Function at 0x1006e9e
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x100a86f
call fcn.01009864
sub esp, 0x548
mov eax, dword [0x100c004]
push ebx
xor ebx, ebx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 8]
push esi
mov dword [ebp - 0x4e4], eax
push edi
lea eax, [ebp - 0x508]
push eax
mov dword [ebp - 0x4ec], ebx
mov dword [ebp - 0x50c], ebx
mov dword [ebp - 0x4c0], ebx
mov dword [ebp - 0x520], ebx
mov dword [ebp - 0x4e0], ebx
mov dword [ebp - 0x4e8], ebx
mov dword [ebp - 0x4d8], ebx
mov dword [ebp - 0x514], ebx
mov dword [ebp - 0x4cc], ebx
mov dword [ebp - 0x4d4], ebx
mov dword [ebp - 0x4f4], ebx
mov dword [ebp - 0x4f8], ebx
mov dword [ebp - 0x52c], ebx
mov dword [ebp - 0x4f0], ebx
mov dword [ebp - 0x510], ebx
mov dword [ebp - 0x528], ebx
mov dword [ebp - 0x4dc], ebx
call sub.MFC42.dll_AfxVariantInit
push ebx
mov dword [ebp - 4], ebx
call dword [sym.imp.ole32.dll_CoInitialize]
cmp eax, ebx
je 0x1006f56
push eax
push 0x1001b0c
call fcn.01002585
pop ecx
pop ecx
jmp 0x100857c
lea eax, [ebp - 0x53c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov esi, dword [sym.imp.ole32.dll_CoCreateInstance]
lea eax, [ebp - 0x4f0]
push eax
push 0x10021d0
push 0x17
push ebx
mov edi, 0x10021c0
push edi
call esi
cmp eax, 0x80040154
je 0x1006f95
cmp eax, 0x80004002
je 0x1006f95
cmp eax, 0x8007007e
jne 0x1006fac
call fcn.01004b7f
lea eax, [ebp - 0x4f0]
push eax
push 0x10021d0
push 0x17
push ebx
push edi
call esi
cmp eax, ebx
jge 0x1006fe1
cmp eax, 0x80040154
je 0x1006fd7
cmp eax, 0x80004002
je 0x1006fd7
cmp eax, 0x8007007e
je 0x1006fd7
push eax
push 0x1001a20
call fcn.01002585
pop ecx
pop ecx
jmp 0x1007ca6
push 0x7d5
jmp 0x1007ca1
mov eax, dword [ebp - 0x4e4]
cmp dword [eax + 0x6c], ebx
je 0x100719f
mov edi, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
push 0x1002180
call edi
mov esi, eax
cmp esi, ebx
je 0x10071bd
mov eax, dword [ebp - 0x4f0]
mov ecx, dword [eax]
push 1
push esi
push ebx
push eax
call dword [ecx + 0x20]
push esi
mov dword [ebp - 0x4c4], eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp dword [ebp - 0x4c4], ebx
jge 0x1007042
push ebx
push dword [ebp - 0x4c4]
push 0x1002164
call fcn.01004a8b
jmp 0x1007ca6
mov esi, dword [ebp - 0x4e4]
push dword [esi + 0x6c]
call edi
cmp eax, ebx
mov dword [ebp - 0x4c8], eax
je 0x10071bd
mov eax, dword [esi + 0x88]
cmp eax, ebx
je 0x1007068
push eax
jmp 0x100706d
push 0x1001258
call edi
cmp eax, ebx
mov dword [ebp - 0x4d0], eax
je 0x10071bd
mov eax, dword [ebp - 0x4f0]
mov ecx, dword [eax]
push ebx
push dword [ebp - 0x4d0]
push dword [ebp - 0x4c8]
push eax
call dword [ecx + 0x34]
cmp dword [esi + 0x88], ebx
mov dword [ebp - 0x4c4], eax
je 0x10070dc
push dword [ebp - 0x4d0]
mov edi, dword [sym.imp.msvcrt.dll_wcslen]
call edi
shl eax, 1
pop ecx
mov ecx, dword [ebp - 0x4d0]
je 0x10070c3
mov byte [ecx], bl
inc ecx
dec eax
jne 0x10070bd
push dword [esi + 0x88]
call edi
shl eax, 1
pop ecx
mov ecx, dword [esi + 0x88]
je 0x10070dc
mov byte [ecx], bl
inc ecx
dec eax
jne 0x10070d6
push dword [ebp - 0x4c8]
mov edi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call edi
push dword [ebp - 0x4d0]
call edi
cmp dword [ebp - 0x4c4], ebx
jge 0x1007154
mov eax, dword [ebp - 0x4c4]
and eax, 0xffff
dec eax
dec eax
je 0x1007142
sub eax, 0x1e
je 0x1007138
sub eax, 0x36
je 0x100712e
push ebx
push dword [ebp - 0x4c4]
push 0x1002148
call fcn.01004a8b
push dword [esi + 0x6c]
push 0x842
jmp 0x100714a
push 0x83e
jmp 0x1007ca1
push 0x7d7
jmp 0x1007ca1
push dword [esi + 0x6c]
push 0x3ec
call fcn.01002459
jmp 0x1006fd0
mov eax, dword [ebp - 0x4f0]
mov ecx, dword [eax]
lea edx, [ebp - 0x4d8]
push edx
push eax
call dword [ecx + 0x1c]
cmp eax, ebx
jl 0x100724b
mov eax, dword [ebp - 0x4d8]
mov ecx, dword [eax]
lea edx, [ebp - 0x514]
push edx
