Function at 0x410c20
Capabilities:
Connect to wmi namespace via wbemlocator

Disassembly:
push ebp
lea ebp, [esp - 0x148]
sub esp, 0x148
push 0xffffffffffffffff
push 0x611fa2
mov eax, dword fs:[0]
push eax
sub esp, 0x84
mov eax, dword [0x6efdcc]
xor eax, ebp
mov dword [ebp + 0x144], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
jmp 0x410cc2
jmp 0x410d28
lea eax, [ebp - 0x38]
push eax
call 0x418620
xor ebx, ebx
mov dword [ebp - 4], ebx
jmp 0x410d9c
mov esi, 0xf
mov dword [ebp + 0x88], esi
mov dword [ebp + 0x84], ebx
mov byte [ebp + 0x74], bl
jmp 0x410e16
mov dword [ebp + 0xc0], esi
mov dword [ebp + 0xbc], ebx
mov byte [ebp + 0xac], bl
jmp 0x410e8e
mov dword [ebp + 0xa4], esi
mov dword [ebp + 0xa0], ebx
mov byte [ebp + 0x90], bl
push ebx
push ebx
mov byte [ebp - 4], 3
call dword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
jge 0x410f67
mov edi, 0x10
cmp dword [ebp + 0xa4], edi
jb 0x410ed0
mov ecx, dword [ebp + 0x90]
push ecx
call fcn.005bac10
add esp, 4
mov dword [ebp + 0xa4], esi
mov dword [ebp + 0xa0], ebx
mov byte [ebp + 0x90], bl
cmp dword [ebp + 0xc0], edi
jb 0x410ef9
mov edx, dword [ebp + 0xac]
push edx
call fcn.005bac10
add esp, 4
mov dword [ebp + 0xc0], esi
mov dword [ebp + 0xbc], ebx
mov byte [ebp + 0xac], bl
cmp dword [ebp + 0x88], edi
jb 0x410f1f
mov eax, dword [ebp + 0x74]
push eax
call fcn.005bac10
add esp, 4
mov eax, dword [ebp - 0x2c]
mov dword [ebp + 0x88], esi
mov dword [ebp + 0x84], ebx
mov byte [ebp + 0x74], bl
cmp eax, ebx
je 0x410f4d
mov ecx, dword [ebp - 0x58]
mov edi, dword [ebp - 0x28]
push ecx
call fcn.0041b4d0
mov edx, dword [ebp - 0x2c]
push edx
call fcn.005bac10
add esp, 8
mov eax, dword [ebp - 0x38]
push eax
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
call fcn.005bac10
add esp, 4
jmp 0x4142f0
jmp 0x410fcd
jmp 0x411033
lea ecx, [ebp - 0x14]
push ecx
push 0x6b5888
push 1
push ebx
push 0x6b5958
mov dword [ebp - 0x14], ebx
call dword [sym.imp.ole32.dll_CoCreateInstance]
jmp 0x4110b3
cmp eax, ebx
jge 0x411133
call dword [sym.imp.ole32.dll_CoUninitialize]
mov edi, 0x10
cmp dword [ebp + 0xa4], edi
jb 0x4110d9
mov edx, dword [ebp + 0x90]
push edx
call fcn.005bac10
add esp, 4
mov dword [ebp + 0xa4], esi
mov dword [ebp + 0xa0], ebx
mov byte [ebp + 0x90], bl
cmp dword [ebp + 0xc0], edi
jb 0x411102
mov eax, dword [ebp + 0xac]
push eax
call fcn.005bac10
add esp, 4
mov dword [ebp + 0xc0], esi
mov dword [ebp + 0xbc], ebx
mov byte [ebp + 0xac], bl
cmp dword [ebp + 0x88], edi
jb 0x411128
mov ecx, dword [ebp + 0x74]
push ecx
call fcn.005bac10
add esp, 4
mov dword [ebp + 0x88], esi
jmp 0x4142df
jmp 0x411199
jmp 0x4111ff
mov dword [ebp - 0x10], ebx
jmp 0x411268
mov ecx, 0x43e6cf26
lea eax, [ebp - 0x50]
call fcn.0041a5e0
lea edx, [ebp - 0x5c]
push edx
mov edi, eax
mov byte [ebp - 4], 4
call fcn.0040fe10
mov byte [ebp - 4], 5
mov eax, dword [eax]
cmp eax, ebx
je 0x411292
mov ecx, dword [eax]
jmp 0x411294
xor ecx, ecx
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
lea esi, [ebp - 0x10]
push esi
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ecx
push eax
mov eax, dword [edx + 0xc]
call eax
lea edi, [ebp - 0x5c]
mov esi, eax
call fcn.0040feb0
mov byte [ebp - 4], 3
jmp 0x41131e
cmp esi, ebx
jge 0x411338
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
call dword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x41396b
jmp 0x41139e
