax
je 0x43adaf
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x1c]
mov byte [esp + 0xc0], 1
test eax, eax
je 0x43adc7
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
lea eax, [esp + 0x44]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [esp + 0x14]
mov dword [esp + 0xc0], 0xffffffff
test eax, eax
jmp 0x43a180
test eax, eax
je 0x43adf4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x40]
mov byte [esp + 0xc0], 0xe
test eax, eax
je 0x43ae0c
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x3c]
mov byte [esp + 0xc0], 0xd
test eax, eax
je 0x43ae24
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x38]
mov byte [esp + 0xc0], 0xc
test eax, eax
je 0x43ae3c
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x30]
mov byte [esp + 0xc0], 0xb
test eax, eax
je 0x43ae54
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x34]
mov byte [esp + 0xc0], 0xa
test eax, eax
je 0x43ae6c
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x28]
mov byte [esp + 0xc0], 7
test eax, eax
je 0x43ae84
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x24]
mov byte [esp + 0xc0], 6
test eax, eax
je 0x43ae9c
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x18]
mov byte [esp + 0xc0], 4
test eax, eax
je 0x43aeb4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x20]
mov byte [esp + 0xc0], 2
test eax, eax
je 0x43aecc
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x1c]
mov byte [esp + 0xc0], 1
test eax, eax
je 0x43aee4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
lea eax, [esp + 0x44]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [esp + 0x14]
mov dword [esp + 0xc0], 0xffffffff
test eax, eax
je 0x43af0a
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, 1
jmp 0x43a18c