Function at 0x1027f09
Capabilities:
Inspect section memory permissions

Disassembly:
mov eax, 0x102fe5d
call fcn.01024878
sub esp, 0x58
push ebx
mov ebx, dword [ebp + 0x10]
push esi
mov esi, ecx
mov ecx, dword [ebp + 0xc]
push edi
xor edi, edi
and ecx, 0x400
xor eax, eax
or eax, ecx
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x10], edi
je 0x1027fab
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebx]
lea ecx, [ebp - 0x18]
push ecx
lea ecx, [ebp - 0x1c]
push ecx
lea ecx, [ebp - 0x2c]
push ecx
push edi
push dword [0x10360c8]
mov dword [ebp - 0x1c], edi
push ebx
mov dword [ebp - 0x18], edi
call dword [eax + 0x10]
cmp eax, edi
jl 0x1027f88
cmp word [ebp - 0x2c], 3
jne 0x1027f6e
mov eax, dword [ebp - 0x24]
jmp 0x1027f77
xor eax, eax
inc eax
cmp word [ebp - 0x2c], ax
jne 0x1027f7f
mov dword [esi + 0x650], eax
jmp 0x1027f92
mov dword [ebp - 0x10], 0x80041012
jmp 0x1027f92
cmp eax, 0x80041002
je 0x1027f92
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp dword [ebp - 0x10], edi
jl 0x1028e5b
mov esi, dword [ebp - 0x14]
mov ebx, dword [ebp + 0x10]
mov ecx, dword [ebp + 0xc]
and ecx, 0x1000
xor eax, eax
or eax, ecx
je 0x1028036
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebx]
lea ecx, [ebp - 0x1c]
push ecx
lea ecx, [ebp - 0x18]
push ecx
lea ecx, [ebp - 0x2c]
push ecx
push edi
push dword [0x103607c]
mov dword [ebp - 0x18], edi
push ebx
mov dword [ebp - 0x1c], edi
call dword [eax + 0x10]
cmp eax, edi
jl 0x1028022
cmp word [ebp - 0x2c], 8
jne 0x1028019
add esi, 0x6ac
mov eax, dword [esi]
cmp eax, edi
je 0x1028001
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [ebp - 0x24]
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
cmp eax, edi
mov dword [esi], eax
jne 0x102802c
mov dword [ebp - 0x10], 0x80041006
jmp 0x102802c
mov dword [ebp - 0x10], 0x80041012
jmp 0x102802c
cmp eax, 0x80041002
je 0x102802c
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp dword [ebp - 0x10], edi
jl 0x1028e5b
mov eax, dword [ebp + 8]
and eax, 0x40000000
xor ecx, ecx
or eax, ecx
je 0x10280bf
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
lea edx, [ebp - 0x1c]
push edx
lea edx, [ebp - 0x18]
push edx
lea edx, [ebp - 0x2c]
push edx
push edi
push dword [0x10360c4]
mov dword [ebp - 0x18], edi
push eax
mov dword [ebp - 0x1c], edi
call dword [ecx + 0x10]
cmp eax, edi
jl 0x10280ab
xor eax, eax
cmp word [ebp - 0x2c], 0xb
jne 0x1028090
cmp word [ebp - 0x24], 0xffff
sete al
jmp 0x1028097
inc eax
cmp word [ebp - 0x2c], ax
jne 0x10280a2
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x66c], eax
jmp 0x10280b5
mov dword [ebp - 0x10], 0x80041012
jmp 0x10280b5
cmp eax, 0x80041002
je 0x10280b5
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp dword [ebp - 0x10], edi
jl 0x1028e5b
mov eax, dword [ebp + 8]
mov ebx, dword [sym.imp.ole32.dll_CLSIDFromString]
and eax, 4
xor ecx, ecx
or eax, ecx
je 0x1028172
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
lea edx, [ebp - 0x1c]
push edx
lea edx, [ebp - 0x18]
push edx
lea edx, [ebp - 0x2c]
push edx
push edi
push dword [0x1036074]
mov dword [ebp - 0x18], edi
push eax
mov dword [ebp - 0x1c], edi
call dword [ecx + 0x10]
cmp eax, edi
jl 0x102815e
cmp word [ebp - 0x2c], 8
jne 0x1028141
mov esi, dword [ebp - 0x14]