jmp 0x411404
mov eax, dword [ebp - 0x10]
push ebx
push ebx
push 3
push 3
push ebx
push ebx
push 0xa
push eax
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
jmp 0x41147e
cmp eax, ebx
jge 0x4114c1
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp + 0x8c]
call fcn.004071f0
lea ecx, [ebp + 0xa8]
call fcn.004071f0
lea ecx, [ebp + 0x70]
call fcn.004071f0
jmp 0x4142e8
jmp 0x411527
mov edi, 0x7597330
lea esi, [ebp - 0x8a]
mov dword [ebp - 0x1c], ebx
call fcn.0041a690
push eax
lea ebx, [ebp - 0x64]
mov byte [ebp - 4], 6
call fcn.0040fd80
mov esi, eax
mov ecx, 0xa1
xor eax, eax
mov dl, byte [eax + 0x6c25e8]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [ebp + eax - 0x5c], dl
jns 0x41156d
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 3
jl 0x411550
mov byte [ebp - 0x59], 0
lea eax, [ebp - 0x5c]
push eax
lea ebx, [ebp - 0x6c]
mov byte [ebp - 4], 8
call fcn.0040fd80
mov byte [ebp - 4], 9
mov ecx, dword [esi]
test ecx, ecx
je 0x411595
mov ecx, dword [ecx]
jmp 0x411597
xor ecx, ecx
mov eax, dword [eax]
test eax, eax
je 0x4115a1
mov edx, dword [eax]
jmp 0x4115a3
xor edx, edx
mov eax, dword [ebp - 0x10]
mov esi, dword [eax]
lea edi, [ebp - 0x1c]
push edi
push 0
push 0x30
push ecx
mov ecx, dword [esi + 0x50]
push edx
push eax
call ecx
lea edi, [ebp - 0x6c]
mov esi, eax
call fcn.0040feb0
lea edi, [ebp - 0x64]
mov dword [ebp - 0x5c], 0
call fcn.0040feb0
mov bl, 3
mov byte [ebp - 4], bl
jmp 0x41163c
xor ecx, ecx
cmp esi, ecx
jge 0x411681
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp + 0x8c]
call fcn.004071f0
lea ecx, [ebp + 0xa8]
call fcn.004071f0
lea ecx, [ebp + 0x70]
call fcn.004071f0
jmp 0x4142e8
jmp 0x4116e7
mov dword [ebp - 0x18], ecx
jmp 0x411750
mov dword [ebp - 0x20], ecx
jmp 0x4117b9
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
je 0x411d7c
mov ecx, dword [eax]
lea edx, [ebp - 0x20]
push edx
lea edx, [ebp - 0x18]
push edx
push 1
push 0xffffffffffffffff
push eax
mov eax, dword [ecx + 0x10]
call eax
jmp 0x41183e
cmp dword [ebp - 0x20], 0
je 0x411d7c
jmp 0x4118ae
jmp 0x411914
mov ecx, 0x6c25ec
sub ecx, 0x7e1ae418
push ecx
lea eax, [ebp - 0x88]
call fcn.0041a6d0
push 0
push 0
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
lea esi, [ebp - 0x4c]
push esi
push 0
push eax
mov eax, dword [edx + 0x10]
push ecx
call eax
mov byte [ebp - 4], bl
test eax, eax
jne 0x411a43
mov ax, word [ebp - 0x4c]
cmp ax, 1
je 0x411a43
test ax, ax
je 0x411a43
jmp 0x4119cd
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp + 0xc4]
push 0x6c20bc
push edx
call fcn.005def19
add esp, 0xc
lea eax, [ebp + 0xc4]
push eax
lea ecx, [ebp]
call fcn.004071b0
push 0xffffffffffffffff
push 0
lea ecx, [ebp]
push ecx
lea ecx, [ebp + 0x70]
mov byte [ebp - 4], 0xb
call fcn.00418970
push 0xffffffffffffffff
push 0
lea edx, [ebp]
push edx
lea ecx, [ebp + 0xa8]
call fcn.00418970
push 0xffffffffffffffff
push 0
lea eax, [ebp]
push eax
lea ecx, [ebp + 0x8c]
call fcn.00418970
mov ecx, esi
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
push ecx
call esi
lea ecx, [ebp]
call fcn.004071f0
jmp 0x411a49
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x411aaf
jmp 0x411b15
mov edx, 0x6c2608
sub edx, 0x278cbf8a
push edx
lea eax, [ebp - 0x90]
call fcn.0041a720
push 0
push 0
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
lea edi, [ebp - 0x4c]
push edi
push 0
push eax
mov eax, dword [edx + 0x10]
