Function at 0x100418fe
Capabilities:
Extract http body
Resolve function by parsing pe exports

Disassembly:
push ebp
sub esp, 0x50
mov eax, 0x100a319f
call fcn.1007c8b4
sub esp, 0x130
push ebx
xor ebx, ebx
mov eax, ebx
mov dword [ebp + 0xc], eax
mov dword [ebp + 4], eax
mov eax, dword [ebp + 0x70]
push esi
push edi
mov dword [ebp - 0x10], esp
mov esi, dword [eax]
mov esi, dword [esi + 8]
mov dword [ebp], esi
mov dword [ebp - 0x58], esi
test esi, esi
je 0x1004193a
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov dword [ebp - 4], ebx
test esi, esi
je 0x10043467
push esi
lea ecx, [ebp - 0x14]
call fcn.1003bd9d
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x1004345a
mov dword [ebp + 0x28], ebx
mov ecx, dword [eax]
push ebx
push eax
mov byte [ebp - 4], 3
call dword [ecx + 0x34]
mov eax, dword [ebp - 0x14]
lea edx, [ebp + 0x28]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov eax, dword [ebp + 0x28]
test eax, eax
je 0x1004343c
mov dword [ebp + 8], ebx
mov ecx, dword [eax]
lea edx, [ebp + 8]
push edx
push eax
mov byte [ebp - 4], 4
call dword [ecx + 0x38]
test eax, eax
js 0x10043430
push dword [ebp + 8]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x10043430
push 0xf
pop eax
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x74], eax
mov byte [ebp - 0x88], bl
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], eax
mov byte [ebp - 0x34], bl
mov dword [ebp - 0x13c], ebx
mov dword [ebp - 0x12c], ebx
mov dword [ebp - 0x128], eax
mov byte [ebp - 0x13c], bl
mov edi, dword [ebp + 8]
lea ecx, [ebp - 0x108]
mov byte [ebp - 4], 7
mov byte [ebp + 0x73], bl
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x10c], ecx
test edi, edi
jne 0x10041a0f
mov edx, ebx
mov dword [ebp - 0x10c], edx
jmp 0x10041adf
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, bx
jne 0x10041a14
sub ecx, edx
sar ecx, 1
push 0x80
lea eax, [ecx + 1]
mov dword [ebp + 0x44], eax
lea ecx, [ebp - 0x108]
shl eax, 2
push ecx
push eax
mov dword [ebp + 0x4c], eax
lea eax, [ebp - 0x10c]
push eax
call fcn.1003850c
add esp, 0x10
push ebx
push ebx
push dword [ebp + 0x4c]
push dword [ebp - 0x10c]
push dword [ebp + 0x44]
push edi
push ebx
push 3
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
test eax, eax
sete cl
mov dword [ebp + 0x4c], ecx
test eax, eax
jne 0x10041ace
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x10041acb
push ebx
push ebx
push ebx
push ebx
push dword [ebp + 0x44]
push edi
push ebx
push 3
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push 0x80
lea ecx, [ebp - 0x108]
mov dword [ebp + 0x4c], eax
push ecx
push eax
lea eax, [ebp - 0x10c]
push eax
call fcn.1003850c
add esp, 0x10
push ebx
push ebx
push dword [ebp + 0x4c]
push dword [ebp - 0x10c]
push dword [ebp + 0x44]
push edi
push ebx
push 3
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
neg eax
sbb ecx, ecx
inc ecx
jmp 0x10041ace
mov ecx, dword [ebp + 0x4c]
test ecx, ecx
jne 0x10043490
mov edx, dword [ebp - 0x10c]
push 0xf
pop eax
mov ecx, edx
mov dword [ebp + 0x10], ebx
mov byte [ebp - 4], 8
mov dword [ebp + 0x20], ebx
mov dword [ebp + 0x24], eax
mov byte [ebp + 0x10], bl
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10041af4
sub ecx, edi
push ecx
push edx
lea ecx, [ebp + 0x10]
call fcn.10002936
lea eax, [ebp - 0x108]
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0x10c], eax
je 0x10041b25
push dword [ebp - 0x10c]
call fcn.1008582f
pop ecx
push ebx
mov dword [ebp - 0x124], ebx
lea ecx, [ebp - 0x124]
push 0x100ba8ca
mov dword [ebp - 0x114], ebx
mov dword [ebp - 0x110], 0xf
mov byte [ebp - 0x124], bl
call fcn.10002936
mov edi, dword [ebp + 0x24]
lea eax, [ebp + 0x10]
mov ecx, dword [ebp + 0x10]
cmp edi, 0x10
mov edx, dword [ebp + 0x20]
cmovae eax, ecx
mov byte [ebp - 4], 0xb
mov dword [ebp + 0x4c], eax
lea eax, [ebp + 0x10]
cmovae eax, ecx
add eax, edx
cmp edi, 0x10
mov dword [ebp + 0x50], eax
lea eax, [ebp + 0x10]
cmovae eax, ecx
mov dword [ebp + 0x44], eax
cmp eax, dword [ebp + 0x50]
je 0x10041bb0
mov edi, dword [ebp + 0x4c]
sub edi, eax
movsx eax, byte [eax]
push eax
call fcn.10082001
pop ecx
mov ecx, dword [ebp + 0x44]
mov byte [ecx + edi], al
mov eax, ecx
inc eax
mov dword [ebp + 0x44], eax
cmp eax, dword [ebp + 0x50]
jne 0x10041b8c
mov edi, dword [ebp + 0x24]
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x20]
cmp edi, 0x10
lea eax, [ebp + 0x10]
cmovae eax, ecx
cmp edx, 1
jne 0x10041bd6
movzx eax, byte [eax]
cmp al, 0x62
jne 0x10041bc9
mov eax, ebx
jmp 0x10041bce
sbb eax, eax
or eax, 1
test eax, eax
je 0x10041d92
cmp edi, 0x10
lea eax, [ebp + 0x10]
cmovae eax, ecx
cmp edx, 2
jne 0x10041c01
push edx
push 0x100a8140
push eax
call fcn.1007e3f0
add esp, 0xc
test eax, eax
je 0x10041d92
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x20]
cmp edi, 0x10
lea eax, [ebp + 0x10]
cmovae eax, ecx
cmp edx, 1
jne 0x10041c27
movzx eax, byte [eax]
cmp al, 0x69
jne 0x10041c1a
mov eax, ebx
jmp 0x10041c1f
sbb eax, eax
or eax, 1
test eax, eax
je 0x10041d92
cmp edi, 0x10
lea eax, [ebp + 0x10]
cmovae eax, ecx
cmp edx, 1
jne 0x10041c4d
movzx eax, byte [eax]
cmp al, 0x75
jne 0x10041c40
mov eax, ebx
jmp 0x10041c45
sbb eax, eax
or eax, 1
test eax, eax
je 0x10041d92
cmp edi, 0x10
lea eax, [ebp + 0x10]
cmovae eax, ecx