push 0x1002138
push eax
call dword [ecx]
cmp eax, ebx
jl 0x1007272
mov eax, dword [ebp - 0x4d8]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x10072b0
mov eax, dword [eax + 0x90]
cmp eax, ebx
je 0x10071ac
push eax
jmp 0x10071b1
push 0x1002130
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, eax
cmp esi, ebx
jne 0x10071c9
push 0xe
push 0x1001a68
jmp 0x1006fcb
mov edi, dword [ebp - 0x4e4]
mov eax, dword [ebp - 0x4f0]
mov ecx, dword [eax]
xor edx, edx
cmp dword [edi + 0x3c], ebx
push 0x80
sete dl
push esi
inc edx
push edx
push eax
call dword [ecx + 0x20]
cmp eax, ebx
jge 0x100722d
mov ecx, eax
and ecx, 0xffff
dec ecx
dec ecx
je 0x1007214
sub ecx, 0x79
je 0x1007214
push ebx
push eax
push 0x1002164
call fcn.01004a8b
push esi
push 0x846
jmp 0x100721a
push esi
push 0x84a
call fcn.01002459
pop ecx
pop ecx
push esi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x1007ca6
push esi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [ebp - 0x4f0]
mov ecx, dword [eax]
lea edx, [ebp - 0x4d8]
push edx
push eax
call dword [ecx + 0x1c]
cmp eax, ebx
jge 0x1007257
push ebx
push eax
push 0x10020fc
jmp 0x1007038
mov eax, dword [ebp - 0x4d8]
mov ecx, dword [eax]
lea edx, [ebp - 0x514]
push edx
push 0x1002138
push eax
call dword [ecx]
cmp eax, ebx
jge 0x100729e
cmp eax, 0x80040154
je 0x1006fd7
cmp eax, 0x80004002
je 0x1006fd7
cmp eax, 0x8007007e
je 0x1006fd7
push eax
push 0x1001b28
jmp 0x1006fcb
mov eax, dword [ebp - 0x4d8]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, dword [ebp - 0x4e4]
mov esi, dword [esi + 0x80]
cmp esi, ebx
mov dword [ebp - 0x4d8], ebx
je 0x10072f2
push esi
lea ecx, [ebp - 0x4c4]
call fcn.01009654
lea eax, [ebp - 0x4c4]
push eax
lea ecx, [ebp - 0x508]
mov byte [ebp - 4], 1
call sub.MFC42.dll_COleVariant::operator
lea ecx, [ebp - 0x4c4]
mov byte [ebp - 4], bl
call sub.MFC42.dll_CString::CString
jmp 0x1007304
push 8
push 0x1001678
lea ecx, [ebp - 0x508]
call sub.MFC42.dll_COleVariant::SetString
mov eax, dword [ebp - 0x514]
mov ecx, dword [eax]
lea edx, [ebp - 0x4cc]
push edx
push ebx
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x508]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 7
push eax
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x28]
cmp eax, ebx
jge 0x100734b
push ebx
push eax
push 0x10020d0
call fcn.01004a8b
lea eax, [ebp - 0x508]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x1007ca6
lea eax, [ebp - 0x508]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [ebp - 0x4e4]
cmp dword [esi + 0x34], 0x14
jne 0x100742e
lea eax, [ebp - 0x64]
xor edi, edi
mov dword [ebp - 0x4c4], eax
mov eax, dword [esi + 0x38]
movzx eax, byte [eax + edi]
push eax
push 0x10014d0
push dword [ebp - 0x4c4]
call dword [sym.imp.msvcrt.dll_swprintf]
add dword [ebp - 0x4c4], 4
add esp, 0xc
inc edi
cmp edi, 0x14
jb 0x1007373
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x4c4]
call fcn.01009654
lea eax, [ebp - 0x4c4]
push eax
lea ecx, [ebp - 0x508]
mov byte [ebp - 4], 2
call sub.MFC42.dll_COleVariant::operator
lea ecx, [ebp - 0x4c4]
mov byte [ebp - 4], bl
call sub.MFC42.dll_CString::CString
mov eax, dword [ebp - 0x4cc]
mov ecx, dword [eax]
lea edx, [ebp - 0x4d4]
push edx
push ebx
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x508]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push ebx
push eax
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x28]
cmp eax, ebx
jl 0x100732d
lea eax, [ebp - 0x508]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x4cc]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x4d4]
mov esi, dword [ebp - 0x4e4]
mov dword [ebp - 0x4cc], eax
mov dword [ebp - 0x4d4], ebx
jmp 0x1007434
mov eax, dword [ebp - 0x4cc]
mov ecx, dword [esi + 0x94]
cmp ecx, ebx
je 0x10074d0
push ecx
lea ecx, [ebp - 0x4c4]