lea eax, [esi + 0x6b0]
push eax
push dword [ebp - 0x24]
call ebx
test eax, eax
jl 0x1028138
push dword [ebp + 0x14]
lea ecx, [esi + 8]
push dword [ebp - 0x24]
call fcn.010275d2
jmp 0x1028165
mov dword [ebp - 0x10], 0x80041012
jmp 0x1028168
cmp word [ebp - 0x2c], 1
jne 0x1028138
mov edi, dword [ebp - 0x14]
add edi, 0x6b0
mov esi, 0x10081c4
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
xor edi, edi
jmp 0x1028168
cmp eax, 0x80041002
je 0x1028168
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp dword [ebp - 0x10], edi
jl 0x1028e5b
mov eax, dword [ebp + 8]
and eax, 8
xor ecx, ecx
or eax, ecx
je 0x1028211
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
lea edx, [ebp + 0x14]
push edx
lea edx, [ebp - 0x1c]
push edx
lea edx, [ebp - 0x2c]
push edx
push edi
push dword [0x1036078]
mov dword [ebp - 0x1c], edi
push eax
mov dword [ebp + 0x14], edi
call dword [ecx + 0x10]
cmp eax, edi
jl 0x10281fd
cmp word [ebp - 0x2c], 8
jne 0x10281e0
mov eax, dword [ebp - 0x14]
add eax, 0x6c0
push eax
push dword [ebp - 0x24]
call ebx
cmp eax, edi
mov dword [ebp - 0x10], eax
jge 0x1028207
mov dword [ebp - 0x10], 0x80041012
jmp 0x1028207
cmp word [ebp - 0x2c], 1
jne 0x10281d7
mov edi, dword [ebp - 0x14]
add edi, 0x6c0
mov esi, 0x10081c4
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
xor edi, edi
jmp 0x1028207
cmp eax, 0x80041002
je 0x1028207
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp dword [ebp - 0x10], edi
jl 0x1028e5b
mov eax, dword [ebp + 8]
and eax, 0x10
xor ecx, ecx
or eax, ecx
je 0x10282cd
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
lea edx, [ebp + 0x14]
push edx
lea edx, [ebp - 0x1c]
push edx
lea edx, [ebp - 0x2c]
push edx
push edi
push dword [0x1036080]
mov dword [ebp - 0x1c], edi
push eax
mov dword [ebp + 0x14], edi
call dword [ecx + 0x10]
cmp eax, edi
jl 0x10282b9
cmp word [ebp - 0x2c], 8
jne 0x102828f
mov esi, dword [ebp - 0x14]
add esi, 0x680
mov eax, dword [esi]
cmp eax, edi
je 0x1028277
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [ebp - 0x24]
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
cmp eax, edi
mov dword [esi], eax
jne 0x10282c3
mov dword [ebp - 0x10], 0x80041006
jmp 0x10282c3
cmp word [ebp - 0x2c], 1
jne 0x10282b0
mov esi, dword [ebp - 0x14]
add esi, 0x680
mov eax, dword [esi]
cmp eax, edi
je 0x10282c3
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], edi
jmp 0x10282c3
mov dword [ebp - 0x10], 0x80041012
jmp 0x10282c3
cmp eax, 0x80041002
je 0x10282c3
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp dword [ebp - 0x10], edi
jl 0x1028e5b
mov eax, dword [ebp + 8]
and eax, 0x20
xor ecx, ecx
or eax, ecx
je 0x1028402
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
lea edx, [ebp + 0x14]
push edx
lea edx, [ebp - 0x1c]
push edx
lea edx, [ebp - 0x2c]
push edx
push edi
push dword [0x1036084]
mov dword [ebp - 0x1c], edi
push eax
mov dword [ebp + 0x14], edi
call dword [ecx + 0x10]
cmp eax, edi
jl 0x10283ee
cmp word [ebp - 0x2c], 8
jne 0x10283c4
mov esi, dword [ebp - 0x14]
mov eax, dword [esi + 0x690]
cmp eax, edi
je 0x1028339
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [ebp - 0x24]
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
cmp eax, edi
mov dword [esi + 0x690], eax
je 0x10283bb
lea ecx, [ebp - 0x64]
