Function at 0x418fb0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x48fa40
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x28
push esi
push edi
push str.SafeSheildDB.mdb
call fcn.004189a0
mov eax, dword [0x4afd08]
add esp, 4
mov dword [esp + 8], eax
mov dword [esp + 0x38], 0
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x40]
lea ecx, [esp + 8]
push eax
push str.select__from__s
push ecx
mov byte [esp + 0x44], 1
call fcn.0047a92c
mov eax, dword [0x4c0f70]
add esp, 0xc
test eax, eax
je 0x419017
mov edx, dword [eax]
push eax
call dword [edx + 8]
lea eax, [esp + 0x40]
push eax
push 0x4aef28
push 7
push 0
push 0x4aef18
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jl 0x419060
mov ecx, dword [esp + 0x40]
push ecx
call dword [sym.imp.ole32.dll_OleRun]
test eax, eax
jl 0x419056
mov eax, dword [esp + 0x40]
push 0x4c0f70
push 0x4aef08
push eax
mov edx, dword [eax]
call dword [edx]
mov eax, dword [esp + 0x40]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [esp + 8]
mov word [esp + 0x20], 8
push eax
mov esi, eax
call fcn.0042fe45
test eax, eax
mov dword [esp + 0x28], eax
jne 0x419089
test esi, esi
je 0x419089
push 0x8007000e
call fcn.0042fd98
mov eax, dword [0x4c0f74]
mov word [esp + 0x10], 9
mov dword [esp + 0x18], eax
push eax
mov edx, dword [eax]
mov byte [esp + 0x3c], 2
call dword [edx + 4]
mov eax, dword [0x4c0f70]
mov byte [esp + 0x38], 3
test eax, eax
jne 0x4190c1
push 0x80004003
call fcn.0042fd98
mov eax, dword [0x4c0f70]
mov edi, dword [esp + 0x10]
push 1
push 2
push 2
sub esp, 0x10
mov ecx, dword [eax]
mov edx, esp
sub esp, 0x10
mov esi, eax
mov dword [edx], edi
mov edi, dword [esp + 0x40]
mov dword [edx + 4], edi
mov edi, dword [esp + 0x44]
mov dword [edx + 8], edi
mov edi, dword [esp + 0x48]
mov dword [edx + 0xc], edi
mov edi, dword [esp + 0x4c]
mov edx, esp
push eax
mov dword [edx], edi
mov edi, dword [esp + 0x54]
mov dword [edx + 4], edi
mov edi, dword [esp + 0x58]
mov dword [edx + 8], edi
mov edi, dword [esp + 0x5c]
mov dword [edx + 0xc], edi
call dword [ecx + 0xa0]
test eax, eax
jge 0x419122
push 0x4aeef8
push esi
push eax
call fcn.0042fda6
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [esp + 0x10]
push eax
mov byte [esp + 0x3c], 2
call esi
test eax, eax
jge 0x41913e
push eax
call fcn.0042fd98
lea ecx, [esp + 0x20]
mov byte [esp + 0x38], 1
push ecx
call esi
test eax, eax
jge 0x419154
push eax
call fcn.0042fd98
mov eax, dword [0x4c0f70]
test eax, eax
jne 0x41916c
push 0x80004003
call fcn.0042fd98
mov eax, dword [0x4c0f70]
mov edx, dword [eax]
lea ecx, [esp + 0x40]
push ecx
push eax
mov esi, eax
call dword [edx + 0x50]
test eax, eax
jge 0x419189
push 0x4aeef8
push esi
push eax
call fcn.0042fda6
cmp word [esp + 0x40], 0
jne 0x419202
mov eax, dword [0x4c0f70]
test eax, eax
jne 0x4191a9
push 0x80004003
call fcn.0042fd98
mov eax, dword [0x4c0f70]
mov edx, dword [eax]
push 1
push eax
mov esi, eax
call dword [edx + 0x84]
test eax, eax
jge 0x4191c6
push 0x4aeef8
push esi
push eax
call fcn.0042fda6
mov eax, dword [0x4c0f70]
test eax, eax
jne 0x4191de
push 0x80004003
call fcn.0042fd98
mov eax, dword [0x4c0f70]
mov ecx, dword [eax]
push eax
mov esi, eax
call dword [ecx + 0x90]
test eax, eax
jge 0x419154
push 0x4aeef8
push esi
push eax
call fcn.0042fda6
jmp 0x419154
lea ecx, [esp + 0xc]
mov byte [esp + 0x38], 0
call fcn.0048105e
lea ecx, [esp + 8]
mov dword [esp + 0x38], 0xffffffff
call fcn.0048105e
mov ecx, dword [esp + 0x30]
pop edi
xor eax, eax
mov dword fs:[0], ecx
pop esi
add esp, 0x34
ret