cmp edx, 4
jne 0x10041c78
push edx
push str.font
push eax
call fcn.1007e3f0
add esp, 0xc
test eax, eax
je 0x10041d92
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x20]
cmp edi, 0x10
lea eax, [ebp + 0x10]
cmovae eax, ecx
cmp edx, 4
jne 0x10041ca3
push edx
push str.nobr
push eax
call fcn.1007e3f0
add esp, 0xc
test eax, eax
je 0x10041d92
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x20]
cmp edi, 0x10
lea eax, [ebp + 0x10]
cmovae eax, ecx
cmp edx, 6
jne 0x10041cce
push edx
push str.strong
push eax
call fcn.1007e3f0
add esp, 0xc
test eax, eax
je 0x10041d92
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x20]
cmp edi, 0x10
lea eax, [ebp + 0x10]
cmovae eax, ecx
cmp edx, 2
jne 0x10041cf9
push edx
push 0x100a815c
push eax
call fcn.1007e3f0
add esp, 0xc
test eax, eax
je 0x10041d92
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x20]
cmp edi, 0x10
lea eax, [ebp + 0x10]
cmovae eax, ecx
cmp edx, 3
jne 0x10041d20
push edx
push 0x100a8160
push eax
call fcn.1007e3f0
add esp, 0xc
test eax, eax
je 0x10041d92
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x20]
cmp edi, 0x10
lea eax, [ebp + 0x10]
cmovae eax, ecx
cmp edx, 4
jne 0x10041d47
push edx
push str.span
push eax
call fcn.1007e3f0
add esp, 0xc
test eax, eax
je 0x10041d92
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x20]
cmp edi, 0x10
lea eax, [ebp + 0x10]
cmovae eax, ecx
cmp edx, 1
jne 0x10041d69
movzx eax, byte [eax]
cmp al, 0x70
jne 0x10041d60
mov eax, ebx
jmp 0x10041d65
sbb eax, eax
or eax, 1
test eax, eax
je 0x10041d92
cmp edi, 0x10
lea eax, [ebp + 0x10]
cmovae eax, ecx
cmp edx, 2
jne 0x1004241e
push edx
push 0x100a816c
push eax
call fcn.1007e3f0
add esp, 0xc
test eax, eax
jne 0x1004241e
mov esi, dword [ebp + 0x28]
mov dword [ebp + 0x4c], esi
test esi, esi
je 0x10041da2
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 4], 0xd
push str.onclick
lea ecx, [ebp + 0x44]
call fcn.1003bf03
xor eax, eax
lea edi, [ebp + 0x34]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp + 0x34]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [esi]
lea ecx, [ebp + 0x34]
push ecx
push 2
push dword [ebp + 0x44]
mov byte [ebp - 4], 0xf
push esi
call dword [eax + 0x20]
test eax, eax
js 0x10042020
cmp dword [ebp + 0x3c], 0
je 0x10042020
push 8
push ebx
lea eax, [ebp + 0x34]
push eax
push eax
call dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
test eax, eax
js 0x10042020
push 3
push dword [ebp + 0x3c]
lea eax, [ebp - 0x108]
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x10c], eax
call fcn.10040640
mov ecx, dword [ebp - 0x10c]
mov byte [ebp - 4], 0x10
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10041e2d
sub ecx, edx
push ecx
push dword [ebp - 0x10c]
lea ecx, [ebp - 0x34]
call fcn.10002936
lea eax, [ebp - 0x108]
mov byte [ebp - 4], 0xf
cmp dword [ebp - 0x10c], eax
je 0x10041e63
push dword [ebp - 0x10c]
call fcn.1008582f
pop ecx
mov edi, dword [ebp + 8]
lea eax, [ebp - 0x108]
mov dword [ebp - 0x10c], eax
test edi, edi
jne 0x10041e83
mov edx, ebx
mov dword [ebp - 0x10c], edx
jmp 0x10041f50
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, bx
jne 0x10041e88
sub ecx, edx
sar ecx, 1
push 0x80
lea eax, [ecx + 1]
mov dword [ebp + 0x70], eax
lea ecx, [ebp - 0x108]
shl eax, 2
push ecx
push eax
mov dword [ebp + 0x50], eax
lea eax, [ebp - 0x10c]
push eax
call fcn.1003850c
add esp, 0x10
push ebx
push ebx
push dword [ebp + 0x50]
push dword [ebp - 0x10c]
push dword [ebp + 0x70]
push edi
push ebx
push 3
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
test eax, eax
sete cl
mov dword [ebp + 0x50], ecx
test eax, eax
jne 0x10041f42
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x10041f3f
push ebx
push ebx
push ebx
push ebx
push dword [ebp + 0x70]
push edi
push ebx
push 3
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push 0x80
lea ecx, [ebp - 0x108]
mov dword [ebp + 0x50], eax
push ecx
push eax
lea eax, [ebp - 0x10c]
push eax
call fcn.1003850c
add esp, 0x10
push ebx
push ebx
push dword [ebp + 0x50]
push dword [ebp - 0x10c]
push dword [ebp + 0x70]
push edi
push ebx
push 3
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
neg eax
sbb ecx, ecx
inc ecx
jmp 0x10041f42
mov ecx, dword [ebp + 0x50]
test ecx, ecx
jne 0x10043490
mov edx, dword [ebp - 0x10c]
mov ecx, edx
mov byte [ebp - 4], 0x11
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10041f59
sub ecx, edi
push ecx
push edx
lea ecx, [ebp + 0x10]
call fcn.10002936
lea eax, [ebp - 0x108]
cmp dword [ebp - 0x10c], eax
je 0x10041f86
push dword [ebp - 0x10c]
call fcn.1008582f
pop ecx
mov byte [ebp + 0x73], 1
lea eax, [ebp + 0x34]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [ebp + 0x44]
mov byte [ebp - 4], 0xd
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov edi, dword [ebp + 0x24]
mov eax, dword [ebp + 0x28]
cmp eax, esi
je 0x10041fcb
test esi, esi
je 0x10041fbb
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [ebp + 0x28]
mov edi, dword [ebp + 0x24]
mov dword [ebp + 0x28], esi
test eax, eax
je 0x10041fcb
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov edi, dword [ebp + 0x24]
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 0xc
test eax, eax
je 0x10041fdf
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov edi, dword [ebp + 0x24]