call fcn.0102b0e3
mov dword [ebp - 4], edi
push dword [esi + 0x690]
lea ecx, [ebp - 0x64]
call fcn.0102b397
test eax, eax
jl 0x10283a6
cmp word [ebp - 0x50], 0xffff
mov dword [ebp - 0x10], edi
jne 0x10283a6
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x40]
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*8]
mov eax, dword [ebp - 0x34]
imul ecx, ecx, 0x3c
add ecx, dword [ebp - 0x3c]
cdq
mov ebx, 0x3e8
imul ecx, ecx, 0x3c
add ecx, dword [ebp - 0x38]
idiv ebx
imul ecx, ecx, 0x3e8
add ecx, eax
mov dword [esi + 0x694], ecx
jmp 0x10283ad
mov dword [ebp - 0x10], 0x80041012
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x64]
call fcn.0102b135
jmp 0x10283f8
mov dword [ebp - 0x10], 0x80041006
jmp 0x10283f8
cmp word [ebp - 0x2c], 1
jne 0x10283e5
mov esi, dword [ebp - 0x14]
add esi, 0x690
mov eax, dword [esi]
cmp eax, edi
je 0x10283f8
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], edi
jmp 0x10283f8
mov dword [ebp - 0x10], 0x80041012
jmp 0x10283f8
cmp eax, 0x80041002
je 0x10283f8
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp dword [ebp - 0x10], edi
jl 0x1028e5b
mov eax, dword [ebp + 8]
and eax, 0x40
xor ecx, ecx
or eax, ecx
je 0x10284a3
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
lea edx, [ebp + 0x14]
push edx
lea edx, [ebp - 0x1c]
push edx
lea edx, [ebp - 0x2c]
push edx
push edi
push dword [0x1036088]
mov dword [ebp - 0x1c], edi
push eax
mov dword [ebp + 0x14], edi
call dword [ecx + 0x10]
cmp eax, edi
jl 0x102848f
cmp word [ebp - 0x2c], 3
jne 0x102847d
mov eax, dword [ebp - 0x24]
sub eax, edi
je 0x1028484
dec eax
mov eax, dword [ebp - 0x14]
je 0x1028471
cmp dword [eax + 0x650], 1
jbe 0x1028487
mov dword [ebp - 0x10], 0x80041012
jmp 0x1028499
mov dword [eax + 0x654], 1
jmp 0x1028499
cmp word [ebp - 0x2c], 1
jne 0x1028468
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x654], edi
jmp 0x1028499
cmp eax, 0x80041002
je 0x1028499
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp dword [ebp - 0x10], edi
jl 0x1028e5b
mov eax, dword [ebp + 8]
and eax, 0x4000000
xor ecx, ecx
or eax, ecx
je 0x102852c
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
lea edx, [ebp + 0x14]
push edx
lea edx, [ebp - 0x1c]
push edx
lea edx, [ebp - 0x2c]
push edx
push edi
push dword [0x10360b4]
mov dword [ebp - 0x1c], edi
push eax
mov dword [ebp + 0x14], edi
call dword [ecx + 0x10]
cmp eax, edi
jl 0x1028518
xor eax, eax
cmp word [ebp - 0x2c], 0xb
jne 0x10284fd
cmp word [ebp - 0x24], 0xffff
sete al
jmp 0x1028504
inc eax
cmp word [ebp - 0x2c], ax
jne 0x102850f
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x698], eax
jmp 0x1028522
mov dword [ebp - 0x10], 0x80041012
jmp 0x1028522
cmp eax, 0x80041002
je 0x1028522
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp dword [ebp - 0x10], edi
jl 0x1028e5b
mov eax, dword [ebp + 8]
and eax, 0x80000000
xor ecx, ecx
or eax, ecx
je 0x10285be
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
lea edx, [ebp + 0x14]
push edx
lea edx, [ebp - 0x1c]
push edx
lea edx, [ebp - 0x2c]
push edx
push edi
push dword [0x10360ac]
mov dword [ebp - 0x1c], edi
push eax
mov dword [ebp + 0x14], edi
call dword [ecx + 0x10]
cmp eax, edi
jl 0x10285aa
cmp word [ebp - 0x2c], 0xb
jne 0x102858f
mov ecx, dword [ebp - 0x14]