call fcn.01009654
lea eax, [ebp - 0x4c4]
push eax
lea ecx, [ebp - 0x508]
mov byte [ebp - 4], 3
call sub.MFC42.dll_COleVariant::operator
lea ecx, [ebp - 0x4c4]
mov byte [ebp - 4], bl
call sub.MFC42.dll_CString::CString
mov eax, dword [ebp - 0x4cc]
mov ecx, dword [eax]
lea edx, [ebp - 0x4d4]
push edx
push ebx
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x508]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 1
push eax
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x28]
cmp eax, ebx
jl 0x100732d
lea eax, [ebp - 0x508]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x4cc]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x4d4]
mov esi, dword [ebp - 0x4e4]
mov dword [ebp - 0x4cc], eax
mov dword [ebp - 0x4d4], ebx
mov ecx, dword [esi + 0x84]
cmp ecx, ebx
je 0x100756c
push ecx
lea ecx, [ebp - 0x4c4]
call fcn.01009654
lea eax, [ebp - 0x4c4]
push eax
lea ecx, [ebp - 0x508]
mov byte [ebp - 4], 4
call sub.MFC42.dll_COleVariant::operator
lea ecx, [ebp - 0x4c4]
mov byte [ebp - 4], bl
call sub.MFC42.dll_CString::CString
mov eax, dword [ebp - 0x4cc]
mov ecx, dword [eax]
lea edx, [ebp - 0x4d4]
push edx
push ebx
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x508]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
push eax
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x28]
cmp eax, ebx
jl 0x100732d
lea eax, [ebp - 0x508]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x4cc]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x4d4]
mov esi, dword [ebp - 0x4e4]
mov dword [ebp - 0x4cc], eax
mov dword [ebp - 0x4d4], ebx
mov ecx, dword [esi + 0x98]
cmp ecx, ebx
je 0x1007608
push ecx
lea ecx, [ebp - 0x4c4]
call fcn.01009654
lea eax, [ebp - 0x4c4]
push eax
lea ecx, [ebp - 0x508]
mov byte [ebp - 4], 5
call sub.MFC42.dll_COleVariant::operator
lea ecx, [ebp - 0x4c4]
mov byte [ebp - 4], bl
call sub.MFC42.dll_CString::CString
mov eax, dword [ebp - 0x4cc]
mov ecx, dword [eax]
lea edx, [ebp - 0x4d4]
push edx
push ebx
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x508]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 4
push eax
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x28]
cmp eax, ebx
jl 0x100732d
lea eax, [ebp - 0x508]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x4cc]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x4d4]
mov esi, dword [ebp - 0x4e4]
mov dword [ebp - 0x4cc], eax
mov dword [ebp - 0x4d4], ebx
cmp dword [esi + 0x74], ebx
jne 0x1007678
push 2
lea ecx, [ebp - 0x508]
call sub.MFC42.dll_COleVariant::operator_1
mov eax, dword [ebp - 0x4cc]
mov ecx, dword [eax]
lea edx, [ebp - 0x4d4]
push edx
push ebx
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x508]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 6
push eax
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x28]
cmp eax, ebx
jl 0x100732d
lea eax, [ebp - 0x508]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x4cc]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x4d4]
mov esi, dword [ebp - 0x4e4]
mov dword [ebp - 0x4cc], eax
mov dword [ebp - 0x4d4], ebx
mov ecx, dword [esi + 0x8c]
cmp ecx, ebx
je 0x1007714
push ecx
lea ecx, [ebp - 0x4c4]
call fcn.01009654
lea eax, [ebp - 0x4c4]
push eax
lea ecx, [ebp - 0x508]
mov byte [ebp - 4], 6
call sub.MFC42.dll_COleVariant::operator
lea ecx, [ebp - 0x4c4]
mov byte [ebp - 4], bl
call sub.MFC42.dll_CString::CString
mov eax, dword [ebp - 0x4cc]
mov ecx, dword [eax]
lea edx, [ebp - 0x4d4]
push edx
push ebx
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x508]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 3
push eax
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x28]
cmp eax, ebx
jl 0x100732d
lea eax, [ebp - 0x508]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x4cc]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x4d4]