mov byte [ebp - 4], 0xb
test esi, esi
je 0x10041ff0
mov eax, dword [esi]
push esi
call dword [eax + 8]
mov edi, dword [ebp + 0x24]
cmp byte [ebp + 0x73], 0
je 0x1004241b
lea eax, [ebp + 0x10]
push eax
lea ecx, [ebp - 0x88]
call fcn.10005000
push 9
push str.fake_link
lea ecx, [ebp - 0x124]
call fcn.10002936
jmp 0x10042f4d
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x10042030
mov dword [ebp - 0x1c], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esi]
lea ecx, [ebp - 0x1c]
push ecx
push esi
call dword [eax + 0x3c]
mov edi, dword [ebp - 0x1c]
test edi, edi
je 0x10041f8a
cmp esi, edi
je 0x1004205c
mov eax, dword [edi]
push edi
call dword [eax + 4]
mov eax, esi
mov esi, edi
push eax
mov dword [ebp + 0x4c], esi
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [esi]
lea ecx, [ebp + 8]
push ecx
push esi
call dword [eax + 0x38]
test eax, eax
js 0x10041f8a
push dword [ebp + 8]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x10041f8a
mov edi, dword [ebp + 8]
lea eax, [ebp - 0x108]
mov dword [ebp - 0x10c], eax
test edi, edi
jne 0x1004209f
mov edx, ebx
mov dword [ebp - 0x10c], edx
jmp 0x1004216c
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, bx
jne 0x100420a4
sub ecx, edx
sar ecx, 1
push 0x80
lea eax, [ecx + 1]
mov dword [ebp + 0x50], eax
lea ecx, [ebp - 0x108]
shl eax, 2
push ecx
push eax
mov dword [ebp + 0x48], eax
lea eax, [ebp - 0x10c]
push eax
call fcn.1003850c
add esp, 0x10
push ebx
push ebx
push dword [ebp + 0x48]
push dword [ebp - 0x10c]
push dword [ebp + 0x50]
push edi
push ebx
push 3
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
test eax, eax
sete cl
mov dword [ebp + 0x48], ecx
test eax, eax
jne 0x1004215e
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x1004215b
push ebx
push ebx
push ebx
push ebx
push dword [ebp + 0x50]
push edi
push ebx
push 3
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push 0x80
lea ecx, [ebp - 0x108]
mov dword [ebp + 0x48], eax
push ecx
push eax
lea eax, [ebp - 0x10c]
push eax
call fcn.1003850c
add esp, 0x10
push ebx
push ebx
push dword [ebp + 0x48]
push dword [ebp - 0x10c]
push dword [ebp + 0x50]
push edi
push ebx
push 3
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
neg eax
sbb ecx, ecx
inc ecx
jmp 0x1004215e
mov ecx, dword [ebp + 0x48]
test ecx, ecx
jne 0x10043490
mov edx, dword [ebp - 0x10c]
mov ecx, edx
mov byte [ebp - 4], 0x12
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10042175
sub ecx, edi
push ecx
push edx
lea ecx, [ebp + 0x10]
call fcn.10002936
lea eax, [ebp - 0x108]
mov byte [ebp - 4], 0xf
cmp dword [ebp - 0x10c], eax
je 0x100421a6
push dword [ebp - 0x10c]
call fcn.1008582f
pop ecx
cmp dword [ebp + 0x24], 0x10
lea ecx, [ebp + 0x10]
mov eax, dword [ebp + 0x20]
lea edx, [ebp + 0x10]
cmovae ecx, dword [ebp + 0x10]
lea edi, [ebp + 0x10]
cmovae edx, dword [ebp + 0x10]
add eax, ecx
cmp dword [ebp + 0x24], 0x10
mov dword [ebp + 0x50], eax
cmovae edi, dword [ebp + 0x10]
cmp edi, eax
je 0x100421ea
sub edx, edi
mov dword [ebp + 0x48], edx
movsx eax, byte [edi]
push eax
call fcn.10082001
pop ecx
mov ecx, dword [ebp + 0x48]
mov byte [edi + ecx], al
inc edi
cmp edi, dword [ebp + 0x50]
jne 0x100421d4
mov edi, dword [ebp - 0x1c]
cmp esi, edi
je 0x10042208
test edi, edi
je 0x100421fb
mov eax, dword [edi]
push edi
call dword [eax + 4]
mov eax, esi
mov esi, edi
push eax
mov dword [ebp + 0x4c], esi
mov ecx, dword [eax]
call dword [ecx + 8]
lea eax, [ebp + 0x34]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [ebp + 0x44]
mov byte [ebp - 4], 0xd
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov edi, dword [ebp + 0x24]
lea eax, [ebp + 0x10]
mov ecx, dword [ebp + 0x10]
cmp edi, 0x10
mov edx, dword [ebp + 0x20]
cmovae eax, ecx
cmp edx, 1
jne 0x1004224e
movzx eax, byte [eax]
cmp al, 0x62
jne 0x10042241
mov eax, ebx
jmp 0x10042246
sbb eax, eax
or eax, 1
test eax, eax
je 0x10041da9
cmp edi, 0x10
lea eax, [ebp + 0x10]
cmovae eax, ecx
cmp edx, 2
jne 0x10042279
push edx
push 0x100a8140
push eax
call fcn.1007e3f0
add esp, 0xc
test eax, eax
je 0x10041da9
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x20]
cmp edi, 0x10
lea eax, [ebp + 0x10]
cmovae eax, ecx
cmp edx, 1
jne 0x1004229f
movzx eax, byte [eax]
cmp al, 0x69
jne 0x10042292
mov eax, ebx
jmp 0x10042297
sbb eax, eax
or eax, 1
test eax, eax
je 0x10041da9
cmp edi, 0x10
lea eax, [ebp + 0x10]
cmovae eax, ecx
cmp edx, 1
jne 0x100422c5
movzx eax, byte [eax]
cmp al, 0x75
jne 0x100422b8
mov eax, ebx
jmp 0x100422bd
sbb eax, eax
or eax, 1
test eax, eax
je 0x10041da9
cmp edi, 0x10
lea eax, [ebp + 0x10]
cmovae eax, ecx
cmp edx, 4
jne 0x100422f0
push edx
push str.font
push eax
call fcn.1007e3f0
add esp, 0xc
test eax, eax
je 0x10041da9
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x20]
cmp edi, 0x10
lea eax, [ebp + 0x10]
cmovae eax, ecx
cmp edx, 4
jne 0x1004231b
push edx
push str.nobr
push eax
call fcn.1007e3f0
add esp, 0xc
test eax, eax
je 0x10041da9
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x20]
cmp edi, 0x10
lea eax, [ebp + 0x10]
cmovae eax, ecx
cmp edx, 6
jne 0x10042346
push edx
push str.strong
push eax
call fcn.1007e3f0
add esp, 0xc
test eax, eax
je 0x10041da9
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x20]