push ecx
call eax
mov byte [ebp - 4], bl
test eax, eax
jne 0x411bd6
cmp word [ebp - 0x4c], 8
jne 0x411bd6
mov edi, dword [ebp - 0x44]
lea ecx, [ebp]
call fcn.00410a00
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp + 0x70]
mov byte [ebp - 4], 0xd
call fcn.00418970
lea ecx, [ebp]
mov byte [ebp - 4], bl
call fcn.004071f0
mov edi, dword [ebp - 0x44]
lea ecx, [ebp]
call fcn.00410a00
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp + 0xa8]
mov byte [ebp - 4], 0xe
call fcn.00418970
lea ecx, [ebp]
mov byte [ebp - 4], bl
call fcn.004071f0
mov edi, dword [ebp - 0x44]
lea ecx, [ebp]
call fcn.00410a00
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp + 0x8c]
mov byte [ebp - 4], 0xf
call fcn.00418970
lea ecx, [ebp]
call fcn.004071f0
lea ecx, [ebp - 0x4c]
push ecx
call esi
jmp 0x411c3c
mov ecx, 0x6c262c
sub ecx, 0x3a66cc02
lea eax, [ebp + 0xa]
call 0x41a770
push 0
push 0
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
lea edi, [ebp - 0x4c]
push edi
push 0
push eax
mov eax, dword [edx + 0x10]
push ecx
call eax
mov byte [ebp - 4], bl
test eax, eax
jne 0x411d00
cmp word [ebp - 0x4c], 8
jne 0x411d00
mov edi, dword [ebp - 0x44]
lea ecx, [ebp]
call fcn.00410a00
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp + 0x70]
mov byte [ebp - 4], 0x11
call fcn.00418970
lea ecx, [ebp]
mov byte [ebp - 4], bl
call fcn.004071f0
mov edi, dword [ebp - 0x44]
lea ecx, [ebp]
call fcn.00410a00
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp + 0xa8]
mov byte [ebp - 4], 0x12
call fcn.00418970
lea ecx, [ebp]
mov byte [ebp - 4], bl
call fcn.004071f0
mov edi, dword [ebp - 0x44]
lea ecx, [ebp]
call fcn.00410a00
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp + 0x8c]
mov byte [ebp - 4], 0x13
call fcn.00418970
lea ecx, [ebp]
mov byte [ebp - 4], bl
call fcn.004071f0
lea ecx, [ebp - 0x4c]
push ecx
call esi
jmp 0x411d66
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x4117c4
jmp 0x411de2
mov edi, 0x56c41665
lea esi, [ebp - 0x90]
call 0x41a830
push eax
lea ebx, [ebp - 0x58]
mov byte [ebp - 4], 0x14
call fcn.0040fd80
mov esi, eax
mov ecx, 0x6c2664
sub ecx, 0x127b1479
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x5c], ecx
call fcn.0041a800
push eax
lea ebx, [ebp - 0x64]
mov byte [ebp - 4], 0x16
call fcn.0040fd80
mov byte [ebp - 4], 0x17
mov ecx, dword [esi]
test ecx, ecx
je 0x411e32
mov ecx, dword [ecx]
jmp 0x411e34
xor ecx, ecx
mov eax, dword [eax]
test eax, eax
je 0x411e3e
mov edx, dword [eax]
jmp 0x411e40
xor edx, edx
mov eax, dword [ebp - 0x10]
mov esi, dword [eax]
lea edi, [ebp - 0x1c]
push edi
push 0
push 0x30
push ecx
mov ecx, dword [esi + 0x50]
push edx
push eax
call ecx
lea edi, [ebp - 0x64]
mov esi, eax
call fcn.0040feb0
lea edi, [ebp - 0x58]
mov dword [ebp - 0x6c], 0
call fcn.0040feb0
mov bl, 3
mov byte [ebp - 4], bl
jmp 0x411ed9
test esi, esi
jl 0x411642
jmp 0x411f47
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x412408
mov ecx, dword [eax]
lea edx, [ebp - 0x20]
push edx
lea edx, [ebp - 0x18]
push edx
push 1
push 0xffffffffffffffff
push eax
mov eax, dword [ecx + 0x10]
call eax
cmp dword [ebp - 0x20], 0
je 0x412408
jmp 0x411fd6
mov ecx, 0x49893f20
lea eax, [ebp + 6]
call fcn.0041a870
push 0
push 0
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
lea esi, [ebp - 0x4c]
push esi
push 0
push eax
mov eax, dword [edx + 0x10]
push ecx
call eax
mov byte [ebp - 4], bl