mov esi, dword [ebp - 0x4e4]
mov dword [ebp - 0x4cc], eax
mov dword [ebp - 0x4d4], ebx
mov ecx, dword [eax]
lea edx, [ebp - 0x518]
push edx
push eax
call dword [ecx + 0x20]
cmp eax, ebx
jge 0x1007731
push ebx
push eax
push 0x100209c
jmp 0x1007038
mov eax, dword [ebp - 0x518]
cmp eax, ebx
jne 0x1007745
push 0x83f
jmp 0x1007ca1
xor edi, edi
inc edi
cmp eax, edi
jne 0x10077a1
mov eax, dword [ebp - 0x4cc]
mov ecx, dword [eax]
lea edx, [ebp - 0x53c]
push edx
push edi
push eax
call dword [ecx + 0x1c]
cmp eax, ebx
jge 0x1007770
push ebx
push eax
push 0x1002068
jmp 0x1007e25
mov eax, dword [ebp - 0x534]
mov ecx, dword [eax]
lea edx, [ebp - 0x4e0]
push edx
push 0x1001944
push eax
call dword [ecx]
cmp eax, ebx
jl 0x100839c
lea eax, [ebp - 0x53c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x10078ba
jle 0x10083c7
cmp dword [esi + 0xc], ebx
je 0x100831c
cmp eax, edi
fldz
fstp qword [ebp - 0x544]
mov dword [ebp - 0x4c4], edi
jl 0x10083c7
mov eax, dword [ebp - 0x4cc]
mov ecx, dword [eax]
lea edx, [ebp - 0x53c]
push edx
push dword [ebp - 0x4c4]
push eax
call dword [ecx + 0x1c]
test eax, eax
jl 0x100787d
mov eax, dword [ebp - 0x534]
mov ecx, dword [eax]
lea edx, [ebp - 0x4e8]
push edx
push 0x1001944
push eax
call dword [ecx]
cmp eax, ebx
jl 0x100839c
lea eax, [ebp - 0x53c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x4e8]
mov ecx, dword [eax]
lea edx, [ebp - 0x554]
push edx
push eax
call dword [ecx + 0x30]
cmp eax, ebx
jl 0x1007939
fld qword [ebp - 0x554]
fcomp qword [ebp - 0x544]
fnstsw ax
test ah, 0x41
jne 0x100786b
mov eax, dword [ebp - 0x4e0]
fld qword [ebp - 0x554]
cmp eax, ebx
fstp qword [ebp - 0x544]
je 0x100785d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x4e8]
mov dword [ebp - 0x4e0], eax
jmp 0x1007877
mov eax, dword [ebp - 0x4e8]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x4e8], ebx
inc dword [ebp - 0x4c4]
mov eax, dword [ebp - 0x4c4]
cmp eax, dword [ebp - 0x518]
jle 0x10077c6
fld qword [0x1002060]
fld qword [ebp - 0x544]
fucompp
fnstsw ax
test ah, 0x44
jnp 0x10083c7
cmp dword [ebp - 0x4e0], ebx
je 0x10083c7
cmp dword [esi + 0x4c], ebx
je 0x10078d4
push 0x835
call fcn.01002414
push dword [ebp - 0x4e0]
call fcn.01005af9
cmp dword [esi + 0x74], ebx
je 0x1007d30
cmp dword [esi + 0x70], ebx
je 0x1007d30
cmp dword [esi + 0x6c], ebx
jne 0x1007a38
lea eax, [ebp - 0x510]
push eax
push 0x10021d0
push 0x17
push ebx
push 0x10021c0
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, ebx
jge 0x1007945
cmp eax, 0x80040154
je 0x10083c0
cmp eax, 0x80004002
je 0x10083c0
cmp eax, 0x8007007e
je 0x10083c0
push eax
push 0x1001a20
jmp 0x10083b7
push ebx
push eax
push 0x1002020
jmp 0x1007e25
push 0x1001fe0
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
cmp eax, ebx
jne 0x1007960
push 0xe
push 0x1001a68
jmp 0x10083b7
mov ecx, dword [ebp - 0x510]
mov edx, dword [ecx]
push edi
push eax
push ebx
push ecx
call dword [edx + 0x20]
cmp eax, ebx
jge 0x100797f
push ebx
push eax
push 0x1002164
jmp 0x1007e25
mov eax, dword [ebp - 0x510]
push dword [ebp - 0x4e0]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x24]
cmp eax, ebx
jge 0x10079a1
push ebx
push eax
push 0x1001fc4
jmp 0x1007e25
mov eax, dword [ebp - 0x4e0]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x510]
lea edx, [ebp - 0x4d8]
push edx
mov dword [ebp - 0x4e0], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
cmp eax, ebx
jge 0x10079d6
push ebx
push eax
push 0x10020fc
jmp 0x1007e25
mov eax, dword [ebp - 0x4d8]
mov ecx, dword [eax]
lea edx, [ebp - 0x53c]
push edx
push edi
push eax
call dword [ecx + 0x1c]
cmp eax, ebx
jge 0x10079fa
push ebx
push eax
push 0x1001f94
jmp 0x1007e25
mov eax, dword [ebp - 0x534]
mov ecx, dword [eax]
lea edx, [ebp - 0x4e0]
