Function at 0x42286a
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push 0x58
mov eax, 0x57e3ad
call fcn.00550e3c
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp + 0x20]
and dword [ebp - 4], 0
call fcn.004224cb
mov edi, eax
mov dword [ebp - 0x30], edi
cmp dword [ebp + 0xc], 0x12
jne 0x422902
mov ax, word [ebp + 0x18]
test al, 2
je 0x4228b4
test ebx, ebx
je 0x4228b4
push ebx
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
call esi
push 8
pop edx
mov word [ebx], dx
mov ax, word [ebp + 0x18]
jmp 0x4228ba
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
xor ecx, ecx
inc ecx
test cl, al
je 0x423a67
push ebx
call esi
push 8
pop eax
mov word [ebx], ax
lea eax, [ebp - 0x3c]
push eax
mov ecx, edi
call fcn.00411d83
mov byte [ebp - 4], 1
mov ecx, eax
call fcn.004224de
mov dword [ebp - 0x4c], eax
mov byte [ebp - 4], 2
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x3c]
add ecx, 0xfffffff0
call fcn.004032e4
mov eax, dword [ebp - 0x4c]
mov dword [ebx + 8], eax
jmp 0x422908
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
cmp dword [ebp + 0xc], 2
jne 0x422942
mov ax, word [ebp + 0x18]
test al, 2
je 0x422930
test ebx, ebx
je 0x422930
push ebx
call esi
push 0xb
pop edx
mov word [ebx], dx
xor ecx, ecx
inc ecx
mov word [ebx + 8], cx
mov ax, word [ebp + 0x18]
jmp 0x422933
xor ecx, ecx
inc ecx
test cl, al
je 0x423a67
mov ecx, edi
call fcn.00411d41
cmp dword [ebp + 0xc], 0xf
jne 0x4229c0
mov ax, word [ebp + 0x18]
test al, 2
je 0x42296a
test ebx, ebx
je 0x42296a
push ebx
call esi
push 0xb
pop edi
mov word [ebx], di
xor ecx, ecx
inc ecx
mov word [ebx + 8], cx
mov ax, word [ebp + 0x18]
jmp 0x422970
push 0xb
xor ecx, ecx
pop edi
inc ecx
test cl, al
je 0x423a67
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
push dword [eax + 8]
lea ecx, [ebp - 0x38]
call fcn.004014cd
mov byte [ebp - 4], 3
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
lea eax, [ebp - 0x38]
push eax
call fcn.00401452
mov byte [ebp - 4], 4
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x30]
call fcn.00411df0
mov byte [ebp - 4], 5
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x38]
lea ecx, [eax - 0x10]
call fcn.004032e4
jmp 0x4229c3
push 0xb
pop edi
cmp dword [ebp + 0xc], 0xc
jne 0x422a34
mov ax, word [ebp + 0x18]
test al, 2
je 0x4229e6
test ebx, ebx
je 0x4229e6
push ebx
call esi
mov word [ebx], di
xor eax, eax
inc eax
mov word [ebx + 8], ax
mov ax, word [ebp + 0x18]
test al, 1
je 0x423a67
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
push dword [eax + 8]
lea ecx, [ebp - 0x38]
call fcn.004014cd
mov byte [ebp - 4], 6
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
lea eax, [ebp - 0x38]
push eax
call fcn.00401452
mov byte [ebp - 4], 7
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x30]
call fcn.004144bd
mov byte [ebp - 4], 8
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x38]
lea ecx, [eax - 0x10]
call fcn.004032e4
cmp dword [ebp + 0xc], 8
jne 0x422a8d
mov ax, word [ebp + 0x18]
test al, 2
je 0x422a57
test ebx, ebx
je 0x422a57
push ebx
call esi
mov word [ebx], di
xor eax, eax
inc eax
mov word [ebx + 8], ax
mov ax, word [ebp + 0x18]
test al, 1
je 0x423a67
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov edi, dword [eax + 0x18]
movzx esi, word [eax + 8]
push ebx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push 0xb
pop eax
mov word [ebx], ax
push esi
push edi
mov edi, dword [ebp - 0x30]
mov ecx, edi
call fcn.004148d3
movzx eax, al
mov word [ebx + 8], ax
jmp 0x422a90
mov edi, dword [ebp - 0x30]
mov esi, dword [ebp + 0xc]
cmp esi, 0xa
jne 0x422ad9
mov ax, word [ebp + 0x18]
test al, 2
je 0x422abc
test ebx, ebx
je 0x422abc
push ebx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push 0xb
pop eax
mov word [ebx], ax
xor eax, eax
inc eax
mov word [ebx + 8], ax