test eax, eax
jne 0x412066
mov ax, word [ebp - 0x4c]
cmp ax, 1
je 0x412066
test ax, ax
je 0x412066
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp + 0xc4]
push 0x6b5eec
push edx
call fcn.005def19
add esp, 0xc
lea eax, [ebp + 0xc4]
push eax
lea ecx, [ebp]
call fcn.004071b0
push 0xffffffffffffffff
push 0
lea ecx, [ebp]
push ecx
lea ecx, [ebp + 0x8c]
mov byte [ebp - 4], 0x19
call fcn.00418970
mov edx, esi
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
push edx
call esi
lea ecx, [ebp]
call fcn.004071f0
jmp 0x41206c
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x4120d2
mov eax, 0x6c2680
sub eax, 0x73407540
push eax
lea eax, [ebp - 0x8a]
call fcn.0041a920
push 0
push 0
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
lea edi, [ebp - 0x4c]
push edi
push 0
push eax
mov eax, dword [edx + 0x10]
push ecx
call eax
mov byte [ebp - 4], bl
test eax, eax
jne 0x412192
cmp word [ebp - 0x4c], 8
jne 0x412192
mov edi, dword [ebp - 0x44]
lea ecx, [ebp]
call fcn.00410a00
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp + 0x70]
mov byte [ebp - 4], 0x1b
call fcn.00418970
lea ecx, [ebp]
mov byte [ebp - 4], bl
call fcn.004071f0
mov edi, dword [ebp - 0x44]
lea ecx, [ebp]
call fcn.00410a00
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp + 0xa8]
mov byte [ebp - 4], 0x1c
call fcn.00418970
lea ecx, [ebp]
mov byte [ebp - 4], bl
call fcn.004071f0
mov edi, dword [ebp - 0x44]
lea ecx, [ebp]
call fcn.00410a00
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp + 0x8c]
mov byte [ebp - 4], 0x1d
call fcn.00418970
lea ecx, [ebp]
call fcn.004071f0
lea ecx, [ebp - 0x4c]
push ecx
call esi
jmp 0x4121f8
jmp 0x41225e
jmp 0x4122c4
mov edx, 0x6c26a0
sub edx, 0x78dc1078
push edx
lea eax, [ebp - 0x8a]
call 0x41a970
push 0
push 0
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
lea edi, [ebp - 0x4c]
push edi
push 0
push eax
mov eax, dword [edx + 0x10]
push ecx
call eax
mov byte [ebp - 4], bl
test eax, eax
jne 0x41238c
cmp word [ebp - 0x4c], 8
jne 0x41238c
mov edi, dword [ebp - 0x44]
lea ecx, [ebp]
call fcn.00410a00
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp + 0x70]
mov byte [ebp - 4], 0x1f
call fcn.00418970
lea ecx, [ebp]
mov byte [ebp - 4], bl
call fcn.004071f0
mov edi, dword [ebp - 0x44]
lea ecx, [ebp]
call fcn.00410a00
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp + 0xa8]
mov byte [ebp - 4], 0x20
call fcn.00418970
lea ecx, [ebp]
mov byte [ebp - 4], bl
call fcn.004071f0
mov edi, dword [ebp - 0x44]
lea ecx, [ebp]
call fcn.00410a00
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp + 0x8c]
mov byte [ebp - 4], 0x21
call fcn.00418970
lea ecx, [ebp]
mov byte [ebp - 4], bl
call fcn.004071f0
lea ecx, [ebp - 0x4c]
push ecx
call esi
jmp 0x4123f2
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x411f52
jmp 0x41246e
mov edi, 0x700dca95
lea esi, [ebp - 0x8a]
call fcn.0041a9c0
push eax
lea ebx, [ebp - 0x6c]
mov byte [ebp - 4], 0x22
call fcn.0040fd80
mov esi, eax
mov ecx, dword [ebp - 0x5c]
lea eax, [ebp - 0x62]
call fcn.0041a800
push eax
lea ebx, [ebp - 0x58]
mov byte [ebp - 4], 0x24
call fcn.0040fd80
mov byte [ebp - 4], 0x25
mov ecx, dword [esi]
test ecx, ecx
je 0x4124b3
mov ecx, dword [ecx]
jmp 0x4124b5
xor ecx, ecx
mov eax, dword [eax]
test eax, eax
je 0x4124bf
mov edx, dword [eax]
jmp 0x4124c1
xor edx, edx
mov eax, dword [ebp - 0x10]
mov esi, dword [eax]