push edx
push 0x1001944
push eax
call dword [ecx]
cmp eax, ebx
jl 0x100839c
lea eax, [ebp - 0x53c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x4d8]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x4d8], ebx
lea eax, [ebp - 0x4dc]
push eax
push 0x1001f84
push 0x17
push ebx
push 0x1001f74
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, ebx
jl 0x100790d
push dword [esi + 0x70]
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
push dword [esi + 0x74]
mov dword [ebp - 0x4c8], eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
cmp dword [ebp - 0x4c8], ebx
mov dword [ebp - 0x4d0], eax
je 0x1007954
cmp eax, ebx
je 0x1007954
mov eax, dword [ebp - 0x4dc]
mov ecx, dword [eax]
push 1
push 2
push 2
push 1
push dword [ebp - 0x4d0]
push dword [ebp - 0x4c8]
push eax
call dword [ecx + 0x48]
mov edi, eax
cmp edi, ebx
jge 0x1007b3b
cmp edi, 0x8009001b
je 0x1007ae0
mov eax, dword [ebp - 0x4dc]
mov ecx, dword [eax]
push 1
push 2
push 1
push 1
push dword [ebp - 0x4d0]
push dword [ebp - 0x4c8]
push eax
call dword [ecx + 0x48]
mov edi, eax
cmp edi, ebx
jge 0x1007b3b
cmp edi, 0x8009001b
je 0x1007b0e
mov eax, dword [ebp - 0x4dc]
mov ecx, dword [eax]
push 1
push 1
push 2
push 1
push dword [ebp - 0x4d0]
push dword [ebp - 0x4c8]
push eax
call dword [ecx + 0x48]
mov edi, eax
cmp edi, ebx
jge 0x1007b3b
cmp edi, 0x8009001b
je 0x1007b47
mov eax, dword [ebp - 0x4dc]
mov edx, dword [eax]
xor ecx, ecx
inc ecx
push ecx
push ecx
push ecx
push ecx
push dword [ebp - 0x4d0]
push dword [ebp - 0x4c8]
push eax
call dword [edx + 0x48]
mov edi, eax
cmp edi, 0x8009001b
jne 0x1007c26
lea eax, [ebp - 0x51c]
push eax
push dword [ebp - 0x4d0]
call fcn.01004c25
test eax, eax
jne 0x1007b82
push 0x840
call fcn.010023c5
push dword [ebp - 0x4c8]
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call esi
push dword [ebp - 0x4d0]
call esi
jmp 0x1007ca6
mov eax, dword [ebp - 0x4dc]
mov ecx, dword [eax]
push 1
push 2
push 2
push dword [ebp - 0x51c]
push dword [ebp - 0x4d0]
push dword [ebp - 0x4c8]
push eax
call dword [ecx + 0x48]
mov edi, eax
cmp edi, ebx
jge 0x1007c26
mov eax, dword [ebp - 0x4dc]
mov ecx, dword [eax]
push 1
push 2
push 1
push dword [ebp - 0x51c]
push dword [ebp - 0x4d0]
push dword [ebp - 0x4c8]
push eax
call dword [ecx + 0x48]
mov edi, eax
cmp edi, ebx
jge 0x1007c26
mov eax, dword [ebp - 0x4dc]
mov ecx, dword [eax]
push 1
push 1
push 2
push dword [ebp - 0x51c]
push dword [ebp - 0x4d0]
push dword [ebp - 0x4c8]
push eax
call dword [ecx + 0x48]
mov edi, eax
cmp edi, ebx
jge 0x1007c26
mov eax, dword [ebp - 0x4dc]
mov ecx, dword [eax]
push 1
push 1
push 1
push dword [ebp - 0x51c]
push dword [ebp - 0x4d0]
push dword [ebp - 0x4c8]
push eax
call dword [ecx + 0x48]
mov edi, eax
push dword [ebp - 0x4c8]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [ebp - 0x4d0]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp edi, ebx
jge 0x1007c73
cmp edi, 0x80090016
je 0x1007c6c
cmp edi, 0x80090019
je 0x1007c65
push ebx
push edi
push 0x1001f50
call fcn.01004a8b
push 0x84c
jmp 0x1007ca1
push 0x840
jmp 0x1007ca1
push 0x84b
jmp 0x1007ca1
mov eax, dword [ebp - 0x4e0]
push dword [ebp - 0x4dc]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x70]
cmp eax, ebx
jge 0x1007cb5
cmp eax, 0x80090015
je 0x1007c9c
push ebx
push eax
push 0x1001f14
jmp 0x1007038
push 0x849
call fcn.010023c5
mov dword [ebp - 0x4c0], 1
jmp 0x10083d7
mov eax, dword [ebp - 0x4dc]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor edi, edi
mov dword [ebp - 0x4dc], ebx
inc edi
lea eax, [ebp - 0x4f4]
push eax
push 0x1001afc
push 0x17
push ebx
push 0x1001aec
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, ebx
jl 0x100790d
lea eax, [ebp - 0x4f8]
push eax
push 0x1001f04
push 0x17
push ebx
push 0x1001ef4
