Function at 0x441186
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, ecx
push edi
mov dword [ebp - 0x18], esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [ebp - 0xc], eax
xor ecx, ecx
push 2
add eax, 6
pop ebx
mul ebx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0041f6ba
pop ecx
xor ecx, ecx
mov dword [esi + 4], eax
mov eax, ebx
mov ebx, ecx
mov dword [ebp - 8], eax
mov dword [ebp - 4], ebx
mov dword [ebp - 0x30], 0x7c
cmp dword [ebp - 0xc], ecx
jle 0x44130a
push 0x20
pop edx
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x14], 0x28
jmp 0x4411e8
inc ecx
cmp word [edi + ecx*2], dx
je 0x4411e7
movzx edx, word [edi + ecx*2]
cmp dx, word [ebp - 0x10]
je 0x441210
mov eax, dword [esi + 4]
inc ecx
mov word [eax + ebx*2], dx
movzx edx, word [edi + ecx*2]
push 0x20
pop eax
inc ebx
cmp dx, ax
jne 0x4411f8
mov eax, dword [ebp - 8]
inc eax
push 0x7c
mov dword [ebp - 8], eax
mov eax, dword [esi + 4]
pop edx
mov word [eax + ebx*2], dx
push 0x20
inc ebx
pop eax
jmp 0x441225
inc ecx
cmp word [edi + ecx*2], ax
je 0x441224
jmp 0x44123f
cmp dx, word [ebp - 0x14]
je 0x441248
mov eax, dword [esi + 4]
push 0x20
mov word [eax + ebx*2], dx
inc ecx
inc ebx
pop eax
movzx edx, word [edi + ecx*2]
cmp dx, ax
jne 0x44122d
mov eax, dword [esi + 4]
push 0x3b
pop edx
mov word [eax + ebx*2], dx
push 0x20
inc ebx
pop eax
jmp 0x441259
inc ecx
cmp word [edi + ecx*2], ax
je 0x441258
mov edx, dword [ebp - 0x14]
cmp word [edi + ecx*2], dx
jne 0x441269
inc ecx
cmp word [edi + ecx*2], ax
je 0x441268
xor edx, edx
inc edx
jmp 0x441278
pop eax
jmp 0x441278
inc ecx
cmp word [edi + ecx*2], ax
je 0x441277
jmp 0x4412ab
cmp ax, word [ebp - 0x10]
jne 0x441290
push 0x20
pop eax
inc ecx
cmp word [edi + ecx*2], ax
je 0x441289
movzx eax, word [edi + ecx*2]
mov dword [ebp - 0x2c], eax
cmp eax, 0x29
je 0x4412bc
mov eax, dword [esi + 4]
mov edi, dword [ebp - 0x2c]
mov word [eax + ebx*2], di
mov edi, dword [ebp + 8]
inc ecx
inc ebx
movzx eax, word [edi + ecx*2]
push 0x3b
pop edi
cmp ax, di
mov edi, dword [ebp + 8]
jne 0x441280
jmp 0x4412c1
xor eax, eax
mov edx, eax
inc ecx
push 0x20
pop eax
jmp 0x4412c7
inc ecx
cmp word [edi + ecx*2], ax
je 0x4412c6
mov eax, dword [esi + 4]
test edx, edx
jne 0x4412d8
push 0xa
jmp 0x4412da
push 0x3b
pop edi
mov word [eax + ebx*2], di
mov edi, dword [ebp + 8]
push 0x3b
pop eax
inc ebx
cmp word [edi + ecx*2], ax
jne 0x4412ed
inc ecx
xor eax, eax
inc eax
push 0x20
cmp edx, eax
je 0x441274
mov eax, dword [ebp - 8]
mov dword [ebp - 4], ebx
pop edx
cmp ecx, dword [ebp - 0xc]
jl 0x4411e8
xor ecx, ecx
push 3
pop edx
cmp dword [esi + 0x24], ecx
je 0x441319
add eax, edx
mov dword [ebp - 8], eax
xor ecx, ecx
push 4
pop edi
mul edi
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0041f6ba
mov dword [esi + 8], eax
mov eax, dword [ebp - 8]
xor ecx, ecx
push 0x1c
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0041f6ba
mov dword [esi + 0xc], eax
mov dword [eax], str.InterfaceDispatch
mov eax, dword [esi + 0xc]
xor edx, edx
mov dword [eax + 4], edx
mov eax, dword [esi + 0xc]
pop ecx
or dword [eax + 8], 0xffffffff
mov eax, dword [esi + 0xc]
pop ecx
or dword [eax + 0xc], 0xffffffff
mov eax, dword [esi + 0xc]
xor ecx, ecx
mov dword [eax + 0x10], edi
mov eax, dword [esi + 0xc]
inc ecx
mov dword [eax + 0x14], edx
mov eax, dword [esi + 0xc]
push 2
mov word [eax + 0x18], cx
mov eax, dword [esi + 0xc]
xor ecx, ecx
mov word [eax + 0x1a], cx
mov eax, dword [esi + 0xc]
pop ecx
mov dword [eax + 0x1c], edx
mov eax, dword [esi + 0xc]
push 0x13
