Function at 0x40c884
Capabilities:
Allocate thread local storage
Enumerate files on windows
Get file size
Get thread local storage value
Set thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x19c
push esi
mov dword [ebp - 0x30], 0x2d
mov dword [ebp - 0xc], 0x78
mov dword [ebp - 0x44], 0xe2
mov dword [ebp - 4], 0x34
mov dword [ebp - 0x18], 0x42
mov dword [ebp - 0x10], 0x38
mov dword [ebp - 8], 0xad
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x89
ja case.0x40c8f8.1
mov ecx, dword [ebp - 0x50]
movzx edx, byte [ecx + 0x40d614]
jmp dword [edx*4 + 0x40d600]
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0x124], 0xae
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x54], 0
push str.PaPqcvjnwFH.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0xd4], eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
movzx ecx, word [eax]
mov dword [ebp - 0x54], ecx
push str.MRWACV
mov edx, dword [ebp - 0xd4]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x58], eax
push str.qlGxffP.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x2c], eax
push str.begMgLfo
mov eax, dword [ebp - 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xd8], eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x24]
movzx edx, word [ecx]
mov dword [ebp - 0x54], edx
lea eax, [ebp - 4]
push eax
push str.UtOVwYIL
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0xc], 0
lea ecx, [ebp - 4]
push ecx
mov edx, dword [ebp - 0x44]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
je 0x40c9e6
mov eax, dword [ebp - 0xc]
add eax, 1
mov dword [ebp - 0xc], eax
jmp 0x40c9c9
lea ecx, [ebp - 0x38]
push ecx
push str.mfhvdcTjgmfha
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x10], 0
lea edx, [ebp - 0x38]
push edx
mov eax, dword [ebp - 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
je 0x40ca1c
mov ecx, dword [ebp - 0x10]
add ecx, 1
mov dword [ebp - 0x10], ecx
jmp 0x40c9ff
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x58], edx
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xdc], eax
mov ecx, dword [0x421804]
push ecx
call fcn.0040bf14
add esp, 4
jmp 0x40caef
mov edx, dword [0x4217f8]
push edx
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.00418e94
add esp, 4
jmp 0x40caef
mov dword [ebp - 0x130], 0xa7
mov dword [ebp - 0xe0], 0x93
mov edx, dword [0x421824]
push edx
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.ole32.dll_CoTreatAsClass]
mov dword [0x4217e8], eax
mov ecx, dword [ebp - 0xc]
imul ecx, dword [ebp - 0x18]
mov dword [ebp - 0xe0], ecx
mov edx, dword [0x4217fc]
push edx
mov eax, dword [0x42180c]
push eax
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
mov dword [ebp - 8], eax
jmp 0x40caef
mov dword [ebp - 0x134], 0x32
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov dword [ebp - 0x10], eax
jmp 0x40caef
mov dword [ebp - 0x138], 1
mov dword [ebp - 0x13c], 0xaa
mov edx, dword [ebp - 0x38]
push edx
call dword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [0x4217ec], eax
mov eax, dword [ebp - 0x14]
sub eax, dword [0x421814]
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 8]
cmp eax, ecx