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, ebx
jl 0x100790d
mov eax, dword [ebp - 0x4f8]
push dword [ebp - 0x4e0]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
cmp eax, ebx
push ebx
jge 0x1007d6a
push eax
push 0x1001ec0
jmp 0x1007e25
mov eax, dword [ebp - 0x4e0]
mov ecx, dword [eax]
lea edx, [ebp - 0x524]
push edx
push eax
call dword [ecx + 0x38]
cmp eax, ebx
jge 0x1007d53
push ebx
push eax
push 0x1001e84
jmp 0x1007e25
cmp word [ebp - 0x524], bx
jne 0x1007cca
push 0x841
jmp 0x10083cc
mov eax, dword [ebp - 0x4f8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x30]
cmp eax, ebx
jge 0x1007d86
push ebx
push eax
push 0x1001e58
jmp 0x1007e25
cmp dword [esi + 0x6c], ebx
je 0x1007e3b
mov eax, dword [ebp - 0x4f0]
mov ecx, dword [eax]
lea edx, [ebp - 0x528]
push edx
push 0x1001e48
push eax
call dword [ecx]
cmp eax, ebx
jge 0x1007dd6
cmp eax, 0x80040154
je 0x10083c0
cmp eax, 0x80004002
je 0x10083c0
cmp eax, 0x8007007e
je 0x10083c0
push eax
push 0x1001e14
jmp 0x10083b7
mov eax, dword [ebp - 0x528]
mov ecx, dword [eax]
lea edx, [ebp - 0x520]
push edx
push eax
call dword [ecx + 0xc]
cmp eax, ebx
jl 0x1007e1e
mov eax, dword [ebp - 0x4f8]
mov ecx, dword [eax]
lea edx, [ebp - 0x52c]
push edx
push 0x1001e04
push eax
call dword [ecx]
cmp eax, ebx
jl 0x1007daa
mov eax, dword [ebp - 0x52c]
push dword [ebp - 0x520]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x10]
cmp eax, ebx
jge 0x1007e2f
push ebx
push eax
push 0x1001dcc
call fcn.01004a8b
jmp 0x10083d1
push 0x1001dac
call dword [sym.imp.msvcrt.dll_printf]
pop ecx
cmp dword [esi + 0x54], ebx
je 0x1007e75
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0xf70]
mov ecx, dword fs:[0x18]
mov eax, dword [eax + 0x14c0]
mov ecx, dword [ecx + 0xf70]
mov dword [ecx + 0x14c0], 0x10016c8
mov dword [ecx + 0x14c4], ebx
mov dword [ebp - 0x540], eax
cmp dword [esi + 8], ebx
mov dword [ebp - 0x4c8], ebx
jbe 0x10082f0
mov eax, dword [esi + 4]
mov ecx, dword [ebp - 0x4c8]
push dword [eax + ecx*4]
mov dword [ebp - 0x54c], ebx
mov dword [ebp - 0x4c4], ebx
call dword [sym.imp.msvcrt.dll_wcslen]
test eax, eax
pop ecx
jbe 0x1007f4e
mov eax, dword [esi + 4]
mov ecx, dword [ebp - 0x4c8]
mov edi, dword [ebp - 0x4c4]
mov eax, dword [eax + ecx*4]
push 1
add edi, edi
add eax, edi
push 0x100168c
push eax
call dword [sym.imp.msvcrt.dll_wcsncmp]
add esp, 0xc
test eax, eax
je 0x1007f1c
mov eax, dword [esi + 4]
mov ecx, dword [ebp - 0x4c8]
mov eax, dword [eax + ecx*4]
push 1
add eax, edi
push 0x100143c
push eax
call dword [sym.imp.msvcrt.dll_wcsncmp]
add esp, 0xc
test eax, eax
je 0x1007f1c
mov eax, dword [esi + 4]
mov ecx, dword [ebp - 0x4c8]
mov eax, dword [eax + ecx*4]
push 1
add eax, edi
push 0x10016c4
push eax
call dword [sym.imp.msvcrt.dll_wcsncmp]
add esp, 0xc
test eax, eax
jne 0x1007f29
mov eax, dword [ebp - 0x4c4]
inc eax
mov dword [ebp - 0x54c], eax
mov eax, dword [esi + 4]
mov ecx, dword [ebp - 0x4c8]
push dword [eax + ecx*4]
inc dword [ebp - 0x4c4]
call dword [sym.imp.msvcrt.dll_wcslen]
cmp dword [ebp - 0x4c4], eax
pop ecx
jb 0x1007eab
mov eax, dword [esi + 4]
mov edi, dword [ebp - 0x4c8]
push 0x104
push dword [eax + edi*4]
lea eax, [ebp - 0x26c]
push eax
call dword [sym.imp.msvcrt.dll_wcsncpy]
add esp, 0xc
lea eax, [ebp - 0x4bc]
push eax
mov eax, dword [esi + 4]
mov word [ebp - 0x66], bx
push dword [eax + edi*4]
mov dword [ebp - 0x4d0], ebx
call fcn.01009db7
cmp eax, 0xffffffff
mov dword [ebp - 0x548], eax
je 0x10082b4
test byte [ebp - 0x4bc], 0x10
jne 0x100828c
mov eax, dword [ebp - 0x54c]
inc dword [ebp - 0x4d0]
mov ecx, 0x104
sub ecx, eax
push ecx
lea ecx, [ebp - 0x490]
push ecx
lea eax, [ebp + eax*2 - 0x26c]
push eax
call dword [sym.imp.msvcrt.dll_wcsncpy]
add esp, 0xc
cmp dword [esi + 0x4c], ebx
mov word [ebp - 0x66], bx
je 0x1007fef