cmp edi, 0x10
lea eax, [ebp + 0x10]
cmovae eax, ecx
cmp edx, 2
jne 0x10042371
push edx
push 0x100a815c
push eax
call fcn.1007e3f0
add esp, 0xc
test eax, eax
je 0x10041da9
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x20]
cmp edi, 0x10
lea eax, [ebp + 0x10]
cmovae eax, ecx
cmp edx, 3
jne 0x1004239c
push edx
push 0x100a8160
push eax
call fcn.1007e3f0
add esp, 0xc
test eax, eax
je 0x10041da9
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x20]
cmp edi, 0x10
lea eax, [ebp + 0x10]
cmovae eax, ecx
cmp edx, 4
jne 0x100423c7
push edx
push str.span
push eax
call fcn.1007e3f0
add esp, 0xc
test eax, eax
je 0x10041da9
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x20]
cmp edi, 0x10
lea eax, [ebp + 0x10]
cmovae eax, ecx
cmp edx, 1
jne 0x100423ed
movzx eax, byte [eax]
cmp al, 0x70
jne 0x100423e0
mov eax, ebx
jmp 0x100423e5
sbb eax, eax
or eax, 1
test eax, eax
je 0x10041da9
cmp edi, 0x10
lea eax, [ebp + 0x10]
cmovae eax, ecx
cmp edx, 2
jne 0x10041fa4
push edx
push 0x100a816c
push eax
call fcn.1007e3f0
add esp, 0xc
test eax, eax
je 0x10041da9
jmp 0x10041fa4
mov esi, dword [ebp]
mov eax, dword [ebp + 0x10]
lea ecx, [ebp + 0x10]
cmp edi, 0x10
cmovae ecx, eax
cmp dword [ebp + 0x20], 6
jne 0x10042ce0
push 6
push str.object
push ecx
call fcn.1007e3f0
add esp, 0xc
test eax, eax
jne 0x10042cdd
mov dword [ebp - 0x1c], ebx
mov edi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp + 0x34]
push eax
call edi
push str.height
lea ecx, [ebp + 0x44]
mov byte [ebp - 4], 0x16
call fcn.1003c024
mov eax, dword [ebp + 0x44]
mov byte [ebp - 4], 0x17
test eax, eax
je 0x1004247b
mov edx, dword [eax]
jmp 0x1004247d
mov edx, ebx
mov eax, dword [ebp + 0x28]
lea esi, [ebp + 0x34]
push esi
push ebx
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
test eax, eax
js 0x100424d0
cmp word [ebp + 0x34], 0
je 0x100424d0
cmp dword [ebp + 0x3c], 0
je 0x100424d0
mov eax, esi
lea ecx, [ebp + 0x4c]
push eax
call fcn.1003bfbb
lea ecx, [ebp + 0x4c]
mov byte [ebp - 4], 0x18
call fcn.1003c408
push eax
call fcn.100853e8
pop ecx
mov ecx, dword [ebp + 0x4c]
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 0x17
test ecx, ecx
je 0x100424d3
call fcn.100437da
jmp 0x100424d3
mov dword [ebp - 0x50], ebx
push str.width
lea ecx, [ebp + 0x44]
call fcn.1003c322
mov eax, dword [ebp + 0x44]
test eax, eax
je 0x100424eb
mov edx, dword [eax]
jmp 0x100424ed
mov edx, ebx
mov eax, dword [ebp + 0x28]
lea esi, [ebp + 0x34]
push esi
push ebx
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
test eax, eax
js 0x1004253c
cmp word [ebp + 0x34], 0
je 0x1004253c
cmp dword [ebp + 0x3c], 0
je 0x1004253c
mov eax, esi
lea ecx, [ebp + 0x4c]
push eax
call fcn.1003bfbb
lea ecx, [ebp + 0x4c]
mov byte [ebp - 4], 0x19
call fcn.1003c408
push eax
call fcn.100853e8
pop ecx
mov ecx, dword [ebp + 0x4c]
mov dword [ebp - 0x54], eax
test ecx, ecx
je 0x1004253f
call fcn.100437da
jmp 0x1004253f
mov dword [ebp - 0x54], ebx
mov ecx, dword [ebp + 0x44]
test ecx, ecx
je 0x1004254e
call fcn.100437da
mov dword [ebp + 0x44], ebx
lea eax, [ebp + 0x34]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [ebp]
jmp 0x10042574
mov eax, dword [ebp + 0x28]
lea edx, [ebp + 8]
push edx
push eax
mov dword [ebp - 4], 0x14
mov ecx, dword [eax]
call dword [ecx + 0xe8]
test eax, eax
js 0x10042c04
push dword [ebp + 8]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x10042c04
mov edi, dword [ebp + 8]
lea eax, [ebp - 0x108]
mov dword [ebp - 0x10c], eax
test edi, edi
jne 0x100425c4
mov edx, ebx
mov dword [ebp - 0x10c], edx
jmp 0x10042691
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, bx
jne 0x100425c9
sub ecx, edx
sar ecx, 1
push 0x80
lea eax, [ecx + 1]
mov dword [ebp + 0x50], eax
lea ecx, [ebp - 0x108]
shl eax, 2
push ecx
push eax
mov dword [ebp + 0x48], eax
lea eax, [ebp - 0x10c]
push eax
call fcn.1003850c
add esp, 0x10
push ebx
push ebx
push dword [ebp + 0x48]
push dword [ebp - 0x10c]
push dword [ebp + 0x50]
push edi
push ebx
push 3
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ecx, ecx
test eax, eax
sete cl
mov dword [ebp + 0x48], ecx
test eax, eax
jne 0x10042683
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x10042680
push ebx
push ebx
push ebx
push ebx
push dword [ebp + 0x50]
push edi
push ebx
push 3
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push 0x80
lea ecx, [ebp - 0x108]
mov dword [ebp + 0x48], eax
push ecx
push eax
lea eax, [ebp - 0x10c]
push eax
call fcn.1003850c
add esp, 0x10
push ebx
push ebx
push dword [ebp + 0x48]
push dword [ebp - 0x10c]
push dword [ebp + 0x50]
push edi
push ebx
push 3
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
neg eax
sbb ecx, ecx
inc ecx
jmp 0x10042683
mov ecx, dword [ebp + 0x48]
test ecx, ecx
jne 0x10043490
mov edx, dword [ebp - 0x10c]
mov ecx, edx
mov dword [ebp + 0x2c], ebx
mov byte [ebp - 4], 0x1b
mov dword [ebp + 0x3c], ebx
mov dword [ebp + 0x40], 0xf
mov byte [ebp + 0x2c], bl
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100426aa
sub ecx, edi
push ecx
push edx
lea ecx, [ebp + 0x2c]
call fcn.10002936
lea eax, [ebp - 0x108]
mov byte [ebp - 4], 0x1d
cmp dword [ebp - 0x10c], eax
je 0x100426db
push dword [ebp - 0x10c]
call fcn.1008582f
pop ecx
cmp dword [ebp + 0x40], 0x10
lea eax, [ebp + 0x2c]