jne 0x40cb0b
mov dword [ebp - 0x5c], 1
jmp 0x40cb12
mov dword [ebp - 0x5c], 0
cmp dword [ebp - 0x5c], 0
je 0x40cb4c
mov edx, dword [ebp - 0xc]
and edx, dword [ebp - 0x10]
mov eax, dword [0x421818]
and eax, dword [0x4217f4]
cmp edx, eax
jne 0x40cb36
mov dword [ebp - 0x60], 1
jmp 0x40cb3d
mov dword [ebp - 0x60], 0
cmp dword [ebp - 0x60], 0
je 0x40cb4c
mov dword [ebp - 0x64], 1
jmp 0x40cb53
mov dword [ebp - 0x64], 0
cmp dword [ebp - 0x64], 0
je 0x40cc92
mov ecx, dword [ebp - 0x28]
or ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 8]
imul edx, dword [ebp - 0x14]
cmp ecx, edx
jae 0x40cb77
mov dword [ebp - 0x68], 1
jmp 0x40cb7e
mov dword [ebp - 0x68], 0
cmp dword [ebp - 0x68], 0
je 0x40cc92
mov dword [ebp - 0x140], 0xd8
push fcn.0040bf14
mov eax, dword [ebp - 0x20]
push eax
call fcn.00415df4
add esp, 8
mov esi, eax
push fcn.0040e4a4
mov ecx, dword [0x4217f8]
push ecx
call fcn.0040e4a4
add esp, 8
cmp esi, eax
jne 0x40cbc6
mov dword [ebp - 0x6c], 1
jmp 0x40cbcd
mov dword [ebp - 0x6c], 0
cmp dword [ebp - 0x6c], 0
je 0x40cc40
mov edx, dword [0x4217ec]
push edx
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
mov ecx, eax
mov eax, dword [0x4217f0]
xor edx, edx
div dword [ebp - 0x1c]
cmp ecx, eax
jae 0x40cbf9
mov dword [ebp - 0x70], 1
jmp 0x40cc00
mov dword [ebp - 0x70], 0
cmp dword [ebp - 0x70], 0
je 0x40cc40
mov dword [ebp - 0x144], 0xc9
mov edx, dword [ebp - 0x2c]
add edx, dword [0x421804]
mov dword [0x42180c], edx
mov eax, dword [0x421824]
add eax, dword [0x421818]
mov dword [0x4217f0], eax
mov ecx, dword [0x421818]
or ecx, dword [ebp - 0x14]
mov dword [0x421824], ecx
jmp 0x40cc75
mov edx, dword [0x42181c]
add edx, dword [0x421814]
mov dword [0x42181c], edx
mov eax, dword [0x42180c]
xor eax, dword [0x42180c]
mov dword [0x4217ec], eax
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 0x30]
push edx
call dword [sym.imp.ole32.dll_CoTreatAsClass]
mov dword [0x421814], eax
mov eax, dword [ebp - 0x24]
and eax, dword [ebp - 0x2c]
mov dword [0x4217e8], eax
mov eax, dword [ebp - 4]
xor edx, edx
div dword [0x421820]
mov dword [0x42180c], eax
jmp 0x40ccf8
mov dword [ebp - 0x74], 0xf4
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0x148], 0x1e
mov dword [ebp - 0xe4], 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp + 8], eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp + 0xc], eax
push 0
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
je 0x40ccec
mov dword [ebp - 0xe4], 0x40a
mov edx, dword [ebp + 0xc]
movzx eax, word [edx]
mov dword [ebp - 0xe8], eax
push fcn.0040bf14
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp - 0x2c]
push edx
call fcn.00412234
add esp, 0xc
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0xdb
ja case.0x40cd2a.1
mov ecx, dword [ebp - 0x78]
movzx edx, byte [ecx + 0x40d6c4]
jmp dword [edx*4 + 0x40d6a0]
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0x14c], 0xd4
mov dword [ebp - 0xf8], 0x4d
mov dword [ebp - 0x100], 0
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0x104], 0xa3
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xec], eax
push 0