lea eax, [ebp - 0x26c]
push eax
push 0x83c
call fcn.010024f9
pop ecx
pop ecx
cmp dword [esi + 0x54], ebx
je 0x1008013
mov ecx, dword fs:[0x18]
mov ecx, dword [ecx + 0xf70]
lea eax, [ebp - 0x26c]
mov dword [ecx + 0x14c0], eax
mov dword [ecx + 0x14c4], ebx
lea eax, [ebp - 0x26c]
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov edi, eax
cmp edi, ebx
je 0x1008257
mov eax, dword [ebp - 0x4f4]
mov ecx, dword [eax]
push edi
push eax
call dword [ecx + 0x20]
cmp eax, ebx
jge 0x1008047
push ebx
push eax
push 0x1001ab8
jmp 0x10080dc
push edi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esi + 0x78]
cmp eax, ebx
je 0x1008096
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov edi, eax
cmp edi, ebx
je 0x1008257
mov eax, dword [ebp - 0x4f4]
mov ecx, dword [eax]
push edi
push eax
call dword [ecx + 0x28]
push edi
mov dword [ebp - 0x4c4], eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp dword [ebp - 0x4c4], ebx
jge 0x1008096
push ebx
push dword [ebp - 0x4c4]
push 0x1001d70
jmp 0x10080dc
mov eax, dword [esi + 0x7c]
cmp eax, ebx
je 0x10080e6
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov edi, eax
cmp edi, ebx
je 0x1008257
mov eax, dword [ebp - 0x4f4]
mov ecx, dword [eax]
push edi
push eax
call dword [ecx + 0x30]
push edi
mov dword [ebp - 0x4c4], eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp dword [ebp - 0x4c4], ebx
jge 0x10080e6
push ebx
push dword [ebp - 0x4c4]
push 0x1001d30
call fcn.01004a8b
jmp 0x1008265
cmp dword [esi + 0xa4], ebx
push dword [ebp - 0x4f8]
jne 0x1008102
mov eax, dword [ebp - 0x4f4]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x40]
jmp 0x100810e
push dword [ebp - 0x4f4]
push esi
call fcn.01009388
cmp eax, ebx
jl 0x10081e5
mov eax, dword [esi + 0x9c]
cmp eax, ebx
je 0x10081cb
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov edi, eax
cmp edi, ebx
je 0x1008257
mov eax, dword [ebp - 0x4f4]
mov ecx, dword [eax]
push edi
push eax
call dword [ecx + 0x44]
cmp eax, ebx
jl 0x1008167
cmp dword [esi + 0x44], ebx
jne 0x100815e
lea eax, [ebp - 0x26c]
push eax
push 0x83b
call fcn.010024f9
pop ecx
pop ecx
push edi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x10081c0
cmp dword [esi + 0x44], ebx
jne 0x10081a0
cmp eax, 0x8009310b
je 0x1008196
cmp eax, 0x80880361
je 0x100818f
cmp eax, 0x80880364
je 0x1008196
push ebx
push eax
push 0x1001a88
call fcn.01004a8b
jmp 0x10081a0
push 0x900
jmp 0x100819b
push 0x901
call fcn.010023c5
lea eax, [ebp - 0x26c]
push eax
push 0x83d
call fcn.01002459
pop ecx
pop ecx
push edi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
inc dword [ebp - 0x50c]
inc dword [ebp - 0x4ec]
jmp 0x100826b
cmp dword [esi + 0x44], ebx
jne 0x10081c0
lea eax, [ebp - 0x26c]
push eax
push 0x83a
call fcn.010024f9
pop ecx
pop ecx
jmp 0x10081c0
cmp dword [esi + 0x44], ebx
jne 0x1008244
cmp eax, 0x80070005
je 0x100823a
cmp eax, 0x80070020
je 0x1008233
mov ecx, 0x800700c1
cmp eax, ecx
je 0x100822b
cmp eax, 0x800703ee
je 0x1008224
cmp eax, 0x800b0003
je 0x100821d
push ebx
push eax
push 0x1001d0c
call fcn.01004a8b
jmp 0x1008244
push 0x848
jmp 0x100823f
push 0x7d8
jmp 0x100823f
push 0x84d
push ecx
jmp 0x1008211
push 0x7d7
jmp 0x100823f
push 0x7d6
call fcn.010023c5
lea eax, [ebp - 0x26c]
push eax
push 0x847
call fcn.01002459
jmp 0x1008263
push 0xe
push 0x1001a68
call fcn.01002585
pop ecx
pop ecx
inc dword [ebp - 0x4c0]
cmp dword [esi + 0x54], ebx
je 0x100828c
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0xf70]
mov dword [eax + 0x14c0], 0x10016c8
mov dword [eax + 0x14c4], ebx
lea eax, [ebp - 0x4bc]
push eax
push dword [ebp - 0x548]
call fcn.01009e28
test eax, eax
jne 0x1007f9a
cmp dword [ebp - 0x4d0], ebx
jne 0x10082ce
mov edi, dword [ebp - 0x4c8]
mov eax, dword [esi + 4]
push dword [eax + edi*4]
inc dword [ebp - 0x4c0]