xor eax, eax
cmp word [ebp - 0x24], 0xffff
sete al
mov dword [ecx + 0x670], eax
jmp 0x10285b4
cmp word [ebp - 0x2c], 1
jne 0x10285a1
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x670], edi
jmp 0x10285b4
mov dword [ebp - 0x10], 0x80041012
jmp 0x10285b4
cmp eax, 0x80041002
je 0x10285b4
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp dword [ebp - 0x10], edi
jl 0x1028e5b
mov eax, dword [ebp + 8]
and eax, 0x20000000
xor ecx, ecx
or eax, ecx
je 0x1028650
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
lea edx, [ebp + 0x14]
push edx
lea edx, [ebp - 0x1c]
push edx
lea edx, [ebp - 0x2c]
push edx
push edi
push dword [0x10360c0]
mov dword [ebp - 0x1c], edi
push eax
mov dword [ebp + 0x14], edi
call dword [ecx + 0x10]
cmp eax, edi
jl 0x102863c
cmp word [ebp - 0x2c], 0xb
jne 0x1028621
mov ecx, dword [ebp - 0x14]
xor eax, eax
cmp word [ebp - 0x24], 0xffff
sete al
mov dword [ecx + 0x668], eax
jmp 0x1028646
cmp word [ebp - 0x2c], 1
jne 0x1028633
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x668], edi
jmp 0x1028646
mov dword [ebp - 0x10], 0x80041012
jmp 0x1028646
cmp eax, 0x80041002
je 0x1028646
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp dword [ebp - 0x10], edi
jl 0x1028e5b
mov eax, dword [ebp + 8]
and eax, 0x8000000
xor ecx, ecx
or eax, ecx
je 0x102878d
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
lea edx, [ebp + 0x14]
push edx
lea edx, [ebp - 0x1c]
push edx
lea edx, [ebp - 0x2c]
push edx
push edi
push dword [0x10360b8]
mov dword [ebp - 0x1c], edi
push eax
mov dword [ebp + 0x14], edi
call dword [ecx + 0x10]
cmp eax, edi
jl 0x1028779
cmp word [ebp - 0x2c], 8
jne 0x102874d
mov esi, dword [ebp - 0x14]
mov eax, dword [esi + 0x69c]
cmp eax, edi
je 0x10286be
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [ebp - 0x24]
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
cmp eax, edi
mov dword [esi + 0x69c], eax
je 0x1028744
lea ecx, [ebp - 0x64]
call fcn.0102b0e3
mov dword [ebp - 4], 1
push dword [esi + 0x69c]
lea ecx, [ebp - 0x64]
call fcn.0102b397
test eax, eax
jl 0x102872f
cmp word [ebp - 0x50], 0xffff
mov dword [ebp - 0x10], edi
jne 0x102872f
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x40]
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*8]
mov eax, dword [ebp - 0x34]
imul ecx, ecx, 0x3c
add ecx, dword [ebp - 0x3c]
cdq
mov ebx, 0x3e8
imul ecx, ecx, 0x3c
add ecx, dword [ebp - 0x38]
idiv ebx
imul ecx, ecx, 0x3e8
add ecx, eax
mov dword [esi + 0x6a0], ecx
jmp 0x1028736
mov dword [ebp - 0x10], 0x80041012
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x64]
call fcn.0102b135
jmp 0x1028783
mov dword [ebp - 0x10], 0x80041006
jmp 0x1028783
cmp word [ebp - 0x2c], 1
jne 0x1028770
mov esi, dword [ebp - 0x14]
mov eax, dword [esi + 0x69c]
cmp eax, edi
je 0x1028783
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi + 0x690], edi
jmp 0x1028783
mov dword [ebp - 0x10], 0x80041012
jmp 0x1028783
cmp eax, 0x80041002
je 0x1028783
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp dword [ebp - 0x10], edi
jl 0x1028e5b
mov eax, dword [ebp + 8]
and eax, 0x10000000
xor ecx, ecx
or eax, ecx
je 0x10288ca
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
lea edx, [ebp + 0x14]
push edx
lea edx, [ebp - 0x1c]
push edx