mov eax, dword [ebp - 0xec]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0
je 0x40cda3
mov dword [ebp - 0xf4], 0x1460
push 0
push 0xffffffffffffffff
push str.wkskcdhohr
push 0xffffffffffffffff
push str.cfhhugmcm
push 0
push 0x800
call dword [sym.imp.KERNEL32.dll_CompareStringA]
mov dword [ebp - 0xf8], eax
mov ecx, dword [ebp - 0xfc]
sub ecx, dword [ebp - 0x100]
mov dword [ebp - 0x104], ecx
jmp 0x40cf26
mov dword [ebp - 0x150], 0x16
mov edx, dword [ebp + 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
mov dword [ebp - 0x18], eax
mov eax, dword [str.AJ]
add eax, dword [ebp - 8]
mov dword [0x4217e8], eax
mov ecx, dword [0x4217f0]
push ecx
call fcn.0040b7d4
add esp, 4
jmp 0x40cf26
mov edx, dword [0x421800]
xor edx, dword [0x4217e8]
mov dword [0x4217f4], edx
jmp 0x40cf26
mov dword [ebp - 0x154], 0x58
mov dword [ebp - 0x158], 0xc6
mov eax, dword [0x4217fc]
add eax, dword [ebp - 0x24]
mov dword [0x421804], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x18]
mov dword [0x4217ec], ecx
push fcn.0040bf14
mov edx, dword [ebp - 0x18]
push edx
call fcn.004154e4
add esp, 8
jmp 0x40cf26
mov eax, dword [0x4217ec]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp + 8]
mov dword [0x4217f0], ecx
jmp 0x40cf26
push fcn.00412234
mov edx, dword [str.AJ]
push edx
mov eax, dword [0x421824]
push eax
call fcn.00417804
add esp, 0xc
mov ecx, dword [ebp - 0x18]
mov edx, 1
lock xadd dword [ecx], edx
inc edx
mov dword [ebp - 0x30], edx
jmp 0x40cf26
mov dword [ebp - 0x7c], 0x5d
push fcn.0040b7d4
mov eax, dword [ebp - 4]
push eax
call fcn.004107c4
add esp, 8
mov eax, dword [ebp - 0x7c]
xor edx, edx
div dword [0x421800]
mov dword [0x4217e4], eax
mov ecx, dword [ebp - 0x7c]
and ecx, dword [str.AJ]
mov dword [str.AJ], ecx
jmp 0x40cf26
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
mov dword [ebp - 0x38], eax
jmp 0x40cf26
mov dword [ebp - 0x15c], 0x5e
mov dword [ebp - 0x160], 0x57
mov edx, dword [0x421808]
or eax, 0xffffffff
lock xadd dword [edx], eax
dec eax
mov dword [0x4217f0], eax
mov ecx, dword [ebp - 0x24]
or ecx, dword [0x421804]
mov edx, dword [0x421818]
xor edx, dword [ebp - 0x10]
cmp ecx, edx
je 0x40cf45
mov dword [ebp - 0x80], 1
jmp 0x40cf4c
mov dword [ebp - 0x80], 0
cmp dword [ebp - 0x80], 0
je 0x40cf93
mov eax, dword [0x421824]
and eax, dword [0x4217f0]
mov ecx, dword [ebp - 0x1c]
imul ecx, dword [ebp - 0x24]
cmp eax, ecx
jae 0x40cf74
mov dword [ebp - 0x84], 1
jmp 0x40cf7e
mov dword [ebp - 0x84], 0
cmp dword [ebp - 0x84], 0
je 0x40cf93
mov dword [ebp - 0x88], 1
jmp 0x40cf9d
mov dword [ebp - 0x88], 0
cmp dword [ebp - 0x88], 0
je 0x40cfe4
mov edx, dword [0x421814]
and edx, dword [ebp - 0xc]
jne 0x40cfc5
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp + 8]
jne 0x40cfc5
mov dword [ebp - 0x8c], 0
jmp 0x40cfcf
mov dword [ebp - 0x8c], 1
cmp dword [ebp - 0x8c], 0
je 0x40cfe4
mov dword [ebp - 0x90], 1
jmp 0x40cfee
mov dword [ebp - 0x90], 0
cmp dword [ebp - 0x90], 0
je 0x40d03b
mov ecx, dword [0x421814]
and ecx, dword [0x421804]
jne 0x40d01c
mov edx, dword [ebp + 8]
imul edx, dword [ebp - 4]
test edx, edx
jne 0x40d01c
mov dword [ebp - 0x94], 0
jmp 0x40d026