mov ax, word [ebp + 0x18]
test al, 1
je 0x423a67
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
push dword [eax + 8]
push dword [eax + 0x18]
push dword [eax + 0x28]
mov ecx, edi
call fcn.00413e8f
mov edi, dword [sym.imp.OLEAUT32.dll_VariantClear]
cmp esi, 0x11
jne 0x422ba7
mov ax, word [ebp + 0x18]
test al, 2
je 0x422b08
test ebx, ebx
je 0x422b08
push ebx
call edi
push 0xb
pop eax
mov word [ebx], ax
xor eax, eax
inc eax
mov word [ebx + 8], ax
mov ax, word [ebp + 0x18]
test al, 1
je 0x423a67
mov esi, dword [ebp - 0x34]
mov eax, dword [esi]
push dword [eax + 0x28]
lea ecx, [ebp - 0x44]
call fcn.004014cd
mov byte [ebp - 4], 9
mov eax, dword [esi]
push dword [eax + 0x18]
lea ecx, [ebp - 0x38]
call fcn.004014cd
mov byte [ebp - 4], 0xa
mov eax, dword [esi]
movzx esi, word [eax + 8]
push ebx
call edi
push 0xb
pop eax
mov word [ebx], ax
push esi
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
lea eax, [ebp - 0x38]
push eax
call fcn.00401452
mov byte [ebp - 4], 0xb
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
lea eax, [ebp - 0x44]
push eax
call fcn.00401452
mov byte [ebp - 4], 0xc
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x30]
call fcn.00415998
movzx eax, al
mov word [ebx + 8], ax
mov byte [ebp - 4], 0xd
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x38]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov byte [ebp - 4], 0xe
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x44]
lea ecx, [eax - 0x10]
call fcn.004032e4
mov esi, dword [ebp + 0xc]
cmp esi, 9
jne 0x422c1a
mov ax, word [ebp + 0x18]
test al, 2
je 0x422bcc
test ebx, ebx
je 0x422bcc
push ebx
call edi
push 0xb
pop eax
mov word [ebx], ax
xor eax, eax
inc eax
mov word [ebx + 8], ax
mov ax, word [ebp + 0x18]
test al, 1
je 0x423a67
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
push dword [eax + 8]
lea ecx, [ebp - 0x38]
call fcn.004014cd
mov byte [ebp - 4], 0xf
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
lea eax, [ebp - 0x38]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x10
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x30]
call fcn.00414fa5
mov byte [ebp - 4], 0x11
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x38]
lea ecx, [eax - 0x10]
call fcn.004032e4
cmp esi, 0x10
jne 0x422d01
mov ax, word [ebp + 0x18]
test al, 2
je 0x422c43
test ebx, ebx
je 0x422c43
push ebx
call edi
push 0xb
pop eax
mov word [ebx], ax
xor eax, eax
inc eax
mov word [ebx + 8], ax
mov ax, word [ebp + 0x18]
test al, 1
je 0x423a67
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
push dword [eax + 8]
lea ecx, [ebp - 0x44]
call fcn.004014cd
mov byte [ebp - 4], 0x12
push ebx
call edi
push 8
pop eax
mov word [ebx], ax
push ecx
mov esi, esp
mov dword [ebp - 0x3c], esp
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
lea eax, [ebp - 0x44]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x13
push esi
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x30]
call fcn.00411a49
mov byte [ebp - 4], 0x14
mov byte [ebp - 4], 0x12
call fcn.00405f35
pop ecx
push eax
lea ecx, [ebp - 0x2c]
call fcn.004016bb
mov byte [ebp - 4], 0x15
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], 0x10
cmovae eax, dword [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x38]
call fcn.00401485
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x38]
call fcn.004224de
mov dword [ebx + 8], eax
mov byte [ebp - 4], 0x17
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x38]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x2c]
call fcn.00401d18
mov byte [ebp - 4], 0x18
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x44]
lea ecx, [eax - 0x10]
call fcn.004032e4
mov esi, dword [ebp + 0xc]
cmp esi, 0xb
jne 0x422d73
mov ax, word [ebp + 0x18]
test al, 2
je 0x422d25
test ebx, ebx
je 0x422d25
push ebx