lea edi, [ebp - 0x1c]
push edi
push 0
push 0x30
push ecx
mov ecx, dword [esi + 0x50]
push edx
push eax
call ecx
lea edi, [ebp - 0x58]
mov esi, eax
call fcn.0040feb0
lea edi, [ebp - 0x6c]
mov dword [ebp - 0x62], 0
call fcn.0040feb0
mov bl, 3
mov byte [ebp - 4], bl
jmp 0x41255a
test esi, esi
jl 0x411642
jmp 0x4125c8
jmp 0x41262e
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x412d8d
mov ecx, dword [eax]
lea edx, [ebp - 0x20]
push edx
lea edx, [ebp - 0x18]
push edx
push 1
push 0xffffffffffffffff
push eax
mov eax, dword [ecx + 0x10]
call eax
jmp 0x4126b3
cmp dword [ebp - 0x20], 0
je 0x412d8d
jmp 0x412723
jmp 0x412789
mov ecx, 0xec7dc34
lea eax, [ebp + 0x10]
call fcn.0041aa00
push 0
push 0
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
lea esi, [ebp - 0x4c]
push esi
push 0
push eax
mov eax, dword [edx + 0x10]
push ecx
call eax
xor ecx, ecx
movzx edx, cx
mov ecx, edx
shl edx, 0x10
or ecx, edx
mov byte [ebp - 4], bl
mov dword [ebp + 0x10], ecx
mov dword [ebp + 0x14], ecx
mov dword [ebp + 0x18], ecx
test eax, eax
jne 0x4128ab
cmp word [ebp - 0x4c], 8
jne 0x4128ab
mov edi, dword [ebp - 0x44]
lea ecx, [ebp - 0x88]
call fcn.00410a00
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp + 0xa8]
mov byte [ebp - 4], 0x27
call fcn.00418970
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], bl
call fcn.004071f0
mov edi, dword [ebp - 0x44]
lea ecx, [ebp - 0x88]
call fcn.00410a00
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp + 0x8c]
mov byte [ebp - 4], 0x28
call fcn.00418970
lea ecx, [ebp - 0x88]
call fcn.004071f0
jmp 0x41289e
mov eax, esi
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
push eax
call esi
jmp 0x4128b1
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x412917
push 0x5b9283b2
lea eax, [ebp - 0x88]
call fcn.0041aa60
push 0
push 0
mov byte [ebp - 4], 0x29
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
lea edi, [ebp - 0x4c]
push edi
push 0
push eax
mov eax, dword [edx + 0x10]
push ecx
call eax
mov byte [ebp - 4], bl
test eax, eax
jne 0x4129b2
cmp word [ebp - 0x4c], 8
jne 0x4129b2
mov edi, dword [ebp - 0x44]
lea ecx, [ebp - 0x88]
call fcn.00410a00
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp + 0xa8]
mov byte [ebp - 4], 0x2a
call fcn.00418970
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], bl
call fcn.004071f0
mov edi, dword [ebp - 0x44]
lea ecx, [ebp - 0x88]
call fcn.00410a00
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp + 0x8c]
mov byte [ebp - 4], 0x2b
call fcn.00418970
lea ecx, [ebp - 0x88]
call fcn.004071f0
lea ecx, [ebp - 0x4c]
push ecx
call esi
jmp 0x412a18
mov edx, 0x6c2708
sub edx, 0x4e801ce8
push edx
lea eax, [ebp - 0x8e]
call fcn.0041aab0
push 0
push 0
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
lea edi, [ebp - 0x4c]
push edi
push 0
push eax
mov eax, dword [edx + 0x10]
push ecx
call eax
mov byte [ebp - 4], bl
jmp 0x412ab2
test eax, eax
jne 0x412bf4
cmp word [ebp - 0x4c], 8
jne 0x412bf4
jmp 0x412b2b
mov edi, dword [ebp - 0x44]
lea ecx, [ebp - 0x88]
call fcn.00410a00
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp + 0xa8]
mov byte [ebp - 4], 0x2d
call fcn.00418970
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], bl
call fcn.004071f0
jmp 0x412bc1
mov edi, dword [ebp - 0x44]
lea ecx, [ebp - 0x88]
call fcn.00410a00
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp + 0x8c]
mov byte [ebp - 4], 0x2e