mov edi, dword [ebp + 0x2c]
lea edx, [ebp + 0x2c]
mov ecx, dword [ebp + 0x40]
cmovae eax, edi
mov dword [ebp + 0x48], eax
cmp ecx, 0x10
lea eax, [ebp + 0x2c]
cmovae eax, edi
add eax, dword [ebp + 0x3c]
cmp ecx, 0x10
mov dword [ebp + 0x50], eax
cmovae edx, edi
mov dword [ebp + 0x4c], edx
cmp edx, eax
je 0x10042731
mov edi, dword [ebp + 0x48]
sub edi, edx
movsx eax, byte [edx]
push eax
call fcn.10082001
mov edx, dword [ebp + 0x4c]
pop ecx
mov byte [edi + edx], al
inc edx
mov dword [ebp + 0x4c], edx
cmp edx, dword [ebp + 0x50]
jne 0x10042712
mov edi, dword [ebp + 0x2c]
mov ecx, dword [ebp + 0x40]
mov eax, dword [ebp + 0x3c]
lea edx, [ebp + 0x2c]
cmp ecx, 0x10
cmovae edx, edi
mov dword [ebp + 0x4c], edx
cmp eax, 7
jb 0x1004278a
add eax, 0xfffffffa
add eax, edx
mov dword [ebp + 0x48], eax
sub eax, edx
push eax
push 0x3c
push edx
jmp 0x10042773
push 7
push str._embed
push edi
call fcn.1007e3f0
add esp, 0xc
test eax, eax
je 0x100427b2
mov eax, dword [ebp + 0x48]
inc edi
sub eax, edi
push eax
push 0x3c
push edi
call fcn.1007fb70
mov edi, eax
add esp, 0xc
test edi, edi
jne 0x10042755
mov edi, dword [ebp + 0x2c]
mov ecx, dword [ebp + 0x40]
mov eax, dword [ebp + 0x3c]
cmp ecx, 0x10
lea edx, [ebp + 0x2c]
cmovae edx, edi
mov dword [ebp + 0x4c], edx
cmp eax, 0x10
jb 0x10042966
add eax, 0xfffffff1
add eax, edx
mov dword [ebp + 0x48], eax
sub eax, edx
push eax
push 0x3c
push edx
jmp 0x10042954
sub edi, dword [ebp + 0x4c]
cmp edi, 0xffffffff
je 0x10042781
mov eax, dword [ebp + 0x3c]
add eax, 0xfffffffc
cmp edi, eax
jge 0x10042bc4
push 4
push edi
lea eax, [ebp + 0x2c]
mov dword [ebp - 0x4c], ebx
push eax
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], 0xf
call fcn.1000600f
mov eax, dword [ebp + 4]
lea ecx, [ebp - 0x4c]
or eax, 4
push str.src
mov dword [ebp + 4], eax
mov dword [ebp + 0xc], eax
call fcn.100031fd
mov ecx, dword [ebp - 0x38]
mov byte [ebp - 0x15], al
cmp ecx, 0x10
jb 0x1004283b
mov edx, dword [ebp - 0x4c]
inc ecx
mov dword [ebp + 0x4c], ecx
mov dword [ebp + 0x50], edx
cmp ecx, 0x1000
jb 0x1004282f
lea eax, [ebp + 0x4c]
push eax
lea eax, [ebp + 0x50]
push eax
call fcn.10001c26
mov edx, dword [ebp + 0x50]
pop ecx
pop ecx
mov ecx, dword [ebp + 0x4c]
push ecx
push edx
call fcn.1007c382
mov al, byte [ebp - 0x15]
pop ecx
pop ecx
test al, al
je 0x1004292d
mov ecx, dword [ebp + 0x2c]
add edi, 4
mov eax, dword [ebp + 0x3c]
add eax, 0xfffffffc
cmp edi, eax
jge 0x1004292d
mov edx, dword [ebp + 0x40]
lea eax, [ebp + 0x2c]
cmp edx, 0x10
cmovae eax, ecx
cmp byte [edi + eax], 0x27
je 0x10042927
cmp edx, 0x10
lea eax, [ebp + 0x2c]
cmovae eax, ecx
cmp byte [edi + eax], 0x22
je 0x10042927
cmp edx, 0x10
lea eax, [ebp + 0x2c]
cmovae eax, ecx
cmp byte [eax + edi], 0x20
je 0x10042927
mov eax, dword [ebp + 0x3c]
add eax, 0xfffffffb
cmp edi, eax
jge 0x10042927
cmp edx, 0x10
lea eax, [ebp + 0x2c]
cmovae eax, ecx
cmp byte [eax + edi], 0x27
je 0x1004290f
cmp edx, 0x10
lea eax, [ebp + 0x2c]
cmovae eax, ecx
cmp byte [eax + edi], 0x20
je 0x1004290f
cmp edx, 0x10
lea eax, [ebp + 0x2c]
cmovae eax, ecx
cmp byte [eax + edi], 0x22
je 0x1004290f
cmp edx, 0x10
lea eax, [ebp + 0x2c]
cmovae eax, ecx
cmp byte [eax + edi], 0x20
je 0x1004290f
cmp edx, 0x10
lea eax, [ebp + 0x2c]
cmovae eax, ecx
cmp byte [eax + edi], 0x3e
je 0x1004290f
cmp edx, 0x10
lea eax, [ebp + 0x2c]
cmovae eax, ecx
lea ecx, [ebp - 0x34]
mov al, byte [eax + edi]
mov byte [ebp + 0x48], al
push dword [ebp + 0x48]
call fcn.100028db
mov ecx, dword [ebp + 0x2c]
inc edi
mov edx, dword [ebp + 0x40]
jmp 0x10042893
mov edi, dword [ebp + 0x3c]
lea ecx, [ebp - 0x88]
push 6
push str.object
call fcn.10002936
mov ecx, dword [ebp + 0x2c]
inc edi
jmp 0x10042849
inc edi
jmp 0x100427ba
push 0x10
push str._param_namesrc
push eax
call fcn.1007e3f0
mov ecx, dword [ebp + 0x50]
add esp, 0xc
test eax, eax
je 0x1004298e
mov eax, dword [ebp + 0x48]
inc ecx
sub eax, ecx
push eax
push 0x3c
push ecx
call fcn.1007fb70
add esp, 0xc
mov dword [ebp + 0x50], eax
test eax, eax
jne 0x10042933
mov ecx, dword [ebp + 0x40]
cmp ecx, 0x10
lea edx, [ebp + 0x2c]
mov ecx, dword [ebp + 0x3c]
cmovae edx, edi
mov dword [ebp + 0x4c], edx
cmp ecx, 0x12
jb 0x10042bc7
lea eax, [ecx - 0x11]
add eax, edx
mov dword [ebp + 0x48], eax
sub eax, edx
push eax
push 0x3c
push edx
jmp 0x100429bc
sub ecx, dword [ebp + 0x4c]
cmp ecx, 0xffffffff
je 0x10042963
lea eax, [ecx + 0x10]
jmp 0x100429df
push 0x12
push str._param_name_src_
push eax
call fcn.1007e3f0
mov ecx, dword [ebp + 0x50]
add esp, 0xc
test eax, eax
je 0x100429d0
mov eax, dword [ebp + 0x48]
inc ecx
sub eax, ecx
push eax
push 0x3c
push ecx
call fcn.1007fb70
add esp, 0xc
mov dword [ebp + 0x50], eax
test eax, eax
jne 0x1004299b
jmp 0x10042bc7
sub ecx, dword [ebp + 0x4c]
cmp ecx, 0xffffffff
je 0x10042bc7
lea eax, [ecx + 0x12]
mov dword [ebp + 0x50], eax
cmp eax, 0xffffffff
je 0x10042bc7
cmp dword [ebp + 0x40], 0x10
lea edx, [ebp + 0x2c]
mov ecx, dword [ebp + 0x3c]
cmovae edx, edi
mov dword [ebp + 0x48], edx
cmp ecx, 6
jb 0x10042bc7
lea eax, [ecx - 6]
cmp dword [ebp + 0x50], eax
ja 0x10042bc7
lea eax, [ecx - 5]
mov ecx, dword [ebp + 0x50]
add eax, edx
add ecx, edx
mov dword [ebp + 0x4c], eax
sub eax, ecx
push eax
push 0x76
push ecx
jmp 0x10042a46
push 6