push 0x3ec
call fcn.01002459
pop ecx
pop ecx
jmp 0x10082e0
push dword [ebp - 0x548]
call dword [sym.imp.KERNEL32.dll_FindClose]
mov edi, dword [ebp - 0x4c8]
inc edi
cmp edi, dword [esi + 8]
mov dword [ebp - 0x4c8], edi
jb 0x1007e84
cmp dword [esi + 0x54], ebx
je 0x10083d7
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0xf70]
mov ecx, dword [ebp - 0x540]
mov dword [eax + 0x14c0], ecx
mov dword [eax + 0x14c4], ebx
jmp 0x10083d7
push 0x845
call fcn.010023c5
cmp dword [ebp - 0x518], edi
mov esi, edi
jl 0x10083d1
mov eax, dword [ebp - 0x4cc]
mov ecx, dword [eax]
lea edx, [ebp - 0x53c]
push edx
push esi
push eax
call dword [ecx + 0x1c]
test eax, eax
jl 0x1008391
mov eax, dword [ebp - 0x534]
mov ecx, dword [eax]
lea edx, [ebp - 0x4e8]
push edx
push 0x1001944
push eax
call dword [ecx]
cmp eax, ebx
jl 0x100839c
push dword [ebp - 0x4e8]
call fcn.01005af9
mov eax, dword [ebp - 0x4e8]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea eax, [ebp - 0x53c]
push eax
mov dword [ebp - 0x4e8], ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
inc esi
cmp esi, dword [ebp - 0x518]
jle 0x1008334
jmp 0x10083d1
cmp eax, 0x80040154
je 0x10083c0
cmp eax, 0x80004002
je 0x10083c0
cmp eax, 0x8007007e
je 0x10083c0
push eax
push 0x1001cd8
call fcn.01002585
pop ecx
pop ecx
jmp 0x10083d1
push 0x7d5
jmp 0x10083cc
push 0x3f0
call fcn.010023c5
mov dword [ebp - 0x4c0], edi
mov esi, dword [ebp - 0x4e4]
cmp dword [esi + 0x4c], ebx
jne 0x10083f7
cmp dword [esi + 0x44], ebx
jne 0x1008460
cmp dword [ebp - 0x4c0], ebx
jne 0x10083f7
cmp dword [ebp - 0x50c], ebx
je 0x1008460
push 0x1001690
call dword [sym.imp.msvcrt.dll_wprintf]
cmp dword [esi + 0x4c], ebx
pop ecx
jne 0x1008410
cmp dword [ebp - 0x4ec], ebx
je 0x1008422
push dword [ebp - 0x4ec]
push 0x834
call fcn.010024f9
pop ecx
pop ecx
cmp dword [esi + 0x4c], ebx
jne 0x100842f
cmp dword [ebp - 0x50c], ebx
je 0x1008441
push dword [ebp - 0x50c]
push 0x7d0
call fcn.010024f9
pop ecx
pop ecx
cmp dword [esi + 0x4c], ebx
jne 0x100844e
cmp dword [ebp - 0x4c0], ebx
je 0x1008460
push dword [ebp - 0x4c0]
push 0x7d1
call fcn.010024f9
pop ecx
pop ecx
mov eax, dword [ebp - 0x4f8]
cmp eax, ebx
je 0x1008470
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x52c]
cmp eax, ebx
je 0x1008480
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x4f4]
cmp eax, ebx
je 0x1008490
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x4dc]
cmp eax, ebx
je 0x10084a0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x4e0]
cmp eax, ebx
je 0x10084b0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x4e8]
cmp eax, ebx
je 0x10084c0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x4d8]
cmp eax, ebx
je 0x10084d0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x514]
cmp eax, ebx
je 0x10084e0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x4cc]
cmp eax, ebx
je 0x10084f0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x4d4]
cmp eax, ebx
je 0x1008500
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp dword [ebp - 0x520], ebx
je 0x1008515
push ebx
push dword [ebp - 0x520]
call dword [sym.imp.CRYPT32.dll_CertCloseStore]
mov eax, dword [ebp - 0x528]
cmp eax, ebx
je 0x1008525
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x510]
cmp eax, ebx
je 0x1008535
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x4f0]
cmp eax, ebx
je 0x1008545
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp dword [ebp - 0x4c0], ebx
jne 0x100857c
cmp dword [ebp - 0x50c], ebx
je 0x1008560
push 2
pop ebx
jmp 0x100857f
cmp dword [ebp - 0x4ec], ebx
jne 0x100857f
push 0x7d3
call fcn.010023c5
push 0x3f0
call fcn.010023c5
xor ebx, ebx
inc ebx
lea eax, [ebp - 0x508]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
mov eax, ebx
call fcn.010094f4
pop edi
pop esi
pop ebx
leave
ret 4