call fcn.00418970
lea ecx, [ebp - 0x88]
call fcn.004071f0
lea ecx, [ebp - 0x4c]
push ecx
call esi
jmp 0x412c5a
mov ecx, 0x6c272c
sub ecx, 0x7fb01ae4
lea eax, [ebp - 0x68]
call fcn.0041ab00
push 0
push 0
mov byte [ebp - 4], 0x2f
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
lea edi, [ebp - 0x4c]
push edi
push 0
push eax
mov eax, dword [edx + 0x10]
push ecx
call eax
xor ecx, ecx
movzx edx, cx
mov ecx, edx
shl edx, 0x10
or ecx, edx
mov byte [ebp - 4], bl
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x64], ecx
mov word [ebp - 0x60], cx
test eax, eax
jne 0x412d11
cmp word [ebp - 0x4c], 8
jne 0x412d11
mov edi, dword [ebp - 0x44]
lea ecx, [ebp - 0x88]
call fcn.00410a00
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp + 0xa8]
mov byte [ebp - 4], 0x30
call fcn.00418970
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], bl
call fcn.004071f0
mov edi, dword [ebp - 0x44]
lea ecx, [ebp - 0x88]
call fcn.00410a00
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp + 0x8c]
mov byte [ebp - 4], 0x31
call fcn.00418970
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], bl
call fcn.004071f0
lea eax, [ebp - 0x4c]
push eax
call esi
jmp 0x412d77
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x412639
jmp 0x412df3
mov edi, 0x2e03bc9d
lea esi, [ebp - 0x8f]
call 0x41ab50
push eax
lea ebx, [ebp - 0x6c]
mov byte [ebp - 4], 0x32
call fcn.0040fd80
mov esi, eax
mov ecx, dword [ebp - 0x5c]
lea eax, [ebp - 0x62]
call fcn.0041a800
push eax
lea ebx, [ebp - 0x58]
mov byte [ebp - 4], 0x34
call fcn.0040fd80
mov byte [ebp - 4], 0x35
mov ecx, dword [esi]
test ecx, ecx
je 0x412e38
mov ecx, dword [ecx]
jmp 0x412e3a
xor ecx, ecx
mov eax, dword [eax]
test eax, eax
je 0x412e44
mov edx, dword [eax]
jmp 0x412e46
xor edx, edx
mov eax, dword [ebp - 0x10]
mov esi, dword [eax]
lea edi, [ebp - 0x1c]
push edi
push 0
push 0x30
push ecx
push edx
push eax
mov eax, dword [esi + 0x50]
call eax
lea edi, [ebp - 0x58]
mov esi, eax
call fcn.0040feb0
lea edi, [ebp - 0x6c]
mov dword [ebp - 0x62], 0
call fcn.0040feb0
mov bl, 3
mov byte [ebp - 4], bl
jmp 0x412edf
test esi, esi
jge 0x41303a
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x412f58
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x412fc9
call dword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x413035
jmp 0x41149e
jmp 0x4130a0
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x413961
jmp 0x4130b0
mov ecx, dword [eax]
lea edx, [ebp - 0x20]
push edx
lea edx, [ebp - 0x18]
push edx
push 1
push 0xffffffffffffffff
push eax
mov eax, dword [ecx + 0x10]
call eax
jmp 0x41312a
cmp dword [ebp - 0x20], 0
je 0x41395e
jmp 0x41319a
jmp 0x413200
mov ecx, 0x941cb00
lea eax, [ebp - 0x4c]
call 0x41ab90
push 0
push 0
mov byte [ebp - 4], 0x36
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
lea esi, [ebp + 0xc]
push esi
push 0
push eax
mov eax, dword [edx + 0x10]
push ecx
call eax
mov byte [ebp - 4], bl
mov esi, 8
test eax, eax
jne 0x413407
cmp word [ebp + 0xc], si
jne 0x413407
jmp 0x4132a7
mov edi, dword [ebp + 0x14]
lea ecx, [ebp - 0x88]
call fcn.00410a00
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp + 0x70]
mov byte [ebp - 4], 0x37
call fcn.00418970
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], bl
call fcn.004071f0
jmp 0x41333a
mov edi, dword [ebp + 0x14]
lea ecx, [ebp - 0x88]
call fcn.00410a00
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp + 0xa8]