push str.value
push eax
call fcn.1007e3f0
mov edx, dword [ebp + 0x44]
add esp, 0xc
test eax, eax
je 0x10042a5a
mov eax, dword [ebp + 0x4c]
inc edx
sub eax, edx
push eax
push 0x76
push edx
call fcn.1007fb70
add esp, 0xc
mov dword [ebp + 0x44], eax
test eax, eax
jne 0x10042a25
jmp 0x10042bc7
sub edx, dword [ebp + 0x48]
mov dword [ebp + 0x44], edx
cmp edx, 0xffffffff
je 0x10042bc7
cmp dword [ebp + 0x40], 0x10
lea eax, [ebp + 0x2c]
mov ecx, dword [ebp + 0x3c]
cmovae eax, edi
mov dword [ebp + 0x50], eax
cmp ecx, 1
jb 0x10042bc7
lea eax, [ecx - 1]
cmp edx, eax
ja 0x10042bc7
mov eax, dword [ebp + 0x50]
add ecx, eax
mov dword [ebp + 0x4c], ecx
lea ecx, [eax + edx]
jmp 0x10042aaf
movzx eax, byte [ecx]
cmp al, 0x3e
jne 0x10042aa5
mov eax, ebx
jmp 0x10042aaa
sbb eax, eax
or eax, 1
test eax, eax
je 0x10042acb
inc ecx
mov eax, dword [ebp + 0x4c]
sub eax, ecx
push eax
push 0x3e
push ecx
call fcn.1007fb70
mov ecx, eax
add esp, 0xc
test ecx, ecx
jne 0x10042a9a
jmp 0x10042bc7
sub ecx, dword [ebp + 0x50]
cmp ecx, 0xffffffff
je 0x10042bc7
mov edx, dword [ebp + 0x44]
sub ecx, edx
sub ecx, 6
mov dword [ebp - 0x4c], ebx
push ecx
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x3c], ebx
lea eax, [edx + 6]
mov dword [ebp - 0x38], 0xf
push eax
lea eax, [ebp + 0x2c]
push eax
call fcn.1000600f
mov eax, dword [ebp + 4]
lea ecx, [ebp - 0x34]
or eax, 8
mov byte [ebp + 0x48], bl
push dword [ebp + 0x48]
mov dword [ebp + 4], eax
mov dword [ebp + 0xc], eax
lea eax, [ebp - 0x4c]
push eax
call fcn.10005e62
mov eax, dword [ebp - 0x38]
cmp eax, 0x10
jb 0x10042b52
mov ecx, dword [ebp - 0x4c]
inc eax
mov dword [ebp + 0x4c], eax
mov dword [ebp + 0x50], ecx
cmp eax, 0x1000
jb 0x10042b49
lea eax, [ebp + 0x4c]
push eax
lea eax, [ebp + 0x50]
push eax
call fcn.10001c26
mov eax, dword [ebp + 0x4c]
pop ecx
pop ecx
mov ecx, dword [ebp + 0x50]
push eax
push ecx
call fcn.1007c382
pop ecx
pop ecx
push 0x100b908c
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.1003bc00
lea ecx, [ebp - 0x34]
add esp, 0xc
cmp ecx, eax
je 0x10042b7a
mov byte [ebp + 0x48], bl
push dword [ebp + 0x48]
push eax
call fcn.10005e62
lea ecx, [ebp - 0x70]
call fcn.100028b5
push 0x100bb364
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.1003bc00
lea ecx, [ebp - 0x34]
add esp, 0xc
cmp ecx, eax
je 0x10042baa
mov byte [ebp + 0x48], bl
push dword [ebp + 0x48]
push eax
call fcn.10005e62
lea ecx, [ebp - 0x70]
call fcn.100028b5
push 6
push str.object
lea ecx, [ebp - 0x88]
call fcn.10002936
mov edi, dword [ebp + 0x2c]
mov eax, dword [ebp + 0x40]
cmp eax, 0x10
jb 0x10042cb4
inc eax
mov dword [ebp + 0x50], edi
mov dword [ebp + 0x4c], eax
cmp eax, 0x1000
jb 0x10042bf6
lea eax, [ebp + 0x4c]
push eax
lea eax, [ebp + 0x50]
push eax
call fcn.10001c26
mov eax, dword [ebp + 0x4c]
mov edi, dword [ebp + 0x50]
pop ecx
pop ecx
push eax
push edi
call fcn.1007c382
pop ecx
pop ecx
jmp 0x10042cb4
lea eax, [ebp + 0x34]
push eax
call edi
push str.data
lea ecx, [ebp + 0x50]
mov byte [ebp - 4], 0x1e
call fcn.1003c024
mov eax, dword [ebp + 0x50]
mov byte [ebp - 4], 0x1f
test eax, eax
je 0x10042c2a
mov edx, dword [eax]
jmp 0x10042c2c
mov edx, ebx
mov eax, dword [ebp + 0x28]
lea edi, [ebp + 0x34]
push edi
push ebx
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
test eax, eax
js 0x10042c9b
cmp word [ebp + 0x34], 0
je 0x10042c9b
cmp dword [ebp + 0x3c], 0
je 0x10042c9b
push dword [ebp + 0x3c]
lea ecx, [ebp + 0x4c]
call fcn.1003c076
push 6
push str.object
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x20
call fcn.10002936
lea ecx, [ebp + 0x4c]
call fcn.1003c408
mov edx, eax
mov ecx, edx
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10042c7c
sub ecx, edi
push ecx
push edx
lea ecx, [ebp - 0x34]
call fcn.10002936
mov ecx, dword [ebp + 0x4c]
test ecx, ecx
je 0x10042c9b
call fcn.100437da
mov ecx, dword [ebp + 0x50]
test ecx, ecx
je 0x10042caa
call fcn.100437da
mov dword [ebp + 0x50], ebx
lea eax, [ebp + 0x34]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov dword [ebp - 4], 0xb
jmp 0x10042f50
mov eax, dword [ebp + 0x10]
cmp edi, 0x10
lea ecx, [ebp + 0x10]
cmovae ecx, eax
cmp dword [ebp + 0x20], 3
jne 0x10042da8
push 3
mov edi, 0x100a81d0
push edi
push ecx
call fcn.1007e3f0
add esp, 0xc
test eax, eax
jne 0x10042da8
lea eax, [ebp + 0x34]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push 0x100a81d4
lea ecx, [ebp + 0x50]
mov byte [ebp - 4], 0x22
call fcn.1003c024
mov eax, dword [ebp + 0x50]
mov byte [ebp - 4], 0x23
test eax, eax
je 0x10042d36
mov edx, dword [eax]
jmp 0x10042d38
mov edx, ebx
mov eax, dword [ebp + 0x28]
lea esi, [ebp + 0x34]
push esi
push ebx
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
test eax, eax
js 0x10042f37
cmp word [ebp + 0x34], 0
je 0x10042f37
cmp dword [ebp + 0x3c], 0
je 0x10042f37
mov eax, esi
lea ecx, [ebp + 0x4c]
push eax
call fcn.1003bfbb
push 3
push edi
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x24
call fcn.10002936
lea ecx, [ebp + 0x4c]
call fcn.1003c408
mov edx, eax
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10042d90
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x34]
call fcn.10002936
jmp 0x10042f2f
mov edi, 0x100a81d8
lea ecx, [ebp + 0x10]
push edi
call fcn.100031fd
test al, al
je 0x10042e9b