call edi
push esi
pop eax
mov word [ebx], ax
xor eax, eax
inc eax
mov word [ebx + 8], ax
mov ax, word [ebp + 0x18]
test al, 1
je 0x423a67
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
push dword [eax + 8]
lea ecx, [ebp - 0x38]
call fcn.004014cd
mov byte [ebp - 4], 0x19
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
lea eax, [ebp - 0x38]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x1a
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x30]
call fcn.00415947
mov byte [ebp - 4], 0x1b
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x38]
lea ecx, [eax - 0x10]
call fcn.004032e4
cmp esi, 0xd
jne 0x422dff
mov ax, word [ebp + 0x18]
test al, 1
je 0x423a67
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
push dword [eax + 8]
lea ecx, [ebp - 0x38]
call fcn.004014cd
mov byte [ebp - 4], 0x1c
push 8
pop eax
mov word [ebx], ax
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
lea eax, [ebp - 0x38]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x1d
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x30]
call fcn.004133c5
mov byte [ebp - 4], 0x1e
mov ecx, eax
call fcn.004224de
mov dword [ebp - 0x4c], eax
mov byte [ebp - 4], 0x1f
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x3c]
add ecx, 0xfffffff0
call fcn.004032e4
mov eax, dword [ebp - 0x4c]
mov dword [ebx + 8], eax
mov byte [ebp - 4], 0x20
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x38]
lea ecx, [eax - 0x10]
call fcn.004032e4
cmp esi, 0xe
jne 0x422f08
mov ax, word [ebp + 0x18]
test al, 1
je 0x423a67
mov esi, dword [ebp - 0x34]
mov eax, dword [esi]
push dword [eax + 8]
lea ecx, [ebp - 0x40]
call fcn.004014cd
mov byte [ebp - 4], 0x21
mov eax, dword [esi]
push dword [eax + 0x18]
lea ecx, [ebp - 0x48]
call fcn.004014cd
mov byte [ebp - 4], 0x22
mov eax, dword [esi]
push dword [eax + 0x28]
lea ecx, [ebp - 0x44]
call fcn.004014cd
mov byte [ebp - 4], 0x23
mov eax, dword [esi]
push dword [eax + 0x38]
lea ecx, [ebp - 0x38]
call fcn.004014cd
mov byte [ebp - 4], 0x24
mov eax, dword [esi]
mov esi, dword [eax + 0x48]
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
lea eax, [ebp - 0x48]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x25
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
lea eax, [ebp - 0x44]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x26
push ecx
mov ecx, esp
mov dword [ebp - 0x54], esp
lea eax, [ebp - 0x38]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x27
push esi
push ecx
mov ecx, esp
mov dword [ebp - 0x50], esp
lea eax, [ebp - 0x40]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x28
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0x30]
call fcn.00415e34
mov byte [ebp - 4], 0x29
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x38]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov byte [ebp - 4], 0x2a
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0x44]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov byte [ebp - 4], 0x2b
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0x48]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov byte [ebp - 4], 0x2c
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x40]
lea ecx, [eax - 0x10]
call fcn.004032e4
mov esi, dword [ebp + 0xc]
cmp esi, 0x13
jne 0x422f71
mov ax, word [ebp + 0x18]
test al, 2
je 0x422f2d
test ebx, ebx
je 0x422f2d
push ebx
call edi
push 0xb
pop eax
mov word [ebx], ax
xor eax, eax
inc eax
mov word [ebx + 8], ax
mov ax, word [ebp + 0x18]
test al, 1
je 0x423a67
push ebx
call edi
push 8
pop eax
mov word [ebx], ax
lea eax, [ebp - 0x3c]
push eax
mov ecx, dword [ebp - 0x30]
call fcn.0040c9bf
mov byte [ebp - 4], 0x2d
mov ecx, eax
call fcn.004224de
mov dword [ebp - 0x4c], eax
mov byte [ebp - 4], 0x2e
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x3c]
add ecx, 0xfffffff0