mov dword [eax + 0x20], edx
mov eax, dword [esi + 0xc]
mov dword [ebp + 8], ecx
mov dword [eax + 0x24], edx
mov eax, dword [esi + 0xc]
or dword [eax + 0x28], 0xffffffff
mov eax, dword [esi + 0xc]
mov dword [eax + 0x2c], edi
mov eax, dword [esi + 0xc]
pop edi
mov dword [eax + 0x30], edx
mov eax, dword [esi + 0xc]
mov word [eax + 0x34], cx
mov eax, dword [esi + 0xc]
mov word [eax + 0x36], di
mov eax, dword [esi + 8]
mov edi, ecx
mov dword [eax], edx
mov eax, dword [esi + 8]
mov dword [eax + 4], edx
cmp dword [esi + 0x24], edx
je 0x441509
mov eax, dword [esi + 0xc]
push 5
mov dword [eax + 0x38], str.QueryInterface
mov eax, dword [esi + 0xc]
pop edi
mov dword [eax + 0x40], 1
mov eax, dword [esi + 0xc]
push 3
mov dword [eax + 0x44], edx
mov eax, dword [esi + 0xc]
mov dword [ebp + 8], edi
mov dword [eax + 0x48], 4
mov eax, dword [esi + 0xc]
mov dword [eax + 0x4c], ecx
mov eax, dword [esi + 0xc]
xor ecx, ecx
inc ecx
mov word [eax + 0x50], cx
mov eax, dword [esi + 0xc]
pop ecx
push 0x10
mov word [eax + 0x52], cx
call fcn.0041f6ba
pop ecx
mov ecx, dword [esi + 8]
push 0x48
mov dword [ecx + 8], eax
mov eax, dword [esi + 8]
pop ecx
mov eax, dword [eax + 8]
xor edx, edx
mov word [eax + 4], cx
mov eax, dword [esi + 8]
mov ecx, 0x4013
mov eax, dword [eax + 8]
push 0x13
mov word [eax + 0xc], cx
mov eax, dword [esi + 8]
mov eax, dword [eax + 8]
mov dword [eax], edx
mov eax, dword [esi + 8]
mov eax, dword [eax + 8]
mov dword [eax + 8], edx
mov eax, dword [esi + 8]
mov ecx, dword [esi + 0xc]
mov eax, dword [eax + 8]
mov dword [ecx + 0x3c], eax
mov eax, dword [esi + 0xc]
xor ecx, ecx
mov dword [eax + 0x54], str.AddRef
mov eax, dword [esi + 0xc]
inc ecx
mov dword [eax + 0x58], edx
mov eax, dword [esi + 0xc]
mov dword [eax + 0x5c], 2
mov eax, dword [esi + 0xc]
mov dword [eax + 0x60], ecx
mov eax, dword [esi + 0xc]
mov dword [eax + 0x64], 4
mov eax, dword [esi + 0xc]
mov dword [eax + 0x68], edx
mov eax, dword [esi + 0xc]
mov word [eax + 0x6c], cx
mov eax, dword [esi + 0xc]
pop ecx
mov word [eax + 0x6e], cx
mov eax, dword [esi + 8]
push 3
mov dword [eax + 0xc], edx
mov eax, dword [esi + 0xc]
pop ecx
mov dword [eax + 0x70], str.Release
mov eax, dword [esi + 0xc]
mov dword [eax + 0x74], edx
mov eax, dword [esi + 0xc]
mov dword [eax + 0x78], ecx
mov eax, dword [esi + 0xc]
mov dword [eax + 0x7c], 2
mov eax, dword [esi + 0xc]
mov dword [eax + 0x80], 4
mov eax, dword [esi + 0xc]
mov dword [eax + 0x84], edx
mov eax, dword [esi + 0xc]
xor ecx, ecx
inc ecx
mov word [eax + 0x88], cx
mov eax, dword [esi + 0xc]
push 0x13
pop ecx
mov word [eax + 0x8a], cx
mov eax, dword [esi + 8]
mov dword [eax + 0x10], edx
mov eax, dword [esi + 4]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x1c], eax
xor eax, eax
mov ecx, eax
push 8
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x2c], ecx
pop eax
test ebx, ebx
jle 0x441752
mov eax, dword [ebp + 8]
imul edi, edi, 0x1c
shl eax, 2
mov dword [ebp - 0xc], eax
mov eax, dword [ebp + 8]
add eax, 0xfffffffe
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x14], edi
movzx ebx, word [eax + ecx*2]
cmp bx, word [ebp - 0x30]
mov dword [ebp + 8], ebx
mov ebx, dword [ebp - 4]
jne 0x441566
xor edx, edx
mov word [eax + ecx*2], dx
lea edx, [ecx + 1]
lea edx, [eax + edx*2]
mov dword [ebp - 0x28], edx
jmp 0x441743
push 0xa
pop esi
cmp word [ebp + 8], si
mov esi, dword [ebp - 0x18]
je 0x44157d
cmp word [ebp + 8], 0
jne 0x441743
xor ebx, ebx
mov word [eax + ecx*2], bx
mov eax, dword [esi + 0xc]
mov ecx, dword [ebp - 0x1c]