lea edx, [ebp - 0x2c]
push edx
push edi
push dword [0x10360bc]
mov dword [ebp - 0x1c], edi
push eax
mov dword [ebp + 0x14], edi
call dword [ecx + 0x10]
cmp eax, edi
jl 0x10288b6
cmp word [ebp - 0x2c], 8
jne 0x102888a
mov esi, dword [ebp - 0x14]
mov eax, dword [esi + 0x688]
cmp eax, edi
je 0x10287fb
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [ebp - 0x24]
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
cmp eax, edi
mov dword [esi + 0x688], eax
je 0x1028881
lea ecx, [ebp - 0x64]
call fcn.0102b0e3
mov dword [ebp - 4], 2
push dword [esi + 0x688]
lea ecx, [ebp - 0x64]
call fcn.0102b397
test eax, eax
jl 0x102886c
cmp word [ebp - 0x50], 0xffff
mov dword [ebp - 0x10], edi
jne 0x102886c
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x40]
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*8]
mov eax, dword [ebp - 0x34]
imul ecx, ecx, 0x3c
add ecx, dword [ebp - 0x3c]
cdq
mov ebx, 0x3e8
imul ecx, ecx, 0x3c
add ecx, dword [ebp - 0x38]
idiv ebx
imul ecx, ecx, 0x3e8
add ecx, eax
mov dword [esi + 0x68c], ecx
jmp 0x1028873
mov dword [ebp - 0x10], 0x80041012
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x64]
call fcn.0102b135
jmp 0x10288c0
mov dword [ebp - 0x10], 0x80041006
jmp 0x10288c0
cmp word [ebp - 0x2c], 1
jne 0x10288ad
mov esi, dword [ebp - 0x14]
mov eax, dword [esi + 0x688]
cmp eax, edi
je 0x10288c0
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi + 0x690], edi
jmp 0x10288c0
mov dword [ebp - 0x10], 0x80041012
jmp 0x10288c0
cmp eax, 0x80041002
je 0x10288c0
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp dword [ebp - 0x10], edi
jl 0x1028e5b
mov eax, dword [ebp + 8]
and eax, 0x1000000
xor ecx, ecx
or eax, ecx
je 0x102895c
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
lea edx, [ebp + 0x14]
push edx
lea edx, [ebp - 0x1c]
push edx
lea edx, [ebp - 0x2c]
push edx
push edi
push dword [0x10360a8]
mov dword [ebp - 0x1c], edi
push eax
mov dword [ebp + 0x14], edi
call dword [ecx + 0x10]
cmp eax, edi
jl 0x1028948
cmp word [ebp - 0x2c], 0xb
jne 0x102892d
mov ecx, dword [ebp - 0x14]
xor eax, eax
cmp word [ebp - 0x24], 0xffff
sete al
mov dword [ecx + 0x6a4], eax
jmp 0x1028952
cmp word [ebp - 0x2c], 1
jne 0x102893f
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x6a4], edi
jmp 0x1028952
mov dword [ebp - 0x10], 0x80041012
jmp 0x1028952
cmp eax, 0x80041002
je 0x1028952
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp dword [ebp - 0x10], edi
jl 0x1028e5b
mov eax, dword [ebp + 8]
and eax, 0x2000000
xor ecx, ecx
or eax, ecx
je 0x10289e7
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
lea edx, [ebp + 0x14]
push edx
lea edx, [ebp - 0x1c]
push edx
lea edx, [ebp - 0x2c]
push edx
push edi
push dword [0x10360b0]
mov dword [ebp - 0x1c], edi
push eax
mov dword [ebp + 0x14], edi
call dword [ecx + 0x10]
cmp eax, edi
jl 0x10289d3
cmp word [ebp - 0x2c], 3
jne 0x10289b8
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x6a8], eax
jmp 0x10289dd
cmp word [ebp - 0x2c], 1
jne 0x10289ca
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x6a8], edi
jmp 0x10289dd
mov dword [ebp - 0x10], 0x80041012
jmp 0x10289dd
cmp eax, 0x80041002
je 0x10289dd
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp dword [ebp - 0x10], edi
jl 0x1028e5b