call fcn.004032e4
mov eax, dword [ebp - 0x4c]
mov dword [ebx + 8], eax
cmp esi, 0x1f
jne 0x422fb6
mov ax, word [ebp + 0x18]
test al, 2
je 0x422f96
test ebx, ebx
je 0x422f96
push ebx
call edi
push 0xb
pop eax
mov word [ebx], ax
xor eax, eax
inc eax
mov word [ebx + 8], ax
mov ax, word [ebp + 0x18]
test al, 1
je 0x42338b
push ebx
call edi
push 0xb
pop eax
mov word [ebx], ax
mov ecx, dword [ebp - 0x30]
call fcn.00416412
movzx eax, al
mov word [ebx + 8], ax
cmp esi, 0x14
jne 0x4230b1
mov ax, word [ebp + 0x18]
test al, 2
je 0x422fdf
test ebx, ebx
je 0x422fdf
push ebx
call edi
push 0xb
pop eax
mov word [ebx], ax
xor eax, eax
inc eax
mov word [ebx + 8], ax
mov ax, word [ebp + 0x18]
test al, 1
je 0x423a67
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
push dword [eax + 8]
lea ecx, [ebp - 0x38]
call fcn.004014cd
mov byte [ebp - 4], 0x2f
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
push dword [eax + 0x18]
lea ecx, [ebp - 0x48]
call fcn.004014cd
mov byte [ebp - 4], 0x30
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
push dword [eax + 0x28]
lea ecx, [ebp - 0x40]
call fcn.004014cd
mov byte [ebp - 4], 0x31
push ebx
call edi
push 0xb
pop eax
mov word [ebx], ax
push ecx
mov ecx, esp
mov dword [ebp - 0x50], esp
lea eax, [ebp - 0x38]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x32
push ecx
mov ecx, esp
mov dword [ebp - 0x54], esp
lea eax, [ebp - 0x48]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x33
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
lea eax, [ebp - 0x40]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x34
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0x30]
call fcn.00411aab
movzx eax, al
mov word [ebx + 8], ax
mov byte [ebp - 4], 0x35
mov byte [ebp - 4], 0x30
mov ecx, dword [ebp - 0x40]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov byte [ebp - 4], 0x36
mov byte [ebp - 4], 0x2f
mov ecx, dword [ebp - 0x48]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov byte [ebp - 4], 0x37
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x38]
lea ecx, [eax - 0x10]
call fcn.004032e4
cmp esi, 0x15
jne 0x423172
mov ax, word [ebp + 0x18]
test al, 2
je 0x4230da
test ebx, ebx
je 0x4230da
push ebx
call edi
push 0xb
pop eax
mov word [ebx], ax
xor eax, eax
inc eax
mov word [ebx + 8], ax
mov ax, word [ebp + 0x18]
test al, 1
je 0x423a67
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
push dword [eax + 8]
lea ecx, [ebp - 0x48]
call fcn.004014cd
mov byte [ebp - 4], 0x38
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
push dword [eax + 0x18]
lea ecx, [ebp - 0x40]
call fcn.004014cd
mov byte [ebp - 4], 0x39
push ebx
call edi
push 0xb
pop eax
mov word [ebx], ax
push ecx
mov ecx, esp
mov dword [ebp - 0x50], esp
lea eax, [ebp - 0x48]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x3a
push ecx
mov ecx, esp
mov dword [ebp - 0x54], esp
lea eax, [ebp - 0x40]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x3b
mov byte [ebp - 4], 0x39
mov ecx, dword [ebp - 0x30]
call fcn.004118e0
movzx eax, al
mov word [ebx + 8], ax
mov byte [ebp - 4], 0x3c
mov byte [ebp - 4], 0x38
mov ecx, dword [ebp - 0x40]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov byte [ebp - 4], 0x3d
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x48]
lea ecx, [eax - 0x10]
call fcn.004032e4
cmp esi, 0x16
jne 0x4231f5
mov ax, word [ebp + 0x18]
test al, 2
je 0x423197
test ebx, ebx
je 0x423197
push ebx
call edi
push 0xb
pop eax
mov word [ebx], ax
xor eax, eax
inc eax
mov word [ebx + 8], ax
mov ax, word [ebp + 0x18]
test al, 1
je 0x423a67
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
push dword [eax + 8]
lea ecx, [ebp - 0x40]
call fcn.004014cd
mov byte [ebp - 4], 0x3e
push ebx
call edi
push 0xb
pop eax
mov word [ebx], ax
push ecx
mov ecx, esp
mov dword [ebp - 0x50], esp