mov byte [ebp - 4], 0x38
call fcn.00418970
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], bl
call fcn.004071f0
jmp 0x4133d0
mov edi, dword [ebp + 0x14]
lea ecx, [ebp - 0x88]
call fcn.00410a00
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp + 0x8c]
mov byte [ebp - 4], 0x39
call fcn.00418970
lea ecx, [ebp - 0x88]
call fcn.004071f0
lea ecx, [ebp + 0xc]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x41346d
push 0x393e9ab0
lea eax, [ebp - 0x54]
call 0x41ac10
push 0
push 0
mov byte [ebp - 4], 0x3a
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
lea edi, [ebp + 0xc]
push edi
push 0
push eax
mov eax, dword [edx + 0x10]
push ecx
call eax
mov byte [ebp - 4], bl
jmp 0x4134fd
test eax, eax
jne 0x4136a5
cmp word [ebp + 0xc], si
jne 0x4136a5
jmp 0x413575
mov edi, dword [ebp + 0x14]
lea ecx, [ebp - 0x88]
call fcn.00410a00
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp + 0x70]
mov byte [ebp - 4], 0x3b
call fcn.00418970
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], bl
call fcn.004071f0
jmp 0x413608
mov edi, dword [ebp + 0x14]
lea ecx, [ebp - 0x88]
call fcn.00410a00
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp + 0xa8]
mov byte [ebp - 4], 0x3c
call fcn.00418970
lea ecx, [ebp - 0x88]
call fcn.004071f0
jmp 0x41369b
lea ecx, [ebp + 0xc]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x41370b
push 0x4cbbad0c
lea eax, [ebp - 0x54]
call fcn.0041ac60
push 0
push 0
mov byte [ebp - 4], 0x3d
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
lea edi, [ebp + 0xc]
push edi
push 0
push eax
mov eax, dword [edx + 0x10]
push ecx
call eax
mov byte [ebp - 4], bl
jmp 0x41379b
test eax, eax
jne 0x4138e0
cmp word [ebp + 0xc], si
jne 0x4138e0
jmp 0x413813
mov edi, dword [ebp + 0x14]
lea ecx, [ebp - 0x88]
call fcn.00410a00
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp + 0x70]
mov byte [ebp - 4], 0x3e
call fcn.00418970
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], bl
call fcn.004071f0
jmp 0x4138a6
mov edi, dword [ebp + 0x14]
lea ecx, [ebp - 0x88]
call fcn.00410a00
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp + 0xa8]
mov byte [ebp - 4], 0x3f
call fcn.00418970
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], bl
call fcn.004071f0
lea ecx, [ebp + 0xc]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x413946
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x4130b0
jmp 0x413961
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
xor ebx, ebx
jmp 0x4139d1
mov edi, 0x6c25a8
sub edi, 0x99cc67
mov ecx, edi
lea eax, [ebp - 0x66]
call fcn.0041a4c0
push eax
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 0x40
call fcn.004071b0
mov byte [ebp - 4], 0x42
xor eax, eax
mov dword [ebp - 0x66], eax
mov dword [ebp - 0x62], eax
cmp dword [ebp + 0x84], ebx
jbe 0x413a42
sub esp, 0x1c
lea eax, [ebp + 0x70]
mov ecx, esp
mov dword [ebp - 0x58], esp
push eax
call fcn.0040d4e0
lea ecx, [ebp - 0x88]
push ecx
call fcn.0041bbf0
add esp, 0x20
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 0x43
call fcn.00406df0
lea ecx, [ebp - 0x88]
call fcn.004071f0
jmp 0x413aa8
mov ecx, edi
lea eax, [ebp - 0x66]
call fcn.0041a4c0
push eax
lea ecx, [ebp + 0x54]
mov byte [ebp - 4], 0x44
call fcn.004071b0
mov byte [ebp - 4], 0x46
xor eax, eax
mov dword [ebp - 0x66], eax
mov dword [ebp - 0x62], eax
cmp dword [ebp + 0xbc], ebx