mov dword [edi + eax], ecx
mov ecx, dword [ebp - 0x20]
lea eax, [ecx + 1]
mov dword [ebp - 0x20], eax
mov eax, dword [esi + 0xc]
mov ebx, dword [ebp - 0x20]
mov dword [edi + eax + 8], ebx
mov eax, dword [esi + 0xc]
mov ebx, dword [ebp - 4]
mov dword [edi + eax + 0xc], ecx
mov eax, dword [esi + 0xc]
xor ecx, ecx
inc ecx
mov word [edi + eax + 0x18], cx
xor eax, eax
mov dword [ebp + 8], eax
mov ecx, eax
cmp word [edx], ax
je 0x4415f3
push 0x3b
mov eax, edx
mov ebx, ecx
xor edi, edi
pop esi
cmp word [eax], si
jne 0x4415dc
cmp word [eax + 2], di
je 0x4415d7
inc ebx
jmp 0x4415dc
xor edi, edi
mov word [eax], di
inc ecx
lea eax, [edx + ecx*2]
cmp word [eax], di
jne 0x4415c9
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x14]
mov dword [ebp + 8], ebx
mov ebx, dword [ebp - 4]
xor eax, eax
mov dword [ebp - 0x10], eax
xor eax, eax
test ecx, ecx
jle 0x441621
push 0x3b
pop ebx
cmp word [edx + eax*2], bx
mov ebx, dword [ebp - 4]
je 0x44160f
inc eax
cmp eax, ecx
jl 0x4415fc
jmp 0x441621
xor ecx, ecx
mov word [edx + eax*2], cx
inc eax
lea eax, [edx + eax*2]
cmp word [eax], cx
je 0x441621
mov dword [ebp - 0x10], eax
mov ecx, dword [esi + 0xc]
lea eax, [ecx + 0x1a]
add eax, edi
add ecx, 0x10
push eax
add ecx, edi
push ecx
push edx
call fcn.00440862
mov ecx, dword [esi + 0xc]
mov eax, dword [ebp + 8]
mov dword [edi + ecx + 0x14], eax
xor ecx, ecx
test eax, eax
je 0x44170f
push 8
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0041f6ba
mov edx, dword [ebp - 0xc]
pop ecx
mov ecx, dword [esi + 8]
mov dword [edx + ecx], eax
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x441700
xor ecx, ecx
xor ebx, ebx
cmp word [eax], bx
mov ebx, dword [ebp - 4]
mov dword [ebp + 8], ecx
mov edx, eax
mov dword [ebp - 0x1c], ecx
je 0x4416d9
mov ebx, eax
push 0x3b
pop edi
cmp word [ebx], di
push 0
pop edi
jne 0x4416ca
xor eax, eax
push edx
mov word [ebx], ax
call fcn.00441c24
mov ecx, dword [esi + 8]
mov edx, dword [ebp - 0xc]
mov edi, dword [ebp + 8]
mov ecx, dword [ecx + edx]
mov word [ecx + edi*8 + 4], ax
mov eax, dword [esi + 8]
mov ecx, edi
mov eax, dword [eax + edx]
xor edx, edx
mov dword [eax + ecx*8], edx
mov eax, dword [ebp - 0x10]
inc ecx
mov dword [ebp + 8], ecx
mov ecx, dword [ebp - 0x1c]
lea edx, [ebx + 2]
xor edi, edi
inc ecx
mov dword [ebp - 0x1c], ecx
lea ebx, [eax + ecx*2]
cmp word [ebx], di
jne 0x441687
mov ebx, dword [ebp - 4]
push edx
call fcn.00441c24
mov ecx, dword [esi + 8]
mov edx, dword [ebp - 0xc]
mov edi, dword [ebp + 8]
mov ecx, dword [ecx + edx]
mov word [ecx + edi*8 + 4], ax
mov eax, dword [esi + 8]
mov ecx, edi
mov eax, dword [eax + edx]
xor edi, edi
mov dword [eax + ecx*8], edi
mov edi, dword [ebp - 0x14]
mov eax, dword [esi + 8]
mov ecx, dword [esi + 0xc]
mov eax, dword [edx + eax]
mov dword [edi + ecx + 4], eax
jmp 0x44171f
mov eax, dword [esi + 8]
mov edx, dword [ebp - 0xc]
mov dword [edx + eax], ecx
mov eax, dword [esi + 0xc]
mov dword [edi + eax + 4], ecx
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x2c]
add edx, 4
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x24]
lea edx, [ecx + 1]
add edi, 0x1c
lea edx, [eax + edx*2]
mov dword [ebp - 0x1c], edx
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x14], edi
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, ebx
jl 0x441542
push 8
pop eax
push eax
call fcn.0041f6ba
pop ecx
mov ecx, dword [ebp - 8]
mov dword [esi + 0x10], eax
mov dword [eax + 4], ecx
mov ecx, dword [esi + 0x10]
mov eax, dword [esi + 0xc]
pop edi
pop esi
mov dword [ecx], eax
pop ebx
leave
ret 4