lea eax, [ebp - 0x40]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x3f
mov byte [ebp - 4], 0x3e
mov ecx, dword [ebp - 0x30]
call fcn.00411889
movzx eax, al
mov word [ebx + 8], ax
mov byte [ebp - 4], 0x40
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x40]
lea ecx, [eax - 0x10]
call fcn.004032e4
cmp esi, 0x19
jne 0x423237
mov ax, word [ebp + 0x18]
test al, 2
je 0x42321a
test ebx, ebx
je 0x42321a
push ebx
call edi
push 0xb
pop eax
mov word [ebx], ax
xor eax, eax
inc eax
mov word [ebx + 8], ax
mov ax, word [ebp + 0x18]
test al, 1
je 0x423a67
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
movzx ecx, word [eax + 8]
push ecx
push dword [eax + 0x18]
mov ecx, dword [ebp - 0x30]
call fcn.00411e13
cmp esi, 0x1a
jne 0x42337e
mov ax, word [ebp + 0x18]
test al, 2
je 0x423260
test ebx, ebx
je 0x423260
push ebx
call edi
push 0xb
pop eax
mov word [ebx], ax
xor eax, eax
inc eax
mov word [ebx + 8], ax
mov ax, word [ebp + 0x18]
test al, 1
je 0x423a67
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
push dword [eax + 8]
lea ecx, [ebp - 0x44]
call fcn.004014cd
mov byte [ebp - 4], 0x41
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
push dword [eax + 0x18]
lea ecx, [ebp - 0x38]
call fcn.004014cd
mov byte [ebp - 4], 0x42
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
push dword [eax + 0x28]
lea ecx, [ebp - 0x48]
call fcn.004014cd
mov byte [ebp - 4], 0x43
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
push dword [eax + 0x38]
lea ecx, [ebp - 0x40]
call fcn.004014cd
mov byte [ebp - 4], 0x44
push ecx
mov ecx, esp
mov dword [ebp - 0x50], esp
lea eax, [ebp - 0x44]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x45
push ecx
mov ecx, esp
mov dword [ebp - 0x54], esp
lea eax, [ebp - 0x38]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x46
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
lea eax, [ebp - 0x48]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x47
push ecx
mov ecx, esp
mov dword [ebp - 0x5c], esp
lea eax, [ebp - 0x40]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x48
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], 0x44
mov ecx, dword [ebp - 0x30]
call fcn.00415417
mov byte [ebp - 4], 0x49
mov ecx, eax
call fcn.004224de
mov byte [ebp - 4], 0x4a
mov byte [ebp - 4], 0x44
mov ecx, dword [ebp - 0x3c]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov byte [ebp - 4], 0x4b
mov byte [ebp - 4], 0x43
mov ecx, dword [ebp - 0x40]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov byte [ebp - 4], 0x4c
mov byte [ebp - 4], 0x42
mov ecx, dword [ebp - 0x48]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov byte [ebp - 4], 0x4d
mov byte [ebp - 4], 0x41
mov ecx, dword [ebp - 0x38]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov byte [ebp - 4], 0x4e
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x44]
lea ecx, [eax - 0x10]
call fcn.004032e4
cmp esi, 0x1f
jne 0x4234c5
mov ax, word [ebp + 0x18]
test al, 2
je 0x4233a7
test ebx, ebx
je 0x4233a7
push ebx
call edi
push 0xb
pop eax
mov word [ebx], ax
xor eax, eax
inc eax
mov word [ebx + 8], ax
mov ax, word [ebp + 0x18]
test al, 1
je 0x423a67
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
push dword [eax + 8]
lea ecx, [ebp - 0x44]
call fcn.004014cd
mov byte [ebp - 4], 0x4f
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
push dword [eax + 0x18]
lea ecx, [ebp - 0x38]
call fcn.004014cd
mov byte [ebp - 4], 0x50
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
push dword [eax + 0x28]
lea ecx, [ebp - 0x48]
call fcn.004014cd
mov byte [ebp - 4], 0x51
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
push dword [eax + 0x38]
lea ecx, [ebp - 0x40]
call fcn.004014cd
mov byte [ebp - 4], 0x52
push ecx
mov ecx, esp
mov dword [ebp - 0x5c], esp