mov dword [ebp - 0x94], 1
cmp dword [ebp - 0x94], 0
je 0x40d03b
mov dword [ebp - 0x98], 1
jmp 0x40d045
mov dword [ebp - 0x98], 0
cmp dword [ebp - 0x98], 0
je 0x40d084
mov eax, dword [ebp - 0x14]
xor edx, edx
div dword [ebp - 8]
mov ecx, dword [ebp - 0x1c]
imul ecx, dword [ebp - 0x1c]
cmp eax, ecx
jbe 0x40d06d
mov dword [ebp - 0x9c], 1
jmp 0x40d077
mov dword [ebp - 0x9c], 0
cmp dword [ebp - 0x9c], 0
jne 0x40d3cb
mov dword [ebp - 0xcc], 0x65
mov dword [ebp - 0x3c], 0xc9
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x164], 0
mov dword [ebp - 0x108], 0
mov edx, dword [ebp - 0x14]
and edx, dword [0x4217e8]
mov eax, dword [0x421804]
and eax, dword [0x421814]
cmp edx, eax
jne 0x40d0e5
mov dword [ebp - 0xa0], 1
jmp 0x40d0ef
mov dword [ebp - 0xa0], 0
cmp dword [ebp - 0xa0], 0
je 0x40d137
mov ecx, dword [ebp + 0xc]
sub ecx, dword [0x4217e0]
mov edx, dword [ebp - 0x4c]
imul edx, dword [ebp - 0x44]
cmp ecx, edx
jae 0x40d118
mov dword [ebp - 0xa4], 1
jmp 0x40d122
mov dword [ebp - 0xa4], 0
cmp dword [ebp - 0xa4], 0
je 0x40d137
mov dword [ebp - 0xa8], 1
jmp 0x40d141
mov dword [ebp - 0xa8], 0
cmp dword [ebp - 0xa8], 0
je 0x40d1a9
mov eax, dword [ebp - 0x48]
sub eax, dword [ebp - 0x48]
je 0x40d169
mov ecx, dword [ebp - 0x48]
or ecx, dword [ebp - 0x108]
je 0x40d169
mov dword [ebp - 0xac], 1
jmp 0x40d173
mov dword [ebp - 0xac], 0
cmp dword [ebp - 0xac], 0
je 0x40d1a9
mov edx, dword [0x4217f8]
push edx
call dword [sym.imp.KERNEL32.dll_TlsFree]
mov dword [0x421824], eax
mov eax, dword [ebp - 8]
or eax, dword [ebp + 0xc]
mov dword [ebp - 0x168], eax
mov ecx, dword [ebp - 0x3c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [ebp - 4], eax
jmp 0x40d1f2
mov dword [ebp - 0x34], 0
push 0
push 0xffffffffffffffff
push str.wvrlomjmvw
push 0xffffffffffffffff
push str.pfwxvkhln
push 0
push 0x800
call dword [sym.imp.KERNEL32.dll_CompareStringA]
mov dword [ebp - 0x34], eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x3c], eax
mov edx, dword [ebp - 0x3c]
movzx eax, word [edx]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x34]
mov dword [ebp - 0x34], ecx
jmp 0x40d3cb
mov edx, dword [0x421818]
sub edx, dword [ebp - 0xc]
mov dword [0x4217e8], edx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
cmp eax, dword [0x4217e8]
jbe 0x40d21b
mov dword [ebp - 0xb0], 1
jmp 0x40d225
mov dword [ebp - 0xb0], 0
mov eax, dword [0x421804]
push eax
mov ecx, dword [0x4217f4]
push ecx
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
test eax, eax
jne 0x40d258
mov edx, dword [ebp + 8]
push edx
call fcn.00418024
add esp, 4
test eax, eax
jne 0x40d258
mov dword [ebp - 0xb4], 0
jmp 0x40d262
mov dword [ebp - 0xb4], 1
mov eax, dword [ebp - 0xb0]
cmp eax, dword [ebp - 0xb4]
jne 0x40d27c
mov dword [ebp - 0xb8], 1
jmp 0x40d286
mov dword [ebp - 0xb8], 0
cmp dword [ebp - 0xb8], 0
jne 0x40d2e0
mov ecx, dword [ebp - 0xc0]
push ecx
call fcn.0040fad4
add esp, 4
mov esi, eax
mov edx, dword [0x42181c]
push edx
mov eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp esi, eax
jae 0x40d2c1
mov dword [ebp - 0xbc], 1
jmp 0x40d2cb
mov dword [ebp - 0xbc], 0
cmp dword [ebp - 0xbc], 0