lea eax, [ebp + 0x34]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push 0x100a81dc
lea ecx, [ebp + 0x50]
mov byte [ebp - 4], 0x25
call fcn.1003c024
mov eax, dword [ebp + 0x50]
mov byte [ebp - 4], 0x26
test eax, eax
je 0x10042de8
mov edx, dword [eax]
jmp 0x10042dea
mov edx, ebx
mov eax, dword [ebp + 0x28]
lea esi, [ebp + 0x34]
push esi
push ebx
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
test eax, eax
jne 0x10042f37
cmp word [ebp + 0x34], ax
je 0x10042f37
cmp dword [ebp + 0x3c], eax
je 0x10042f37
mov eax, esi
lea ecx, [ebp + 0x4c]
push eax
call fcn.1003bfbb
push 1
push edi
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x27
call fcn.10002936
lea ecx, [ebp + 0x4c]
call fcn.1003c408
push eax
lea ecx, [ebp - 0x34]
call fcn.10002917
mov dword [ebp + 0xc], ebx
mov eax, dword [ebp + 0x28]
lea edx, [ebp + 0xc]
push edx
push eax
mov byte [ebp - 4], 0x28
mov ecx, dword [eax]
call dword [ecx + 0xf0]
test eax, eax
mov eax, dword [ebp + 0xc]
jne 0x10042e8f
test eax, eax
je 0x10042e8f
push eax
lea ecx, [ebp - 0x10c]
call fcn.1003bde9
push dword [eax]
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0x29
call fcn.10002917
lea ecx, [ebp - 0x10c]
call fcn.100384a4
mov eax, dword [ebp + 0xc]
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x10042f2f
mov edi, str.iframe
lea ecx, [ebp + 0x10]
push edi
call fcn.100031fd
test al, al
je 0x100433ac
lea eax, [ebp + 0x34]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push 0x100a81d4
lea ecx, [ebp + 0x50]
mov byte [ebp - 4], 0x2a
call fcn.1003c024
mov eax, dword [ebp + 0x50]
mov byte [ebp - 4], 0x2b
test eax, eax
je 0x10042edb
mov edx, dword [eax]
jmp 0x10042edd
mov edx, ebx
mov eax, dword [ebp + 0x28]
lea esi, [ebp + 0x34]
push esi
push ebx
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
test eax, eax
js 0x10042f37
cmp word [ebp + 0x34], 0
je 0x10042f37
cmp dword [ebp + 0x3c], 0
je 0x10042f37
mov eax, esi
lea ecx, [ebp + 0x4c]
push eax
call fcn.1003bfbb
push 5
push str.frame
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x2c
call fcn.10002936
lea ecx, [ebp + 0x4c]
call fcn.1003c408
push eax
lea ecx, [ebp - 0x34]
call fcn.10002917
lea ecx, [ebp + 0x4c]
call fcn.1003c201
lea ecx, [ebp + 0x50]
call fcn.1003c201
lea eax, [ebp + 0x34]
mov byte [ebp - 4], 0xb
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [ebp]
mov edi, dword [ebp + 0x5c]
mov ecx, dword [edi + 0x24]
test ecx, ecx
je 0x100432ac
push ebx
push ebx
push ebx
mov dword [ebp + 0x50], ebx
mov eax, dword [ecx]
push ebx
push ecx
call dword [eax + 0x14]
lea eax, [ebp + 0x50]
push eax
push 0x100ad390
push dword [edi + 0x24]
call dword [sym.imp.ole32.dll_CoUnmarshalInterface]
test eax, eax
js 0x100432ac
mov ecx, dword [ebp + 0x50]
test ecx, ecx
je 0x100432ac
mov eax, dword [ecx]
lea edx, [ebp + 0x44]
push edx
push ecx
call dword [eax + 0x78]
test eax, eax
jne 0x10042fd9
push dword [ebp + 0x44]
lea ecx, [ebp - 0x10c]
call fcn.1003bde9
push dword [eax]
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 0x2d
call fcn.10002917
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 0xb
call fcn.100384a4
push dword [ebp + 0x44]
mov edi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call edi
jmp 0x10042fdf
mov edi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
lea eax, [ebp + 0x5f]
push eax
push 7
push ebx
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp + 0x2c]
call fcn.10005fe7
mov eax, dword [ebp + 4]
or eax, 0x10
or eax, 1
mov byte [ebp - 4], 0x2e
push str.http:__
lea ecx, [ebp + 0x2c]
mov dword [ebp + 4], eax
mov dword [ebp + 0xc], eax
call fcn.100031fd
test al, al
jne 0x10043047
lea eax, [ebp + 0x5f]
push eax
push 8
push ebx
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x4c]
call fcn.10005fe7
or dword [ebp + 4], 0x22
lea ecx, [ebp - 0x4c]
push str.https:__
call fcn.100031fd
test al, al
jne 0x10043047
cmp byte [ebp + 0x73], al
mov byte [ebp + 0x73], 1
je 0x1004304a
mov byte [ebp + 0x73], bl
mov eax, dword [ebp + 4]
test al, 2
je 0x10043062
and eax, 0xfffffffd
lea ecx, [ebp - 0x4c]
mov dword [ebp + 4], eax
call fcn.100028b5
mov eax, dword [ebp + 4]
mov dword [ebp - 4], 0xb
test al, 1
je 0x10043075
lea ecx, [ebp + 0x2c]
call fcn.100028b5
cmp byte [ebp + 0x73], 0
je 0x100432a3
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], 0xf
mov byte [ebp - 0x4c], bl
mov dword [ebp], ebx
mov dword [ebp + 0xc], ebx
mov eax, dword [ebp + 0x28]
lea edx, [ebp]
push edx
push eax
mov byte [ebp - 4], 0x31
mov ecx, dword [eax]
call dword [ecx + 0x9c]
test eax, eax
jne 0x1004311e
mov eax, dword [ebp + 0xc]
cmp eax, dword [ebp]
je 0x100430cc
push 0x100a7ef4
push dword [ebp]
lea eax, [ebp + 0xc]
push eax
call fcn.1003c9c5
mov eax, dword [ebp + 0xc]
add esp, 0xc
test eax, eax
je 0x1004311e
mov ecx, dword [eax]
lea edx, [ebp + 0x44]
push edx
push eax
call dword [ecx + 0xa0]
test eax, eax
jne 0x1004310f
push dword [ebp + 0x44]
lea ecx, [ebp - 0x10c]
call fcn.1003bde9
push dword [eax]
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x32
call fcn.10002917
lea ecx, [ebp - 0x10c]
call fcn.100384a4
push dword [ebp + 0x44]
call edi
jmp 0x1004311e
lea eax, [ebp - 0x13c]
push eax
lea ecx, [ebp - 0x4c]
call fcn.10005000
cmp dword [ebp - 0x20], 0x10
lea eax, [ebp - 0x34]