lea eax, [ebp - 0x44]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x53
push ecx
mov ecx, esp
mov dword [ebp - 0x50], esp
lea eax, [ebp - 0x38]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x54
push ecx
mov ecx, esp
mov dword [ebp - 0x54], esp
lea eax, [ebp - 0x48]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x55
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
lea eax, [ebp - 0x40]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x56
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], 0x52
mov ecx, dword [ebp - 0x30]
call fcn.00415619
mov byte [ebp - 4], 0x57
mov ecx, eax
call fcn.004224de
mov byte [ebp - 4], 0x58
mov byte [ebp - 4], 0x52
mov ecx, dword [ebp - 0x3c]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov byte [ebp - 4], 0x59
mov byte [ebp - 4], 0x51
mov ecx, dword [ebp - 0x40]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov byte [ebp - 4], 0x5a
mov byte [ebp - 4], 0x50
mov ecx, dword [ebp - 0x48]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov byte [ebp - 4], 0x5b
mov byte [ebp - 4], 0x4f
mov ecx, dword [ebp - 0x38]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov byte [ebp - 4], 0x5c
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x44]
lea ecx, [eax - 0x10]
call fcn.004032e4
cmp esi, 0x20
jne 0x4235ea
mov ax, word [ebp + 0x18]
test al, 2
je 0x4234ee
test ebx, ebx
je 0x4234ee
push ebx
call edi
push 0xb
pop eax
mov word [ebx], ax
xor eax, eax
inc eax
mov word [ebx + 8], ax
mov ax, word [ebp + 0x18]
test al, 1
je 0x423a67
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
push dword [eax + 8]
lea ecx, [ebp - 0x44]
call fcn.004014cd
mov byte [ebp - 4], 0x5d
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
push dword [eax + 0x18]
lea ecx, [ebp - 0x38]
call fcn.004014cd
mov byte [ebp - 4], 0x5e
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
push dword [eax + 0x28]
lea ecx, [ebp - 0x48]
call fcn.004014cd
mov byte [ebp - 4], 0x5f
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
push dword [eax + 0x38]
lea ecx, [ebp - 0x40]
call fcn.004014cd
mov byte [ebp - 4], 0x60
push ecx
mov ecx, esp
mov dword [ebp - 0x5c], esp
lea eax, [ebp - 0x44]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x61
push ecx
mov ecx, esp
mov dword [ebp - 0x50], esp
lea eax, [ebp - 0x38]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x62
push ecx
mov ecx, esp
mov dword [ebp - 0x54], esp
lea eax, [ebp - 0x48]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x63
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
lea eax, [ebp - 0x40]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x64
mov byte [ebp - 4], 0x60
mov ecx, dword [ebp - 0x30]
call fcn.004130c5
mov byte [ebp - 4], 0x65
mov byte [ebp - 4], 0x5f
mov ecx, dword [ebp - 0x40]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov byte [ebp - 4], 0x66
mov byte [ebp - 4], 0x5e
mov ecx, dword [ebp - 0x48]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov byte [ebp - 4], 0x67
mov byte [ebp - 4], 0x5d
mov ecx, dword [ebp - 0x38]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov byte [ebp - 4], 0x68
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x44]
lea ecx, [eax - 0x10]
call fcn.004032e4
cmp esi, 0x21
jne 0x423783
mov ax, word [ebp + 0x18]
test al, 2
je 0x423613
test ebx, ebx
je 0x423613
push ebx
call edi
push 0xb
pop eax
mov word [ebx], ax
xor eax, eax
inc eax
mov word [ebx + 8], ax
mov ax, word [ebp + 0x18]
test al, 1
je 0x423a67
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
push dword [eax + 8]
lea ecx, [ebp - 0x3c]
call fcn.004014cd
mov byte [ebp - 4], 0x69
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
push dword [eax + 0x18]
lea ecx, [ebp - 0x4c]
call fcn.004014cd
mov byte [ebp - 4], 0x6a
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
push dword [eax + 0x28]