jne 0x40d2e0
mov dword [ebp - 0xc4], 0
jmp 0x40d2ea
mov dword [ebp - 0xc4], 1
mov ecx, dword [ebp - 0xc0]
push ecx
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [0x421804]
push ecx
mov edx, dword [0x421800]
push edx
call dword [sym.imp.GDI32.dll_PolylineTo]
cmp esi, eax
jbe 0x40d325
mov dword [ebp - 0xc8], 1
jmp 0x40d32f
mov dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0xc4]
cmp eax, dword [ebp - 0xc8]
jae 0x40d37f
mov dword [ebp - 0x16c], 0xa5
mov ecx, dword [ebp - 0x14]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [0x421824], eax
mov edx, dword [0x421804]
push edx
mov eax, dword [0x421804]
push eax
call dword [sym.imp.GDI32.dll_SetArcDirection]
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp - 0x4c]
push edx
call dword [sym.imp.OLEAUT32.dll_SafeArrayAllocDescriptor]
mov dword [ebp - 0x3c], eax
jmp 0x40d3c6
mov dword [ebp - 0x170], 0xdd
mov eax, dword [0x421820]
push eax
mov ecx, dword [0x4217fc]
push ecx
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
mov dword [ebp - 0x28], eax
mov edx, dword [0x421808]
add edx, dword [0x421804]
mov dword [0x4217f0], edx
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xcc], eax
mov ecx, dword [ebp - 0xcc]
mov dword [0x421814], ecx
jmp 0x40cf26
push 0
push 0xffffffffffffffff
push str.usbatmvyf
push 0xffffffffffffffff
push str.hgoz
push 0
push 0x800
call dword [sym.imp.KERNEL32.dll_CompareStringA]
mov dword [ebp - 8], eax
push 0
push 0xffffffffffffffff
push str.nyphihafwq
push 0xffffffffffffffff
push str.psdafuucp
push 0
push 0x800
call dword [sym.imp.KERNEL32.dll_CompareStringA]
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x40]
sub eax, 0x1d
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xa4
ja case.0x40d431.1
mov ecx, dword [ebp - 0x40]
movzx edx, byte [ecx + 0x40d7bc]
jmp dword [edx*4 + 0x40d7a0]
mov dword [ebp - 0x174], 0x68
mov eax, dword [ebp - 0xc]
mov dword [0x42180c], eax
mov ecx, dword [0x42180c]
mov dword [0x4217e0], ecx
mov edx, dword [ebp - 4]
push edx
mov eax, dword [0x4217e4]
push eax
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
mov dword [ebp - 0x28], eax
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
mov dword [ebp - 0x10], eax
jmp fcn.0040d5f3
mov ecx, dword [0x4217fc]
or ecx, dword [0x421804]
mov dword [0x42181c], ecx
jmp fcn.0040d5f3
mov dword [ebp - 0x178], 0xa3
mov dword [ebp - 0x17c], 0xfd
mov edx, dword [ebp - 0x38]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.OLEAUT32.dll_SafeArrayAllocDescriptor]
mov dword [ebp - 0x20], eax
jmp fcn.0040d5f3
mov dword [ebp - 0x10c], 0x44
mov dword [ebp - 0x180], 0xe1
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 0x14]
push edx
call dword [sym.imp.OLEAUT32.dll_SafeArrayAllocDescriptor]
add byte [ebx + 0x421808], ah
mov edx, dword [ebp - 0x38]
push edx
call dword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [ebp - 0x10], eax
mov eax, dword [0x4217e0]
or eax, dword [ebp - 0x24]
mov dword [0x4217e4], eax
jmp fcn.0040d5f3
mov dword [ebp - 0x188], 0x62
mov dword [ebp - 0x18c], 0x4c
mov dword [ebp - 0x110], 0x27
mov ecx, dword [0x4217f0]
push ecx
invalid