mov eax, dword [ebp + 8]
and eax, 0x80
xor ecx, ecx
or eax, ecx
je 0x1028aa0
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
lea edx, [ebp + 0x14]
push edx
lea edx, [ebp - 0x1c]
push edx
lea edx, [ebp - 0x2c]
push edx
push edi
push dword [0x103608c]
mov dword [ebp - 0x1c], edi
push eax
mov dword [ebp + 0x14], edi
call dword [ecx + 0x10]
cmp eax, edi
jl 0x1028a8c
cmp word [ebp - 0x2c], 3
jne 0x1028a78
mov eax, dword [ebp - 0x24]
sub eax, edi
je 0x1028a6d
dec eax
je 0x1028a5e
dec eax
je 0x1028a4f
mov dword [ebp - 0x10], 0x80041012
jmp 0x1028a96
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x658], 2
jmp 0x1028a96
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x658], 1
jmp 0x1028a96
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x658], edi
jmp 0x1028a96
xor eax, eax
inc eax
cmp word [ebp - 0x2c], ax
jne 0x1028a46
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x658], eax
jmp 0x1028a96
cmp eax, 0x80041002
je 0x1028a96
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp dword [ebp - 0x10], edi
jl 0x1028e5b
mov eax, dword [ebp + 8]
and eax, 0x100
xor ecx, ecx
or eax, ecx
je 0x1028b32
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
lea edx, [ebp + 0x14]
push edx
lea edx, [ebp - 0x1c]
push edx
lea edx, [ebp - 0x2c]
push edx
push edi
push dword [0x1036090]
mov dword [ebp - 0x1c], edi
push eax
mov dword [ebp + 0x14], edi
call dword [ecx + 0x10]
cmp eax, edi
jl 0x1028b1e
cmp word [ebp - 0x2c], 0xb
jne 0x1028b03
mov ecx, dword [ebp - 0x14]
xor eax, eax
cmp word [ebp - 0x24], 0xffff
sete al
mov dword [ecx + 0x65c], eax
jmp 0x1028b28
cmp word [ebp - 0x2c], 1
jne 0x1028b15
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x65c], edi
jmp 0x1028b28
mov dword [ebp - 0x10], 0x80041012
jmp 0x1028b28
cmp eax, 0x80041002
je 0x1028b28
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp dword [ebp - 0x10], edi
jl 0x1028e5b
mov eax, dword [ebp + 8]
and eax, 0x200
xor ecx, ecx
or eax, ecx
je 0x1028bc4
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
lea edx, [ebp + 0x14]
push edx
lea edx, [ebp - 0x1c]
push edx
lea edx, [ebp - 0x2c]
push edx
push edi
push dword [0x1036094]
mov dword [ebp - 0x1c], edi
push eax
mov dword [ebp + 0x14], edi
call dword [ecx + 0x10]
cmp eax, edi
jl 0x1028bb0
cmp word [ebp - 0x2c], 0xb
jne 0x1028b95
mov ecx, dword [ebp - 0x14]
xor eax, eax
cmp word [ebp - 0x24], 0xffff
sete al
mov dword [ecx + 0x660], eax
jmp 0x1028bba
cmp word [ebp - 0x2c], 1
jne 0x1028ba7
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x660], edi
jmp 0x1028bba
mov dword [ebp - 0x10], 0x80041012
jmp 0x1028bba
cmp eax, 0x80041002
je 0x1028bba
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp dword [ebp - 0x10], edi
jl 0x1028e5b
mov eax, dword [ebp + 8]
and eax, 0x400
xor ecx, ecx
or eax, ecx
je 0x1028c56
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
lea edx, [ebp + 0x14]
push edx
lea edx, [ebp - 0x1c]
push edx
lea edx, [ebp - 0x2c]
push edx
push edi
push dword [0x1036098]
mov dword [ebp - 0x1c], edi
push eax
mov dword [ebp + 0x14], edi
call dword [ecx + 0x10]
cmp eax, edi
jl 0x1028c42
cmp word [ebp - 0x2c], 0xb
jne 0x1028c27
mov ecx, dword [ebp - 0x14]
xor eax, eax
cmp word [ebp - 0x24], 0xffff
sete al
mov dword [ecx + 0x664], eax