lea ecx, [ebp - 0x44]
call fcn.004014cd
mov byte [ebp - 4], 0x6b
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
push dword [eax + 0x38]
lea ecx, [ebp - 0x38]
call fcn.004014cd
mov byte [ebp - 4], 0x6c
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
push dword [eax + 0x48]
lea ecx, [ebp - 0x48]
call fcn.004014cd
mov byte [ebp - 4], 0x6d
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
push dword [eax + 0x58]
lea ecx, [ebp - 0x40]
call fcn.004014cd
mov byte [ebp - 4], 0x6e
push ecx
mov ecx, esp
mov dword [ebp - 0x5c], esp
lea eax, [ebp - 0x3c]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x6f
push ecx
mov ecx, esp
mov dword [ebp - 0x50], esp
lea eax, [ebp - 0x4c]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x70
push ecx
mov ecx, esp
mov dword [ebp - 0x54], esp
lea eax, [ebp - 0x44]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x71
push ecx
mov ecx, esp
mov dword [ebp - 0x64], esp
lea eax, [ebp - 0x38]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x72
push ecx
mov ecx, esp
mov dword [ebp - 0x60], esp
lea eax, [ebp - 0x48]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x73
push ecx
mov ecx, esp
mov dword [ebp - 0x58], esp
lea eax, [ebp - 0x40]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x74
mov byte [ebp - 4], 0x6e
mov ecx, dword [ebp - 0x30]
call fcn.00415854
mov byte [ebp - 4], 0x75
mov byte [ebp - 4], 0x6d
mov ecx, dword [ebp - 0x40]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov byte [ebp - 4], 0x76
mov byte [ebp - 4], 0x6c
mov ecx, dword [ebp - 0x48]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov byte [ebp - 4], 0x77
mov byte [ebp - 4], 0x6b
mov ecx, dword [ebp - 0x38]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov byte [ebp - 4], 0x78
mov byte [ebp - 4], 0x6a
mov ecx, dword [ebp - 0x44]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov byte [ebp - 4], 0x79
mov byte [ebp - 4], 0x69
mov ecx, dword [ebp - 0x4c]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov byte [ebp - 4], 0x7a
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x3c]
lea ecx, [eax - 0x10]
call fcn.004032e4
cmp esi, 0x17
jne 0x423881
mov ax, word [ebp + 0x18]
test al, 2
je 0x4237ac
test ebx, ebx
je 0x4237ac
push ebx
call edi
push 0xb
pop eax
mov word [ebx], ax
xor eax, eax
inc eax
mov word [ebx + 8], ax
mov ax, word [ebp + 0x18]
test al, 1
je 0x423a67
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov esi, dword [eax + 8]
push dword [eax + 0x18]
lea ecx, [ebp - 0x40]
call fcn.004014cd
mov byte [ebp - 4], 0x7b
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
push dword [eax + 0x28]
lea ecx, [ebp - 0x4c]
call fcn.004014cd
mov byte [ebp - 4], 0x7c
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
push dword [eax + 0x38]
lea ecx, [ebp - 0x3c]
call fcn.004014cd
mov byte [ebp - 4], 0x7d
push ebx
call edi
push 0x16
pop eax
mov word [ebx], ax
push esi
push ecx
mov ecx, esp
mov dword [ebp - 0x58], esp
lea eax, [ebp - 0x40]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x7e
push ecx
mov ecx, esp
mov dword [ebp - 0x60], esp
lea eax, [ebp - 0x4c]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x7f
push ecx
mov ecx, esp
mov dword [ebp - 0x64], esp
lea eax, [ebp - 0x3c]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x80
mov byte [ebp - 4], 0x7d
mov ecx, dword [ebp - 0x30]
call fcn.00411c4a
mov dword [ebx + 8], eax
mov byte [ebp - 4], 0x81
mov byte [ebp - 4], 0x7c
mov ecx, dword [ebp - 0x3c]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov byte [ebp - 4], 0x82
mov byte [ebp - 4], 0x7b
mov ecx, dword [ebp - 0x4c]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov byte [ebp - 4], 0x83
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x40]
lea ecx, [eax - 0x10]
call fcn.004032e4
mov esi, dword [ebp + 0xc]