cmovae eax, dword [ebp - 0x34]
mov al, byte [eax]
mov dword [ebp + 0x2c], ebx
mov byte [ebp + 0x73], al
mov dword [ebp + 0x3c], ebx
mov dword [ebp + 0x40], 0xf
mov byte [ebp + 0x2c], bl
lea eax, [ebp + 0x5f]
mov byte [ebp - 4], 0x33
push eax
push 7
push ebx
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x70]
call fcn.10005fe7
push str.http:__
lea ecx, [ebp - 0x70]
call fcn.100031fd
lea ecx, [ebp - 0x70]
mov bl, al
call fcn.100028b5
movzx eax, bl
lea ecx, [ebp - 0x70]
lea edi, [eax*8 - 1]
lea eax, [ebp + 0x5f]
push eax
push 8
push 0
lea eax, [ebp - 0x4c]
push eax
call fcn.10005fe7
push str.https:__
lea ecx, [ebp - 0x70]
call fcn.100031fd
lea ecx, [ebp - 0x70]
mov bl, al
call fcn.100028b5
test bl, bl
je 0x100431aa
push 8
pop edi
jmp 0x100431b3
cmp edi, 0xffffffff
je 0x1004326b
cmp byte [ebp + 0x73], 0x2f
jne 0x1004331b
push edi
push 0x2f
lea ecx, [ebp - 0x4c]
call fcn.10007c10
cmp eax, 0xffffffff
jne 0x100431ea
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp + 0x2c]
call fcn.10005000
push 1
push 0x100bab28
lea ecx, [ebp + 0x2c]
call fcn.10002784
jmp 0x10043212
lea ecx, [ebp + 0x73]
inc eax
push ecx
push eax
push 0
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x70]
call fcn.10005fe7
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp + 0x2c]
call fcn.10005e08
lea ecx, [ebp - 0x70]
call fcn.100028b5
cmp dword [ebp - 0x20], 0x10
lea eax, [ebp - 0x34]
cmovae eax, dword [ebp - 0x34]
cmp byte [eax], 0x2f
jne 0x10043246
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x34]
dec eax
push eax
push 1
lea eax, [ebp - 0x70]
push eax
call fcn.10005fa3
push eax
lea ecx, [ebp - 0x34]
call fcn.10005e08
lea ecx, [ebp - 0x70]
call fcn.100028b5
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp + 0x2c]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.1003b845
add esp, 0xc
lea ecx, [ebp - 0x34]
push eax
call fcn.10005e08
lea ecx, [ebp - 0x70]
call fcn.100028b5
xor ebx, ebx
lea ecx, [ebp + 0x2c]
call fcn.100028b5
mov eax, dword [ebp + 0xc]
mov byte [ebp - 4], 0x30
test eax, eax
je 0x10043286
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp]
mov byte [ebp - 4], 0x2f
test eax, eax
je 0x10043297
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0xb
call fcn.100028b5
mov eax, dword [ebp + 0x50]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
cmp dword [ebp - 0x110], 0x10
lea edi, [ebp - 0x124]
mov eax, dword [ebp - 0x50]
lea edx, [ebp - 0x34]
cmovae edi, dword [ebp - 0x124]
lea ecx, [ebp - 0x13c]
cmp dword [ebp - 0x20], 0x10
mov dword [ebp + 0x48], edi
lea edi, [ebp + 0x70]
cmovae edx, dword [ebp - 0x34]
cmp dword [ebp - 0x128], 0x10
push edi
cmovae ecx, dword [ebp - 0x13c]
lea edi, [ebp + 0x5c]
cmp dword [ebp - 0x74], 0x10
push edi
mov edi, dword [ebp + 0x48]
mov dword [ebp + 0x70], eax
mov eax, dword [ebp - 0x54]
push edi
mov dword [ebp + 0x5c], eax
lea eax, [ebp - 0x88]
cmovae eax, dword [ebp - 0x88]
push edx
push ecx
push eax
call fcn.1003c80b
add esp, 0x18
jmp 0x100433cf
lea eax, [edi + 1]
mov ebx, edi
push eax
push 0x2f
lea ecx, [ebp - 0x4c]
call fcn.10007c10
mov edi, eax
cmp edi, 0xffffffff
jne 0x1004331b
cmp ebx, eax
je 0x1004326b
lea eax, [ebx + 1]
xor ebx, ebx
push eax
push ebx
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x4c]
call fcn.10005fa3
push eax
lea ecx, [ebp + 0x2c]
call fcn.10005e08
lea ecx, [ebp - 0x70]
call fcn.100028b5
cmp dword [ebp + 0x40], 0x10
lea ecx, [ebp + 0x2c]
mov eax, dword [ebp + 0x3c]
cmovae ecx, dword [ebp + 0x2c]
cmp byte [ecx + eax - 1], 0x2f
je 0x10043382
push 1
push 0x100bab28
lea ecx, [ebp + 0x2c]
call fcn.10002784
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp + 0x2c]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.1003b845
add esp, 0xc
lea ecx, [ebp - 0x34]
push eax
call fcn.10005e08
lea ecx, [ebp - 0x70]
call fcn.100028b5
jmp 0x1004326d
push edi
lea ecx, [ebp + 0x10]
call fcn.100031fd
test al, al
jne 0x100433cf
push str.span
lea ecx, [ebp + 0x10]
call fcn.100031fd
test al, al
jne 0x100433cf
call fcn.1004385b
lea ecx, [ebp - 0x124]
call fcn.100028b5
lea ecx, [ebp + 0x10]
call fcn.100028b5
lea ecx, [ebp - 0x13c]
call fcn.100028b5
lea ecx, [ebp - 0x34]
call fcn.100028b5
lea ecx, [ebp - 0x88]
call fcn.100028b5
push dword [ebp + 8]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [ebp + 0x28]
mov byte [ebp - 4], 2
test eax, eax
je 0x1004341a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], bl
test eax, eax
je 0x1004342a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
or dword [ebp - 4], 0xffffffff
jmp 0x10043474
push dword [ebp + 8]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [ebp + 0x28]
mov byte [ebp - 4], 2
test eax, eax
je 0x10043457
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x10043457
mov eax, dword [ebp - 0x14]
mov dword [ebp - 4], ebx
test eax, eax
je 0x10043467
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
call fcn.1004385b
or dword [ebp - 4], 0xffffffff
test esi, esi
je 0x1004347a
mov eax, dword [esi]
push esi
call dword [eax + 8]
mov ecx, dword [ebp - 0xc]
xor eax, eax
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
add ebp, 0x54
leave
ret 0x24
push 0x80
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.100384fa
add esp, 0xc
call fcn.1003c9f3
int3