jmp 0x1028c4c
cmp word [ebp - 0x2c], 1
jne 0x1028c39
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x664], edi
jmp 0x1028c4c
mov dword [ebp - 0x10], 0x80041012
jmp 0x1028c4c
cmp eax, 0x80041002
je 0x1028c4c
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp dword [ebp - 0x10], edi
jl 0x1028e5b
mov eax, dword [ebp + 8]
mov esi, 0x800
and eax, esi
xor ecx, ecx
or eax, ecx
je 0x1028ced
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
lea edx, [ebp + 0x14]
push edx
lea edx, [ebp - 0x1c]
push edx
lea edx, [ebp - 0x2c]
push edx
push edi
push dword [0x103609c]
mov dword [ebp - 0x1c], edi
push eax
mov dword [ebp + 0x14], edi
call dword [ecx + 0x10]
cmp eax, edi
mov ebx, dword [ebp - 0x14]
jl 0x1028cd7
cmp word [ebp - 0x2c], 0xb
jne 0x1028cbb
xor eax, eax
cmp word [ebp - 0x24], 0xffff
sete al
mov dword [ebx + 0x674], eax
jmp 0x1028ce1
cmp word [ebp - 0x2c], 1
jne 0x1028cce
mov dword [ebx + 0x674], 1
jmp 0x1028ce1
mov dword [ebp - 0x10], 0x80041012
jmp 0x1028ce1
cmp eax, 0x80041002
je 0x1028ce1
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x1028cf0
mov ebx, dword [ebp - 0x14]
cmp dword [ebp - 0x10], edi
jl 0x1028e5b
mov eax, dword [ebp + 8]
and eax, 0x1000
xor ecx, ecx
or eax, ecx
je 0x1028da8
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
lea edx, [ebp + 0x14]
push edx
lea edx, [ebp - 0x1c]
push edx
lea edx, [ebp - 0x2c]
push edx
push edi
push dword [0x10360a0]
mov dword [ebp - 0x1c], edi
push eax
mov dword [ebp + 0x14], edi
call dword [ecx + 0x10]
cmp eax, edi
jl 0x1028d94
cmp word [ebp - 0x2c], 8
jne 0x1028d6f
lea eax, [ebx + 0x684]
push eax
lea eax, [ebx + 0x67c]
push eax
lea eax, [ebx + 0x678]
push eax
push dword [ebp - 0x24]
call fcn.01027dd0
cmp eax, edi
mov dword [ebp - 0x10], eax
jge 0x1028d9e
mov dword [ebp - 0x10], 0x80041012
jmp 0x1028d9e
cmp word [ebp - 0x2c], 1
jne 0x1028d66
push str.DefaultLocalSystemHost
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
cmp eax, edi
mov dword [ebx + 0x67c], eax
jne 0x1028d9e
mov dword [ebp - 0x10], 0x80041006
jmp 0x1028d9e
cmp eax, 0x80041002
je 0x1028d9e
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp dword [ebp - 0x10], edi
jl 0x1028e5b
mov eax, dword [ebx + 0x678]
cmp eax, 4
je 0x1028dcd
cmp eax, 0xa
je 0x1028dcd
cmp dword [ebx + 0x28], edi
jne 0x1028dcd
mov dword [ebp - 0x10], 0x80041012
cmp dword [ebp - 0x10], edi
jl 0x1028e5b
mov ecx, dword [ebp + 0xc]
and ecx, esi
xor eax, eax
or eax, ecx
je 0x1028e5b
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
lea edx, [ebp + 0x14]
push edx
lea edx, [ebp + 0xc]
push edx
lea edx, [ebp - 0x2c]
push edx
push edi
push dword [0x10360cc]
mov dword [ebp + 0xc], edi
push eax
mov dword [ebp + 0x14], edi
call dword [ecx + 0x10]
cmp eax, edi
jl 0x1028e47
cmp word [ebp - 0x2c], 8
jne 0x1028e38
push edi
add ebx, 0x6e0
push ebx
push 1
push dword [ebp - 0x24]
call dword [sym.imp.ADVAPI32.dll_ConvertStringSecurityDescriptorToSecurityDescriptorW]
test eax, eax
jne 0x1028e51
mov dword [ebp - 0x10], 0x80041012
jmp 0x1028e51
cmp word [ebp - 0x2c], 1
jne 0x1028e2f
mov dword [ebx + 0x6e0], edi
jmp 0x1028e51
cmp eax, 0x80041002
je 0x1028e51
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x10]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 0x10