cmp esi, 0x1c
jne 0x4238c5
mov ax, word [ebp + 0x18]
test al, 2
je 0x4238a6
test ebx, ebx
je 0x4238a6
push ebx
call edi
push 0xb
pop eax
mov word [ebx], ax
xor eax, eax
inc eax
mov word [ebx + 8], ax
mov ax, word [ebp + 0x18]
test al, 1
je 0x423a67
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
movzx ecx, word [eax + 8]
movzx eax, word [eax + 0x18]
push ecx
push eax
mov ecx, dword [ebp - 0x30]
call fcn.00413a2d
cmp esi, 0x1e
jne 0x423938
mov ax, word [ebp + 0x18]
test al, 2
je 0x4238ea
test ebx, ebx
je 0x4238ea
push ebx
call edi
push 0xb
pop eax
mov word [ebx], ax
xor eax, eax
inc eax
mov word [ebx + 8], ax
mov ax, word [ebp + 0x18]
test al, 1
je 0x423a67
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
push dword [eax + 8]
lea ecx, [ebp - 0x3c]
call fcn.004014cd
mov byte [ebp - 4], 0x84
push ecx
mov ecx, esp
mov dword [ebp - 0x58], esp
lea eax, [ebp - 0x3c]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x85
mov byte [ebp - 4], 0x84
mov ecx, dword [ebp - 0x30]
call fcn.00412a31
mov byte [ebp - 4], 0x86
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x3c]
lea ecx, [eax - 0x10]
call fcn.004032e4
cmp esi, 0x22
jne 0x42396d
mov ax, word [ebp + 0x18]
test al, 2
je 0x42395d
test ebx, ebx
je 0x42395d
push ebx
call edi
push 0xb
pop eax
mov word [ebx], ax
xor eax, eax
inc eax
mov word [ebx + 8], ax
mov ax, word [ebp + 0x18]
test al, 1
je 0x423a67
mov ecx, dword [ebp - 0x30]
call fcn.0041449b
mov ax, word [ebp + 0x18]
cmp esi, 0x1d
jne 0x423a67
test al, 2
je 0x423996
test ebx, ebx
je 0x423996
push ebx
call edi
push 0xb
pop eax
mov word [ebx], ax
xor eax, eax
inc eax
mov word [ebx + 8], ax
mov ax, word [ebp + 0x18]
test al, 1
je 0x423a67
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov esi, dword [eax + 8]
push ebx
call edi
push 8
pop eax
mov word [ebx], ax
lea ecx, [ebp - 0x38]
call fcn.00401515
mov byte [ebp - 4], 0x87
push esi
push 0x592e70
lea eax, [ebp - 0x38]
push eax
call fcn.00402933
add esp, 0xc
lea ecx, [ebp - 0x44]
call fcn.00401515
mov byte [ebp - 4], 0x88
push ecx
mov ecx, esp
mov dword [ebp - 0x58], esp
lea eax, [ebp - 0x38]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x89
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], 0x88
mov esi, dword [ebp - 0x30]
mov ecx, esi
call fcn.00412b3e
mov byte [ebp - 4], 0x8a
push eax
lea ecx, [ebp - 0x44]
call fcn.004070db
mov byte [ebp - 4], 0x8b
mov byte [ebp - 4], 0x88
mov ecx, dword [ebp - 0x3c]
lea ecx, [ecx - 0x10]
call fcn.004032e4
push 0x593270
push 0x597084
lea ecx, [ebp - 0x44]
call fcn.00407438
lea ecx, [ebp - 0x44]
call fcn.004224de
mov dword [ebx + 8], eax
mov byte [ebp - 4], 0x8c
mov byte [ebp - 4], 0x87
mov ecx, dword [ebp - 0x44]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov byte [ebp - 4], 0x8d
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x38]
lea ecx, [eax - 0x10]
call fcn.004032e4
mov ax, word [ebp + 0x18]
jmp 0x423a6a
mov esi, dword [ebp - 0x30]
mov byte [ebp - 4], 0x8e
cmp dword [ebp + 0xc], 0x1b
jne 0x423add
test al, 2
je 0x423a94
test ebx, ebx
je 0x423a94
push ebx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push 0xb
pop eax
mov word [ebx], ax
xor eax, eax
inc eax
mov word [ebx + 8], ax
mov ax, word [ebp + 0x18]
test al, 1
je 0x423add
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
push dword [eax + 8]
lea ecx, [ebp - 0x3c]
call fcn.004014cd
mov byte [ebp - 4], 0x8f
push ecx
mov ecx, esp
mov dword [ebp - 0x58], esp
lea eax, [ebp - 0x3c]
push eax
call fcn.00401452
mov byte [ebp - 4], 0x90
mov byte [ebp - 4], 0x8f
mov ecx, esi
call fcn.004115fa
mov byte [ebp - 4], 0x91
mov byte [ebp - 4], 0x8e
mov ecx, dword [ebp - 0x3c]
lea ecx, [ecx - 0x10]
call fcn.004032e4
and dword [ebp - 4], 0
or dword [ebp - 4], 0xffffffff
xor eax, eax
call fcn.00550d8e
ret 0x24