jbe 0x413b11
sub esp, 0x1c
lea edx, [ebp + 0xa8]
mov ecx, esp
mov dword [ebp - 0x58], esp
push edx
call fcn.0040d4e0
lea eax, [ebp - 0x88]
push eax
call fcn.0041bbf0
add esp, 0x20
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0x54]
mov byte [ebp - 4], 0x47
call fcn.00406df0
lea ecx, [ebp - 0x88]
call fcn.004071f0
jmp 0x413b77
jmp 0x413bdd
jmp 0x413c43
jmp 0x413ca9
jmp 0x413d0f
mov ecx, edi
lea eax, [ebp - 0x66]
call fcn.0041a4c0
push eax
lea ecx, [ebp + 0x38]
mov byte [ebp - 4], 0x48
call fcn.004071b0
mov byte [ebp - 4], 0x4a
xor eax, eax
mov dword [ebp - 0x66], eax
mov dword [ebp - 0x62], eax
cmp dword [ebp + 0xa0], ebx
jbe 0x413d7c
sub esp, 0x1c
lea edx, [ebp + 0x8c]
mov ecx, esp
mov dword [ebp - 0x58], esp
push edx
call fcn.0040d4e0
lea eax, [ebp - 0x88]
push eax
call fcn.0041bbf0
add esp, 0x20
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0x38]
mov byte [ebp - 4], 0x4b
call fcn.00406df0
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x4a
call fcn.004071f0
jmp 0x413de2
push 0x41
push ebx
push 0x8d8abc
call fcn.005e2200
add esp, 0xc
jmp 0x413e58
push 0x41
push ebx
push 0x8d8afd
call fcn.005e2200
add esp, 0xc
jmp 0x413ece
push 0x41
push ebx
push 0x8d8b3e
call fcn.005e2200
add esp, 0xc
jmp 0x413f44
mov eax, dword [ebp + 0x20]
mov esi, 0x10
cmp dword [ebp + 0x34], esi
jae 0x413f54
lea eax, [ebp + 0x20]
mov ecx, dword [ebp + 0x30]
push ecx
push eax
push 0x8d8abc
call fcn.005e2280
add esp, 0xc
jmp 0x413fcc
mov eax, dword [ebp + 0x58]
cmp dword [ebp + 0x6c], esi
jae 0x413fd7
lea eax, [ebp + 0x58]
mov edx, dword [ebp + 0x68]
push edx
push eax
push 0x8d8afd
call fcn.005e2280
add esp, 0xc
jmp 0x41404f
mov eax, dword [ebp + 0x3c]
cmp dword [ebp + 0x50], esi
jae 0x41405a
lea eax, [ebp + 0x3c]
mov ecx, dword [ebp + 0x4c]
push ecx
push eax
push 0x8d8b3e
call fcn.005e2280
add esp, 0xc
jmp 0x4140d2
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
jmp 0x414143
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x4141b4
call dword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x414220
cmp dword [ebp + 0x50], esi
jb 0x414231
mov eax, dword [ebp + 0x3c]
push eax
call fcn.005bac10
add esp, 4
mov edi, 0xf
mov dword [ebp + 0x50], edi
mov dword [ebp + 0x4c], ebx
mov byte [ebp + 0x3c], bl
cmp dword [ebp + 0x6c], esi
jb 0x414250
mov ecx, dword [ebp + 0x58]
push ecx
call fcn.005bac10
add esp, 4
mov dword [ebp + 0x6c], edi
mov dword [ebp + 0x68], ebx
mov byte [ebp + 0x58], bl
cmp dword [ebp + 0x34], esi
jb 0x41426a
mov edx, dword [ebp + 0x20]
push edx
call fcn.005bac10
add esp, 4
mov dword [ebp + 0x34], edi
mov dword [ebp + 0x30], ebx
mov byte [ebp + 0x20], bl
cmp dword [ebp + 0xa4], esi
jb 0x41428a
mov eax, dword [ebp + 0x90]
push eax
call fcn.005bac10
add esp, 4
mov dword [ebp + 0xa4], edi
mov dword [ebp + 0xa0], ebx
mov byte [ebp + 0x90], bl
cmp dword [ebp + 0xc0], esi
jb 0x4142b3
mov ecx, dword [ebp + 0xac]
push ecx
call fcn.005bac10
add esp, 4
mov dword [ebp + 0xc0], edi
mov dword [ebp + 0xbc], ebx
mov byte [ebp + 0xac], bl
cmp dword [ebp + 0x88], esi
jb 0x4142d9
mov edx, dword [ebp + 0x74]
push edx
call fcn.005bac10
add esp, 4
mov dword [ebp + 0x88], edi
mov dword [ebp + 0x84], ebx
mov byte [ebp + 0x74], bl
lea esi, [ebp - 0x38]
call fcn.00418680
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x144]
xor ecx, ebp
call fcn.005de817
add ebp, 0x148
mov esp, ebp
pop ebp
ret